Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/UmNkCnSYYV4B7CcoBqdYKlyueNM.roa
File: UmNkCnSYYV4B7CcoBqdYKlyueNM.roa (raw, json)
Hash identifier: ifSrbKTLkGkv9r9x9DEwdMrsbyWUHI/6exqFINpc/qk=
Subject key identifier: 52:63:64:0A:74:98:61:5E:01:EC:27:28:06:A7:58:2A:5C:AE:78:D3
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01951CE805D930D85DDFF712053CF503A6B9
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/UmNkCnSYYV4B7CcoBqdYKlyueNM.roa
Signing time: Wed 19 Feb 2025 06:32:02 +0000
ROA not before: Wed 19 Feb 2025 06:32:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.240.0/22 maxlen: 24
62.60.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1c:e8:05:d9:30:d8:5d:df:f7:12:05:3c:f5:03:a6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Feb 19 06:32:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5263640a7498615e01ec272806a7582a5cae78d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:41:59:c9:9c:49:bc:ea:11:fd:d8:6f:6a:52:
fe:00:44:bb:59:11:3d:02:03:61:08:9e:de:aa:a1:
b7:1a:63:11:01:b7:80:c8:8f:17:b1:52:8d:b6:0d:
04:54:43:2d:5b:1d:f3:d6:26:1b:05:0e:1e:79:8a:
d8:db:bd:4c:e9:05:92:7a:2d:2c:4f:78:fc:0c:bd:
86:94:8b:6e:dd:ae:91:2d:80:4c:c2:49:52:43:39:
48:90:b0:7e:b3:7f:f2:46:26:11:ad:00:71:ed:5b:
20:d2:0f:18:ac:d3:de:ff:82:a0:66:c0:b6:51:5d:
6f:b5:2c:b3:b9:96:4d:10:72:19:0e:1b:f6:76:fc:
01:40:82:b8:2d:46:49:cc:a1:1e:c7:2a:d7:87:97:
38:b0:d2:f5:ac:f6:6c:60:43:5f:dd:2e:bc:1f:8f:
fd:da:a1:74:8f:f6:ab:29:07:ce:df:bc:1c:32:ae:
88:9b:25:4a:c6:d0:17:ae:fb:12:a2:25:90:28:f4:
7e:79:ae:d2:70:5f:40:75:51:aa:1f:13:db:0f:43:
60:cf:d9:99:cf:04:95:cf:2e:03:2a:d9:d9:5f:a6:
10:26:68:8b:f0:9f:c3:2a:8f:d5:8e:8e:87:59:af:
ac:7a:cd:88:b2:91:ff:a7:7b:e3:57:ba:d8:cc:a0:
a3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:63:64:0A:74:98:61:5E:01:EC:27:28:06:A7:58:2A:5C:AE:78:D3
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/UmNkCnSYYV4B7CcoBqdYKlyueNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.240.0/22
62.60.252.0/22
Signature Algorithm: sha256WithRSAEncryption
16:42:fd:1d:50:94:af:d4:61:ff:e8:3c:43:dc:2a:92:42:83:
37:6a:e3:a6:ec:24:14:d3:d6:8a:93:c5:25:02:18:62:e8:f1:
bc:48:0c:9f:ac:a8:fb:70:e6:76:a6:3f:a4:d1:48:96:e4:03:
c2:b1:a5:a9:a3:b5:9e:25:53:89:d7:62:10:9c:b0:1b:ad:4b:
c5:72:c6:4b:e9:80:ec:3a:40:b6:f7:e0:34:12:c8:16:2c:e9:
e5:71:19:42:29:35:88:2e:18:79:d5:4c:e4:6f:2f:5f:79:d8:
24:10:7c:be:6a:27:29:60:bf:ae:f1:a1:64:e8:85:b0:56:14:
d1:42:ae:6e:de:9b:ff:12:19:fc:a4:d7:5f:f2:9a:4f:99:5d:
a4:6b:2d:5e:0b:cb:d1:2b:2b:14:9a:fe:63:ba:7a:61:0a:66:
a1:e5:07:3e:d1:15:9f:ca:cc:6d:ac:17:31:1e:b3:15:a4:a4:
24:91:f1:6f:1f:56:0a:1c:65:a1:72:18:ab:a0:59:79:d7:82:
34:0a:77:8e:1c:5e:dd:f1:39:46:04:83:52:e9:00:9a:27:42:
01:bc:f9:74:75:8b:a6:f5:0e:a7:23:6b:e0:99:7c:66:7c:73:
cf:02:f3:d9:1b:6e:8b:8b:f3:80:ff:ca:50:d9:d3:5a:ba:4b:
87:32:3c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:57:00 2025 by rpki-client