Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Na4iCZm_uDK7asQS9xFO71GXNBI.roa
File: Na4iCZm_uDK7asQS9xFO71GXNBI.roa (raw, json)
Hash identifier: WbiXcyxqxKpAHU98gKNvpAz743T5I4kehswDd1gx+8E=
Subject key identifier: 35:AE:22:09:99:BF:B8:32:BB:6A:C4:12:F7:11:4E:EF:51:97:34:12
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019424B37E2C21CB76F1F84D6BAC43133894
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Na4iCZm_uDK7asQS9xFO71GXNBI.roa
Signing time: Thu 02 Jan 2025 01:48:50 +0000
ROA not before: Thu 02 Jan 2025 01:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48147
IP address blocks: 62.60.162.0/24 maxlen: 24
62.60.196.0/22 maxlen: 24
62.60.222.0/23 maxlen: 24
213.176.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:7e:2c:21:cb:76:f1:f8:4d:6b:ac:43:13:38:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 01:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35ae220999bfb832bb6ac412f7114eef51973412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b0:70:f3:80:07:bc:7c:21:b7:fe:86:13:48:
d5:83:2f:6d:f7:66:8a:f8:0d:31:2c:dd:18:e9:75:
09:c0:51:58:1c:1a:c2:86:f8:5d:38:63:f3:60:fa:
79:eb:52:c2:0a:c3:1c:a0:40:1a:9c:3c:90:ea:34:
b4:89:a7:9f:3c:6a:a4:9a:90:69:19:67:ef:c0:84:
34:4c:c6:15:61:5d:05:77:64:9a:37:ad:0c:a1:c5:
e2:d2:c1:a2:96:5c:42:62:d8:7e:c9:0e:53:41:ca:
40:e8:56:4e:8e:92:e6:b8:87:0a:5b:9a:01:d0:10:
06:b4:6c:43:5f:2e:de:ff:3f:a5:41:c6:c2:70:49:
a6:1c:55:ae:03:46:7a:4e:66:f1:53:8d:c5:ee:45:
c8:53:16:c6:6b:77:4e:38:23:ea:24:ec:62:23:46:
96:4c:9a:f1:5a:19:be:95:d2:36:9d:62:01:c0:75:
62:c6:9f:eb:15:b6:fa:50:fc:bc:5a:e1:a0:de:b2:
15:b6:38:54:ae:09:df:f2:69:9e:bc:f6:e9:2d:2a:
80:a8:80:3f:ab:47:95:f5:f7:43:22:f5:04:d6:18:
34:85:bd:38:c4:4f:8d:b7:b5:fd:12:fb:9e:fa:4a:
3d:56:2c:20:32:7a:90:7f:7f:54:aa:01:c1:0c:2e:
84:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AE:22:09:99:BF:B8:32:BB:6A:C4:12:F7:11:4E:EF:51:97:34:12
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Na4iCZm_uDK7asQS9xFO71GXNBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.162.0/24
62.60.196.0/22
62.60.222.0/23
213.176.1.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:c6:89:63:fe:1b:39:73:a8:24:af:c6:5b:7a:a5:d9:a6:01:
fc:b3:0c:79:d7:cf:96:70:fd:f5:14:0c:bc:99:86:fb:f2:ae:
13:47:cc:11:00:4c:fb:f9:24:ce:6b:fe:95:fa:a0:8b:1f:e7:
f3:89:33:92:3c:f2:8e:d2:50:04:e4:55:b8:a7:f0:b1:8c:76:
f2:66:7a:f8:4c:fb:a9:e4:40:43:14:d4:e5:00:76:90:3e:41:
1c:8d:0e:db:7d:95:ea:67:c4:36:4c:6e:1b:48:de:93:4f:ee:
21:27:16:58:d3:da:f4:fb:47:eb:dd:59:86:55:b4:39:3a:78:
ee:82:0d:45:6b:3e:88:e9:a9:9d:05:41:7d:08:02:1e:9b:f9:
c8:b5:ba:82:a7:0b:c5:ff:2a:15:ed:d6:72:46:b7:bf:50:12:
c7:d9:f1:f7:d3:fd:2f:31:f1:bb:0f:2b:c4:8f:3f:05:af:e6:
ab:aa:f7:ef:d6:fb:6c:d4:67:4e:1d:52:91:d1:93:fd:04:03:
3e:2b:47:9c:1f:97:9c:83:ca:ad:d6:84:c8:a8:3f:2e:12:91:
16:25:db:26:3d:d4:b7:03:97:58:a3:0b:f7:2a:38:91:f0:ba:
9b:1c:3f:86:73:2e:bc:8c:23:83:4d:4b:99:c6:42:4e:d8:99:
8b:05:f3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:27:50 2025 by rpki-client