Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/D9WAwvfVKxCKubi6sKnZ71kTFvs.roa
File: D9WAwvfVKxCKubi6sKnZ71kTFvs.roa (raw, json)
Hash identifier: VFLKJBHJ2bBPhwVut2OdEO29H/5nngK3xfX9LZQqz1Y=
Subject key identifier: 0F:D5:80:C2:F7:D5:2B:10:8A:B9:B8:BA:B0:A9:D9:EF:59:13:16:FB
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019424B37E9074CD6881BA97E6145281A747
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/D9WAwvfVKxCKubi6sKnZ71kTFvs.roa
Signing time: Thu 02 Jan 2025 01:48:50 +0000
ROA not before: Thu 02 Jan 2025 01:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55154
IP address blocks: 62.60.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:7e:90:74:cd:68:81:ba:97:e6:14:52:81:a7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 01:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0fd580c2f7d52b108ab9b8bab0a9d9ef591316fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:60:19:6e:e6:2b:95:03:c9:20:b2:d3:71:
2c:bd:ae:48:e8:00:30:6a:4d:61:81:95:9c:c0:a5:
cb:9a:bf:92:bb:1e:fe:85:a3:63:5d:dd:67:1e:b3:
78:f8:62:7b:72:23:3c:72:24:59:53:10:34:b6:74:
11:a5:5c:53:c1:69:5a:c1:00:62:7c:5a:51:bb:bb:
e5:a2:68:a8:a4:b2:6b:77:9b:42:0d:66:a8:c1:46:
40:9c:70:70:8a:ef:50:79:c0:7a:15:11:13:10:04:
33:ab:88:cb:86:a1:ef:32:d1:7a:04:94:d4:9b:1e:
93:7f:e7:fe:51:f2:82:41:65:b0:47:1c:d6:3a:d7:
cd:50:03:8b:23:20:0e:85:ed:54:91:79:87:f8:3a:
4c:91:c1:40:98:c9:f8:4d:dd:97:a3:fd:c8:ed:d8:
dd:b8:90:08:a1:e5:51:d6:f1:b5:cc:5a:00:dd:94:
d1:73:0c:cf:4f:d1:43:dc:00:1c:04:42:f8:4b:d8:
7f:6b:ef:14:d2:96:0c:a7:e4:db:51:64:7c:00:18:
99:00:04:e2:f8:e7:a4:ea:c6:91:1a:19:13:21:4f:
75:b5:7a:09:1b:29:46:34:1d:e3:f2:24:32:53:7d:
a3:a5:5f:20:d2:db:3e:75:ba:96:ad:98:4d:5e:1f:
da:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D5:80:C2:F7:D5:2B:10:8A:B9:B8:BA:B0:A9:D9:EF:59:13:16:FB
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/D9WAwvfVKxCKubi6sKnZ71kTFvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.150.0/24
Signature Algorithm: sha256WithRSAEncryption
83:01:9d:78:d2:cf:21:11:9d:7b:3e:c2:2d:73:0d:8f:24:f3:
1c:e7:45:33:39:96:38:eb:00:a9:ef:be:ca:a1:91:f9:49:b2:
d0:c9:61:d2:bc:f2:73:ed:0d:0b:10:44:a0:43:33:f2:a1:68:
62:a1:bf:fa:ba:c1:15:9f:bd:bf:3a:37:7d:79:eb:25:88:73:
f0:5a:59:a3:1b:df:8c:29:53:ef:2b:a7:38:c9:57:fe:59:d8:
28:0c:8e:bd:8e:8c:14:ba:c5:a4:fc:06:6c:e3:ea:8e:fe:9f:
fe:b7:76:9e:18:3d:74:0f:38:b0:62:82:b6:40:e0:f9:0c:b0:
e3:d0:46:8b:d9:81:88:0d:af:df:0d:2b:23:73:3c:e5:92:ac:
f9:86:72:d7:ae:84:0f:13:09:2a:2b:88:c3:23:50:72:16:35:
a8:ea:a5:fb:7a:7c:0b:bc:bf:d8:06:33:a8:ce:33:e5:6b:16:
f8:02:05:67:be:db:ea:d4:20:18:64:d3:c7:bd:82:90:4b:e4:
c3:66:6f:04:64:7c:48:74:1c:b4:d9:e8:d7:62:a1:38:05:e8:
4a:4a:6f:e4:83:f2:c1:48:c7:3c:ad:fd:83:be:19:f5:90:c4:
84:ce:8d:18:29:0b:e5:8d:ec:0b:de:ba:c1:44:b9:05:92:0f:
20:db:be:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:53:28 2025 by rpki-client