Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/57gzlPnVPKIY0GYzOU9VpPYsNHA.roa
File: 57gzlPnVPKIY0GYzOU9VpPYsNHA.roa (raw, json)
Hash identifier: EEtMegL3Q9dm8CulJaJ/FEGyQoAWvLZ4SCMmDyE4Qcc=
Subject key identifier: E7:B8:33:94:F9:D5:3C:A2:18:D0:66:33:39:4F:55:A4:F6:2C:34:70
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019424B380DE7F8C17E3F966D77F9AFCAD51
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/57gzlPnVPKIY0GYzOU9VpPYsNHA.roa
Signing time: Thu 02 Jan 2025 01:48:51 +0000
ROA not before: Thu 02 Jan 2025 01:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59441
IP address blocks: 62.60.128.0/21 maxlen: 24
62.60.164.0/22 maxlen: 24
62.60.200.0/22 maxlen: 24
62.60.204.0/22 maxlen: 24
62.60.208.0/22 maxlen: 24
62.60.212.0/22 maxlen: 24
213.176.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:80:de:7f:8c:17:e3:f9:66:d7:7f:9a:fc:ad:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 01:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7b83394f9d53ca218d06633394f55a4f62c3470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:da:2c:3c:ae:a4:09:3f:8d:70:b9:87:b7:
15:47:f6:58:cf:b9:5e:ce:0d:14:83:df:17:0e:e0:
ba:f9:5c:dc:f4:47:68:ef:e0:4c:3e:9f:db:9e:33:
45:d3:d1:86:06:46:07:8e:a5:19:84:cd:36:74:d9:
84:1d:8f:83:71:2b:dd:b0:16:dc:c2:5f:07:d5:e0:
ca:04:78:67:bd:23:be:01:04:01:f5:9b:ff:16:53:
51:3f:1c:62:c1:bf:95:0d:57:bb:17:84:cc:89:45:
3f:3b:1d:1a:38:0a:1a:43:23:c4:75:4a:e0:fb:41:
86:6a:cc:04:cb:4d:e9:cd:9a:05:e3:49:c1:46:9f:
3a:94:40:97:f8:be:2e:9b:c2:d2:75:3d:fc:0d:89:
d1:c2:4a:cb:eb:41:5d:2f:26:cf:40:32:78:c9:b8:
c7:74:1d:12:9e:6d:64:7f:c9:2c:30:4d:9b:6a:df:
92:4a:fd:f4:c3:bd:a2:d6:4f:48:3b:ed:6b:f1:ce:
d1:d3:58:4d:bb:e5:31:73:2e:46:e1:27:90:32:b2:
52:79:be:29:6a:c4:7a:f3:d0:f2:b0:22:46:4b:da:
7e:f1:fc:e4:6e:3f:7b:d4:36:39:ba:a7:a5:25:9c:
8f:16:56:39:46:ee:8f:85:06:ce:c0:01:85:a8:8c:
c6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B8:33:94:F9:D5:3C:A2:18:D0:66:33:39:4F:55:A4:F6:2C:34:70
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/57gzlPnVPKIY0GYzOU9VpPYsNHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.128.0/21
62.60.164.0/22
62.60.200.0-62.60.215.255
213.176.28.0/22
Signature Algorithm: sha256WithRSAEncryption
26:1c:2e:a4:48:36:5c:a2:d1:d4:a7:c8:e3:95:82:d8:93:46:
a6:18:76:b1:1a:cc:3e:4d:16:d4:89:8c:f9:d6:59:7e:71:b5:
2f:48:ba:36:51:b6:93:fa:30:b1:15:c5:30:b7:3b:35:16:28:
b9:bd:27:72:4e:06:4b:b5:7c:27:df:76:98:a1:fa:b4:43:4f:
2a:e1:bf:89:14:f8:bb:5f:e8:0c:73:a4:5f:ab:5b:22:35:ea:
68:89:f8:26:c8:cc:93:c5:5e:70:ea:45:8d:ec:e8:79:f9:d6:
ae:7c:c3:5a:26:ed:de:e9:26:dc:60:98:1e:18:f2:fa:f0:ed:
09:c8:d4:3a:83:8d:16:9c:83:78:62:e3:c2:e0:7c:04:8b:ed:
9a:cd:6e:0d:ad:d9:ae:00:b4:e3:f9:dd:12:90:f4:92:97:02:
13:7a:1d:1b:57:06:78:fb:f6:92:f4:6d:ee:75:2e:38:b7:f3:
39:d7:3e:80:ad:d3:af:14:6e:74:56:6b:f1:6a:1c:96:bd:6d:
88:bc:ba:b0:98:33:d2:03:49:c6:7c:f8:e2:3e:ee:8f:cb:27:
92:07:3f:66:5f:2f:33:8e:4a:ee:ac:7d:de:50:8c:8a:ce:f5:
26:a0:94:66:56:94:05:8e:db:38:5b:ea:26:42:47:63:ce:1c:
1b:d4:67:9a
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZQks4Def4wX4/lm13+a/K1RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjUwMTAyMDE0ODUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2I4MzM5NGY5ZDUzY2EyMThkMDY2MzMzOTRmNTVhNGY2MmMzNDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVnaLDyupAk/jXC5h7cVR/ZYz7le
zg0Ug98XDuC6+Vzc9Edo7+BMPp/bnjNF09GGBkYHjqUZhM02dNmEHY+DcSvdsBbc
wl8H1eDKBHhnvSO+AQQB9Zv/FlNRPxxiwb+VDVe7F4TMiUU/Ox0aOAoaQyPEdUrg
+0GGaswEy03pzZoF40nBRp86lECX+L4um8LSdT38DYnRwkrL60FdLybPQDJ4ybjH
dB0Snm1kf8ksME2bat+SSv30w72i1k9IO+1r8c7R01hNu+Uxcy5G4SeQMrJSeb4p
asR689DysCJGS9p+8fzkbj971DY5uqelJZyPFlY5Ru6PhQbOwAGFqIzG8QIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFOe4M5T51TyiGNBmMzlPVaT2LDRwMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvNTdnemxQblZQS0lZMEdZek9VOVZwUFlzTkhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQDPjyAAwQC
PjykMAwDBAM+PMgDBAM+PNADBALVsBwwDQYJKoZIhvcNAQELBQADggEBACYcLqRI
Nlyi0dSnyOOVgtiTRqYYdrEazD5NFtSJjPnWWX5xtS9IujZRtpP6MLEVxTC3OzUW
KLm9J3JOBku1fCffdpih+rRDTyrhv4kU+Ltf6AxzpF+rWyI16miJ+CbIzJPFXnDq
RY3s6Hn51q58w1om7d7pJtxgmB4Y8vrw7QnI1DqDjRacg3hi48LgfASL7ZrNbg2t
2a4AtOP53RKQ9JKXAhN6HRtXBnj79pL0be51Lji38znXPoCt068UbnRWa/FqHJa9
bYi8urCYM9IDScZ8+OI+7o/LJ5IHP2ZfLzOOSu6sfd5QjIrO9SaglGZWlAWO2zhb
6iZCR2POHBvUZ5o=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:26 2025 by rpki-client