Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/DsHpsql9Cw09IWN78UdVVB5XhEQ.roa
File: DsHpsql9Cw09IWN78UdVVB5XhEQ.roa (raw, json)
Hash identifier: nNtfkwQSOiO9ewgAUslep+h/ZTPYdY+go0JuycHz7IY=
Subject key identifier: 0E:C1:E9:B2:A9:7D:0B:0D:3D:21:63:7B:F1:47:55:54:1E:57:84:44
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019424B38C05BFA07A192FEE4DBA348F0CB2
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/DsHpsql9Cw09IWN78UdVVB5XhEQ.roa
Signing time: Thu 02 Jan 2025 01:48:54 +0000
ROA not before: Thu 02 Jan 2025 01:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215633
IP address blocks: 62.60.141.0/24 maxlen: 24
62.60.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:8c:05:bf:a0:7a:19:2f:ee:4d:ba:34:8f:0c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 01:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ec1e9b2a97d0b0d3d21637bf14755541e578444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4a:31:2e:06:0e:d1:9f:ec:51:a1:a2:68:12:
fb:dd:f5:c2:c0:77:d2:9b:ef:11:a7:88:7b:79:50:
22:19:e3:bf:00:83:fa:71:56:72:fb:51:d8:80:49:
2c:e5:0d:8e:f6:02:ea:95:2b:bc:5e:ba:bf:86:4f:
c5:0a:11:64:4c:8a:39:55:69:de:de:4e:bb:84:b4:
b4:9b:cc:3b:cf:c3:db:39:9b:5d:72:90:90:83:3a:
8f:21:48:e7:59:a3:7a:a9:4a:43:26:db:13:8b:9f:
f2:75:f8:fd:e1:db:6f:3a:18:c0:45:c1:ba:50:16:
dc:8f:f3:81:2d:ed:cd:74:58:0d:2e:b0:80:e8:4a:
b8:26:81:c7:1f:c9:97:7a:0b:85:1a:bd:6c:13:96:
04:45:ab:b0:6c:4e:53:17:5a:8b:08:06:61:20:84:
9c:55:c8:5a:ac:e9:4c:0f:83:84:00:e3:13:bb:8d:
18:62:1b:f5:50:c3:55:ea:e1:4c:0e:a9:3f:26:59:
0f:1c:0b:39:64:16:13:f5:8d:59:68:06:aa:5d:a1:
2f:68:96:61:a3:55:68:ac:53:8c:b0:f2:e4:66:ac:
37:99:71:f7:09:56:e9:15:22:d7:52:4d:48:0d:f2:
a2:f9:0e:2c:3a:7d:41:23:e8:74:d1:47:42:e1:f9:
f8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C1:E9:B2:A9:7D:0B:0D:3D:21:63:7B:F1:47:55:54:1E:57:84:44
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/DsHpsql9Cw09IWN78UdVVB5XhEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.141.0/24
62.60.146.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:73:e9:31:8e:5f:1c:ae:c1:cf:ab:0e:09:4c:19:9a:d6:ee:
5b:cc:52:eb:20:92:43:25:69:a9:74:f8:8e:cb:c7:93:98:2c:
14:88:a6:fb:bb:a0:ee:ee:e6:a4:af:7c:37:26:43:59:8a:97:
64:87:a6:cb:0f:05:57:71:f0:11:f1:75:d7:6b:d2:00:a8:5f:
60:2b:26:39:71:e4:86:0a:a2:7f:bd:38:03:f9:07:48:42:be:
b1:5c:ec:f5:d8:86:e5:0d:30:c0:26:42:38:09:49:48:d9:a6:
33:fe:0d:4b:4f:43:63:2d:f4:2c:5c:f6:52:3b:f3:38:ad:45:
a5:eb:c6:45:42:f7:14:6e:5e:c7:e6:ff:b4:ca:80:b7:4a:df:
1b:85:c2:f3:67:43:a5:b4:24:20:bd:69:70:c1:9c:4e:0f:ff:
82:2d:62:40:24:f5:1b:97:e0:1d:72:c4:54:c4:8e:f9:4d:69:
cc:a9:5b:ac:81:af:ca:c8:4a:7a:57:1c:9a:6d:79:44:04:d0:
b2:3e:bf:a5:33:b3:b8:3c:88:8c:06:5c:0a:43:43:71:47:9d:
48:79:c3:82:ee:f5:46:3b:a9:ef:3b:bc:55:d7:75:4d:d9:28:
f2:dd:34:12:5b:d9:a5:5e:8e:03:41:67:ba:cf:85:0a:74:b4:
2c:66:0b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:19 2025 by rpki-client