Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/2t8AWeWHvL4TNO5yqThHz2zjyz4.roa
File: 2t8AWeWHvL4TNO5yqThHz2zjyz4.roa (raw, json)
Hash identifier: Un0jerBIsw+sO0g1OhtfvrISwfcOFSqCCFGhLB5rhlk=
Subject key identifier: DA:DF:00:59:E5:87:BC:BE:13:34:EE:72:A9:38:47:CF:6C:E3:CB:3E
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0194782FD00DD36C73684EB482C334DBAD53
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/2t8AWeWHvL4TNO5yqThHz2zjyz4.roa
Signing time: Sat 18 Jan 2025 06:53:06 +0000
ROA not before: Sat 18 Jan 2025 06:53:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.240.0/22 maxlen: 24
62.60.252.0/22 maxlen: 24
213.176.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:78:2f:d0:0d:d3:6c:73:68:4e:b4:82:c3:34:db:ad:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 18 06:53:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dadf0059e587bcbe1334ee72a93847cf6ce3cb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:79:95:b9:61:b2:5f:1b:cb:4e:79:f6:87:
43:55:23:60:b2:d2:b5:75:e2:e3:b9:73:64:1c:72:
10:78:83:b3:83:40:29:cb:12:d3:39:58:74:00:56:
6d:52:d7:05:4e:4e:ef:8d:04:38:18:c7:cd:16:c3:
45:ac:e8:d5:0f:8c:e4:05:14:33:d1:12:51:47:ab:
c0:54:49:d9:b9:96:9f:15:c1:31:79:64:da:ae:4a:
39:81:3f:9e:7d:7b:05:3a:e0:7f:7c:fa:e0:e6:1c:
26:8b:00:41:c6:60:a7:07:4a:9a:37:bd:bc:a4:b8:
47:d9:97:f5:e3:7d:20:28:f1:82:64:c8:9e:2c:8f:
17:d9:40:7a:28:86:2c:20:d4:9b:e9:4a:30:34:ae:
1d:45:08:83:e9:4d:ff:76:c5:d5:22:28:4b:04:93:
2f:9e:5d:85:1d:c8:dc:ea:52:93:6a:83:c2:a0:1e:
1e:09:aa:f0:0f:f7:ee:54:de:7b:f4:bf:21:5f:a9:
34:87:9d:26:8b:11:4a:c9:5e:6d:a7:6d:b0:23:75:
ac:c2:76:22:31:a5:e3:0e:72:85:ff:63:41:66:23:
32:4e:97:57:86:17:af:60:c6:7e:d5:81:d5:f2:6b:
fe:99:74:29:48:35:a2:b7:91:37:ef:68:78:94:d4:
48:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DF:00:59:E5:87:BC:BE:13:34:EE:72:A9:38:47:CF:6C:E3:CB:3E
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/2t8AWeWHvL4TNO5yqThHz2zjyz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.240.0/22
62.60.252.0/22
213.176.116.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:04:59:6e:91:cd:f1:2a:c7:3d:12:45:0f:29:25:27:d3:f9:
8c:12:96:45:f9:6c:67:56:b5:7a:2d:01:59:37:df:7a:f9:4c:
6b:3d:32:92:e6:59:d6:d6:39:e0:96:25:5e:19:c1:93:9f:72:
60:4e:42:80:b1:8d:c9:04:2e:38:26:8f:a8:6e:21:5e:cb:b5:
c5:2f:34:73:6c:05:ec:60:63:ef:26:dc:48:83:00:66:cc:62:
25:a8:06:02:00:a9:c5:a5:cb:4c:fb:2f:53:8e:f0:4d:cb:34:
8b:68:70:b8:3f:aa:c2:b8:0f:a3:5d:05:ed:b2:35:20:41:ae:
79:6f:6a:e9:51:5b:2b:98:a1:a3:ef:6d:24:b2:f8:f0:f8:92:
92:92:60:5e:66:80:92:b5:5b:4d:0c:57:06:a2:76:0e:ca:63:
ac:34:3c:3e:54:2e:b0:01:cf:d7:8d:dd:ec:7c:67:cc:6b:8a:
f8:6f:16:2e:31:53:48:aa:ef:65:11:1f:8f:36:0d:63:fd:be:
21:e8:0f:06:7e:e6:89:d7:c7:8d:bb:8e:57:fb:9d:7d:aa:10:
46:49:f2:c2:14:42:c2:76:d7:a3:00:03:7b:fa:2f:83:61:6d:
8e:ce:fa:36:aa:92:3e:a8:fa:33:90:b8:cd:ef:44:02:9e:86:
70:f0:3c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:05:20 2025 by rpki-client