Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/K4_8nfWDC-A3qoLYXk4mLlw5BEo.roa
File: K4_8nfWDC-A3qoLYXk4mLlw5BEo.roa (raw, json)
Hash identifier: lvtSb5cTk7u24Xu7TY94j/yWXqZpcz9WUL9VBo495JQ=
Subject key identifier: 2B:8F:FC:9D:F5:83:0B:E0:37:AA:82:D8:5E:4E:26:2E:5C:39:04:4A
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0195690E9C5A2A8630FB3136900E806019AA
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/K4_8nfWDC-A3qoLYXk4mLlw5BEo.roa
Signing time: Thu 06 Mar 2025 01:25:20 +0000
ROA not before: Thu 06 Mar 2025 01:25:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211904
IP address blocks: 62.60.193.0/24 maxlen: 24
213.176.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:69:0e:9c:5a:2a:86:30:fb:31:36:90:0e:80:60:19:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Mar 6 01:25:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b8ffc9df5830be037aa82d85e4e262e5c39044a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:ff:76:5b:d9:35:20:17:73:f7:06:df:d1:
e8:3f:c8:be:8f:6d:08:fa:2d:c1:8b:65:6e:81:46:
43:4a:e3:a2:1c:0c:04:f0:c0:c9:e1:5f:3c:63:a5:
c9:5f:fd:2f:18:a4:4c:f6:5c:04:1d:4c:05:10:14:
40:83:49:40:38:e8:68:db:cc:b1:7d:ff:68:c6:b4:
4a:0c:42:0c:59:4f:8e:75:c0:4c:e9:b2:f7:50:ff:
1a:95:fc:ba:2a:2f:1c:5d:a7:e1:65:6a:e6:5f:d7:
c5:db:88:46:19:73:59:5b:c4:22:5f:7b:ce:34:23:
a7:ce:3e:96:d7:2f:83:c2:3c:17:6e:61:79:35:e6:
eb:46:21:63:55:96:f5:a3:58:98:af:3c:36:4c:dd:
e1:e0:dd:01:93:09:90:15:8b:01:e1:df:61:8c:6b:
85:55:2b:f1:6b:87:06:c0:e8:6e:f2:7b:f1:06:bf:
04:2a:87:1e:d2:08:38:e3:29:92:c0:5f:64:8f:c9:
98:7e:85:be:40:3a:5b:cf:17:56:0f:ff:17:96:0b:
8a:b9:c8:e7:08:b9:42:51:fb:e6:6d:18:f2:b1:e2:
77:d2:31:05:de:16:77:98:45:f6:e8:66:e3:4c:ae:
c3:bf:9e:3e:eb:2d:ba:3d:33:4a:5a:07:64:e3:2d:
33:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8F:FC:9D:F5:83:0B:E0:37:AA:82:D8:5E:4E:26:2E:5C:39:04:4A
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/K4_8nfWDC-A3qoLYXk4mLlw5BEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.193.0/24
213.176.1.0/24
Signature Algorithm: sha256WithRSAEncryption
21:92:d8:12:fd:de:a0:a4:9d:b1:0e:e5:90:df:8f:69:ae:99:
91:6d:e1:15:0f:ff:bc:f2:a9:9d:82:1e:a3:b1:c9:b4:05:f7:
68:a2:a4:3f:30:9a:5a:a6:ee:cf:35:bb:6c:c3:db:d6:bc:49:
fd:6e:39:3f:18:c9:53:34:47:61:9c:97:c5:7f:3b:70:f3:d7:
34:1e:a2:3e:89:8a:88:09:c4:3b:0d:65:0e:47:cd:23:05:6a:
51:fe:1b:6c:08:f3:34:cd:91:0f:54:21:dd:7a:44:e4:1a:37:
12:61:19:5a:d2:d7:c9:a8:e8:d7:f4:5c:1a:b7:a1:4e:e9:ea:
e7:2f:22:e9:17:e6:b7:25:36:d3:81:0f:45:34:80:f8:65:0b:
b5:5c:8f:d1:fe:83:ff:85:b1:27:e0:5c:d8:b9:aa:32:6a:f9:
08:7a:91:c7:ff:3b:f1:39:c2:bd:80:61:76:68:56:18:db:a2:
65:bc:32:04:fd:e4:13:d5:09:cd:c6:bb:2b:e1:b3:c3:7e:0b:
56:94:da:e1:5d:f6:05:56:2b:87:d6:bf:83:d9:ff:dc:47:f4:
e4:7f:f9:a8:fc:d2:24:e1:70:b1:b7:8c:8c:1a:ef:66:45:9f:
9b:eb:62:72:ff:6c:62:db:76:8e:04:70:64:01:00:63:2a:00:
bd:6e:33:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:13:26 2025 by rpki-client