Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/F5kjWicSlQTwKIqWM86RFtE-p4w.roa
File: F5kjWicSlQTwKIqWM86RFtE-p4w.roa (raw, json)
Hash identifier: 4vvXqhfGCeQJhiAnWPhlhnUs5slWJw4H4RKbqTyt8VM=
Subject key identifier: 17:99:23:5A:27:12:95:04:F0:28:8A:96:33:CE:91:16:D1:3E:A7:8C
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019424B3823BEBCDD6EEFEBD40FFF7D62B7A
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/F5kjWicSlQTwKIqWM86RFtE-p4w.roa
Signing time: Thu 02 Jan 2025 01:48:51 +0000
ROA not before: Thu 02 Jan 2025 01:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64458
IP address blocks: 62.60.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:82:3b:eb:cd:d6:ee:fe:bd:40:ff:f7:d6:2b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 01:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1799235a27129504f0288a9633ce9116d13ea78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cd:77:77:7c:5b:43:56:f0:d2:d1:e4:d1:65:
70:fd:c2:01:de:b1:b0:5a:b1:5a:ea:de:b4:7a:4f:
57:ea:94:b6:51:e4:32:d5:05:fc:c0:da:8f:5f:ad:
71:e4:df:34:ac:32:90:d0:ff:4b:79:0a:e7:78:bb:
39:17:81:3a:21:78:e3:aa:80:dc:f4:ad:d2:2d:1f:
b4:56:43:36:8b:94:c6:39:ac:84:c5:2c:cd:47:b7:
f6:c9:c5:71:1e:1a:b7:25:04:ef:94:c8:50:f4:90:
11:69:51:40:fc:c6:47:2c:79:36:d1:40:29:d0:3e:
6c:38:8a:88:bd:25:45:20:a7:5d:ac:3c:63:c8:89:
19:33:f4:27:48:8d:b4:ef:9d:2f:91:88:01:0e:98:
df:19:ad:8a:60:2c:12:60:42:60:a9:fb:72:76:cd:
32:97:20:83:c3:9f:c5:cc:77:23:84:b5:a3:48:83:
9a:2c:0b:27:7c:9e:0e:a4:94:34:98:4b:b2:9e:c8:
f4:25:b7:c5:0c:df:81:b2:8e:29:cc:69:f2:ac:ad:
dd:ad:d1:eb:d6:60:9a:09:08:73:d2:f4:c1:c6:38:
9c:98:4e:0f:36:66:20:3f:98:4f:e5:8d:9b:29:d0:
f3:0e:1c:9c:18:25:a2:ea:e3:e4:18:aa:87:89:0a:
12:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:99:23:5A:27:12:95:04:F0:28:8A:96:33:CE:91:16:D1:3E:A7:8C
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/F5kjWicSlQTwKIqWM86RFtE-p4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.180.0/22
Signature Algorithm: sha256WithRSAEncryption
13:e9:9e:a1:91:c0:9e:fc:23:4e:16:47:48:ca:ce:d8:c5:17:
0f:de:ef:66:42:d6:0e:35:66:7b:65:e5:08:bb:7e:a1:1e:b4:
06:60:49:c0:6a:b3:08:47:e0:5e:42:c5:68:c0:7e:df:b2:58:
2f:2b:6d:d4:26:08:b9:2a:01:f8:55:63:79:d2:69:76:c5:dc:
f3:08:e2:51:c2:24:60:77:f4:6f:76:43:6f:fc:74:a1:bc:f6:
ba:f6:17:4e:ff:64:04:d0:4c:5f:83:4b:1c:c5:d6:7f:f4:9f:
af:9a:d4:aa:9c:7e:3d:cb:1b:87:24:dc:a9:b0:e2:18:47:9a:
24:3f:89:64:39:a5:30:a4:ff:ae:f6:d1:da:69:0a:4a:ae:50:
73:2d:4f:e2:04:b7:cf:8f:0f:f3:c8:0f:5a:0d:fb:6b:b5:6d:
f9:94:a5:eb:9d:ef:a6:1c:03:c8:54:68:b8:79:37:74:c0:f5:
22:f6:23:84:b2:90:97:b0:61:6e:7f:4d:c4:3a:52:a5:d5:91:
05:80:76:c2:9a:13:8c:e3:ca:bc:32:3d:88:3a:20:23:91:5c:
0c:b4:f6:3c:9f:5e:a5:68:9b:f9:ed:c0:24:54:63:9b:3e:6a:
89:d3:00:b7:44:75:2e:9e:4a:ab:8e:fa:a0:15:3f:dd:31:b6:
b7:6d:8e:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks4I7683W7v69QP/31it6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjUwMTAyMDE0ODUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzk5MjM1YTI3MTI5NTA0ZjAyODhhOTYzM2NlOTExNmQxM2VhNzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs13d3xbQ1bw0tHk0WVw/cIB3rGw
WrFa6t60ek9X6pS2UeQy1QX8wNqPX61x5N80rDKQ0P9LeQrneLs5F4E6IXjjqoDc
9K3SLR+0VkM2i5TGOayExSzNR7f2ycVxHhq3JQTvlMhQ9JARaVFA/MZHLHk20UAp
0D5sOIqIvSVFIKddrDxjyIkZM/QnSI20750vkYgBDpjfGa2KYCwSYEJgqftyds0y
lyCDw5/FzHcjhLWjSIOaLAsnfJ4OpJQ0mEuynsj0JbfFDN+Bso4pzGnyrK3drdHr
1mCaCQhz0vTBxjicmE4PNmYgP5hP5Y2bKdDzDhycGCWi6uPkGKqHiQoSzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBeZI1onEpUE8CiKljPOkRbRPqeMMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvRjVraldpY1NsUVR3S0lxV004NlJGdEUtcDR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPjy0MA0G
CSqGSIb3DQEBCwUAA4IBAQAT6Z6hkcCe/CNOFkdIys7YxRcP3u9mQtYONWZ7ZeUI
u36hHrQGYEnAarMIR+BeQsVowH7fslgvK23UJgi5KgH4VWN50ml2xdzzCOJRwiRg
d/RvdkNv/HShvPa69hdO/2QE0Exfg0scxdZ/9J+vmtSqnH49yxuHJNypsOIYR5ok
P4lkOaUwpP+u9tHaaQpKrlBzLU/iBLfPjw/zyA9aDftrtW35lKXrne+mHAPIVGi4
eTd0wPUi9iOEspCXsGFuf03EOlKl1ZEFgHbCmhOM48q8Mj2IOiAjkVwMtPY8n16l
aJv57cAkVGObPmqJ0wC3RHUunkqrjvqgFT/dMba3bY5D
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:00:15 2025 by rpki-client