Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/K5Sg08Itk9DGrzZuohXAFyM4VfE.roa
File: K5Sg08Itk9DGrzZuohXAFyM4VfE.roa (raw, json)
Hash identifier: QHEVujagPVNw/drBMaf8KaIcUTlmOs1//IuUE6O7mps=
Subject key identifier: 2B:94:A0:D3:C2:2D:93:D0:C6:AF:36:6E:A2:15:C0:17:23:38:55:F1
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01935281ABC2ED10F297ED3F6B0B27F5F6AA
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/K5Sg08Itk9DGrzZuohXAFyM4VfE.roa
Signing time: Fri 22 Nov 2024 06:14:10 +0000
ROA not before: Fri 22 Nov 2024 06:14:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 62.60.148.0/22 maxlen: 24
62.60.152.0/23 maxlen: 24
62.60.154.0/23 maxlen: 24
62.60.156.0/22 maxlen: 24
62.60.216.0/23 maxlen: 24
62.60.236.0/22 maxlen: 24
62.60.244.0/22 maxlen: 24
62.60.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:81:ab:c2:ed:10:f2:97:ed:3f:6b:0b:27:f5:f6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Nov 22 06:14:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b94a0d3c22d93d0c6af366ea215c017233855f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b4:76:ff:1a:ec:77:4c:10:d4:de:e7:96:dc:
6c:5b:cb:64:5f:cd:bb:0d:1f:1d:4c:9b:dc:f0:10:
8a:20:69:aa:c4:cb:8f:b9:61:1c:f9:03:28:cf:d3:
26:ba:20:04:fa:dc:51:61:06:bb:ed:b9:e3:c0:53:
b2:7f:ba:08:f7:fe:04:1d:2b:87:93:f0:ae:69:e1:
c0:d9:3d:aa:72:0a:f3:2f:71:12:55:f1:2f:9b:53:
25:62:c5:91:06:21:bb:df:c8:b5:dd:64:db:1e:62:
a4:44:62:13:62:62:30:d5:1e:b7:37:49:db:62:e6:
8b:7e:e8:bd:56:f4:8c:21:a5:d5:21:67:e2:39:ce:
16:bb:44:6f:49:1e:9e:f8:2d:f5:18:a4:2a:76:7c:
69:12:37:b7:33:6f:94:9a:d3:ac:c2:87:bc:a5:f5:
97:aa:96:e7:36:ab:e2:9c:d1:ae:c0:4d:0b:66:4a:
10:aa:8b:69:bd:0a:49:db:c2:12:fa:12:83:7f:8d:
3d:67:a2:54:84:8a:1c:3c:27:e9:0d:aa:53:de:8c:
23:d7:bd:06:c4:94:a3:3c:5f:3e:1f:18:5b:24:1d:
63:1c:52:06:42:df:8c:f8:3b:be:bb:1b:2e:40:5f:
9f:40:16:a9:17:da:63:1e:4c:4a:75:d0:32:b1:3d:
1d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:94:A0:D3:C2:2D:93:D0:C6:AF:36:6E:A2:15:C0:17:23:38:55:F1
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/K5Sg08Itk9DGrzZuohXAFyM4VfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.148.0-62.60.159.255
62.60.216.0/23
62.60.236.0/22
62.60.244.0-62.60.251.255
Signature Algorithm: sha256WithRSAEncryption
5b:2c:4b:fd:83:ed:07:e0:aa:a5:d3:48:02:00:03:fe:a8:52:
1b:66:ef:15:82:05:3e:7e:fa:bc:df:79:99:90:f2:47:34:db:
47:0d:a4:59:0a:98:02:a5:87:5c:cd:1b:52:40:41:3b:c1:94:
be:2e:c8:fc:d0:57:57:46:8c:19:ea:1d:37:de:7e:c1:2d:07:
0a:90:64:73:22:8b:1b:b4:c4:50:da:9c:b5:ff:fc:56:df:51:
3a:53:78:34:6a:c8:97:37:93:e6:77:a2:37:dc:ab:fa:67:31:
39:05:b5:a5:0a:1e:f5:5e:25:bc:d4:c0:02:8e:b3:e9:64:9b:
af:3f:24:bc:01:7b:4f:a9:e4:bf:13:57:0a:f9:a1:78:73:e0:
77:9d:51:1e:e7:21:70:63:eb:88:1b:a8:22:37:cc:20:fb:f6:
bf:3e:71:86:4e:f8:0c:98:4f:f0:0d:b6:dc:87:86:a1:d1:9e:
39:a0:35:9a:18:40:f1:40:a3:39:77:a9:42:70:18:ae:4f:25:
7e:d9:ee:37:ac:26:0c:d6:3b:3a:18:43:28:a8:06:8d:ba:0e:
2f:b6:01:c6:cd:87:e4:bb:81:19:7c:93:88:b8:1b:f4:7c:74:
db:43:53:4f:ae:6e:dd:dc:9f:65:11:5e:60:28:54:22:b9:80:
59:14:9d:83
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZNSgavC7RDyl+0/awsn9faqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQxMTIyMDYxNDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjk0YTBkM2MyMmQ5M2QwYzZhZjM2NmVhMjE1YzAxNzIzMzg1NWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLR2/xrsd0wQ1N7nltxsW8tkX827
DR8dTJvc8BCKIGmqxMuPuWEc+QMoz9MmuiAE+txRYQa77bnjwFOyf7oI9/4EHSuH
k/CuaeHA2T2qcgrzL3ESVfEvm1MlYsWRBiG738i13WTbHmKkRGITYmIw1R63N0nb
YuaLfui9VvSMIaXVIWfiOc4Wu0RvSR6e+C31GKQqdnxpEje3M2+UmtOswoe8pfWX
qpbnNqvinNGuwE0LZkoQqotpvQpJ28IS+hKDf409Z6JUhIocPCfpDapT3owj170G
xJSjPF8+HxhbJB1jHFIGQt+M+Du+uxsuQF+fQBapF9pjHkxKddAysT0d4QIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFCuUoNPCLZPQxq82bqIVwBcjOFXxMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvSzVTZzA4SXRrOURHcnpadW9oWEFGeU00VmZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAI+PJQD
BAU+PIADBAE+PNgDBAI+POwwDAMEAj489AMEAj48+DANBgkqhkiG9w0BAQsFAAOC
AQEAWyxL/YPtB+CqpdNIAgAD/qhSG2bvFYIFPn76vN95mZDyRzTbRw2kWQqYAqWH
XM0bUkBBO8GUvi7I/NBXV0aMGeodN95+wS0HCpBkcyKLG7TEUNqctf/8Vt9ROlN4
NGrIlzeT5neiN9yr+mcxOQW1pQoe9V4lvNTAAo6z6WSbrz8kvAF7T6nkvxNXCvmh
eHPgd51RHuchcGPriBuoIjfMIPv2vz5xhk74DJhP8A223IeGodGeOaA1mhhA8UCj
OXepQnAYrk8lftnuN6wmDNY7OhhDKKgGjboOL7YBxs2H5LuBGXyTiLgb9Hx020NT
T65u3dyfZRFeYChUIrmAWRSdgw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:07 2025 by rpki-client