Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/9R3WnHf9QasgSQQ4KZoNt3TMvN4.roa
File: 9R3WnHf9QasgSQQ4KZoNt3TMvN4.roa (raw, json)
Hash identifier: m+TN1agUpMXmEF3q0NQth3kx/ePWQy4AZ969yGlc73g=
Subject key identifier: F5:1D:D6:9C:77:FD:41:AB:20:49:04:38:29:9A:0D:B7:74:CC:BC:DE
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019424B384AE55214DB6C504BCAA58304DC5
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/9R3WnHf9QasgSQQ4KZoNt3TMvN4.roa
Signing time: Thu 02 Jan 2025 01:48:52 +0000
ROA not before: Thu 02 Jan 2025 01:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201691
IP address blocks: 62.60.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:84:ae:55:21:4d:b6:c5:04:bc:aa:58:30:4d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 01:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f51dd69c77fd41ab20490438299a0db774ccbcde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c1:0d:18:93:b7:18:04:6c:ac:5d:f0:32:2c:
2d:60:f5:1a:0f:96:a7:53:d0:76:19:83:f4:11:13:
4f:d8:53:46:03:98:1a:b2:37:5c:46:87:6e:2c:94:
d6:a5:a2:55:45:dc:88:30:28:48:b7:a2:f0:9b:c2:
7a:5a:f5:c7:85:d6:7b:d0:84:a0:8b:7f:98:8f:7e:
dc:99:73:ee:e5:0d:25:a3:28:3e:de:9f:16:23:1e:
03:e6:e8:d2:58:a6:ff:ad:8c:8c:56:16:a8:ba:db:
78:2d:63:3c:23:76:ac:67:82:c5:26:68:5f:f2:88:
d0:67:a2:75:5d:d5:15:f8:35:31:0d:e0:a8:bd:d7:
bf:cf:d9:04:cc:2f:cb:50:cc:dc:61:5c:bf:27:22:
2e:25:54:84:7c:9f:58:54:f3:50:13:18:1d:fc:ed:
c3:10:f2:f3:ed:e1:ea:76:82:a0:43:44:80:df:d9:
78:8a:ef:3d:da:05:9b:f9:d2:ca:32:bb:54:fc:b9:
79:61:61:4b:e5:8d:fb:d2:b1:85:c9:81:31:cb:89:
58:46:15:2e:8f:a5:73:24:ee:1b:89:b4:28:0b:a1:
03:6f:3d:cb:53:e6:57:61:c3:ff:39:ce:98:78:93:
03:49:e9:6e:8a:de:a8:f0:5b:34:b6:16:87:f2:c4:
ba:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1D:D6:9C:77:FD:41:AB:20:49:04:38:29:9A:0D:B7:74:CC:BC:DE
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/9R3WnHf9QasgSQQ4KZoNt3TMvN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.166.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:b1:f0:37:46:9a:38:89:a9:b1:2e:47:be:d0:44:39:de:88:
a5:f9:70:ba:9f:5f:14:ed:77:64:77:dc:e8:3c:66:b1:b9:d1:
fc:58:e3:76:24:08:bf:05:e1:16:2a:e7:1e:6d:1f:7a:f2:73:
78:31:5a:09:a7:e6:cb:fb:68:a8:a4:8e:a7:46:ef:88:e3:69:
c8:83:c8:c2:72:53:79:c8:b3:9b:b3:37:b4:c5:bb:1f:58:bf:
8d:4b:77:21:22:67:4e:16:ca:c1:32:58:93:d5:f6:6e:83:cb:
66:ca:99:f8:26:1f:61:5e:c6:99:67:e4:00:3e:32:3c:33:05:
9a:ee:47:9d:ca:36:4d:e5:41:15:d3:0e:8e:11:b1:9b:e2:00:
47:11:4c:7a:53:d0:9b:31:13:9f:56:b1:98:78:f6:a8:99:b3:
26:70:c8:51:a9:67:0f:33:f9:e4:a2:b8:80:17:b1:0b:fd:10:
83:d2:8a:da:80:b1:5f:74:f5:25:23:9b:66:4a:18:fc:12:2e:
32:2e:da:f6:bc:ee:ee:d2:22:59:19:1c:e3:03:99:e0:3c:68:
b6:58:fc:8e:60:84:6d:d3:19:09:2d:76:5b:b3:3a:76:6f:6f:
de:e6:cc:7c:32:98:77:71:22:11:8e:0b:fc:80:d2:d5:af:ed:
15:bf:68:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:56:59 2025 by rpki-client