Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/XH7Z19h-44lfhIbRuX-Fcc0qBHY.roa
File: XH7Z19h-44lfhIbRuX-Fcc0qBHY.roa (raw, json)
Hash identifier: 4zCplQuW4tDKEyXVR/7ixTMa1V9PCIeXIrNCU1LJSQw=
Subject key identifier: 5C:7E:D9:D7:D8:7E:E3:89:5F:84:86:D1:B9:7F:85:71:CD:2A:04:76
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019424B38B9A3668C06E4690AB30C0DB5F26
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/XH7Z19h-44lfhIbRuX-Fcc0qBHY.roa
Signing time: Thu 02 Jan 2025 01:48:53 +0000
ROA not before: Thu 02 Jan 2025 01:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 62.60.232.0/23 maxlen: 24
62.60.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:8b:9a:36:68:c0:6e:46:90:ab:30:c0:db:5f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 01:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c7ed9d7d87ee3895f8486d1b97f8571cd2a0476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:37:57:01:2b:51:78:ff:51:5b:35:5c:df:
58:7a:f3:b6:51:89:1b:f4:b8:a0:97:5a:0d:91:ae:
a9:f6:fe:68:ec:87:59:8e:0f:23:ae:c9:85:6e:9e:
54:b5:78:d2:b9:52:6e:b6:30:b2:c7:8b:3e:b3:28:
d2:74:9e:4b:d5:ef:c6:50:e8:0f:f7:45:7a:e7:9f:
16:d7:ee:ac:ef:c4:37:48:4d:e2:c6:3a:cf:c5:cb:
f4:ec:03:aa:4f:ae:74:9d:94:81:9b:6d:3b:81:7b:
66:62:83:c3:e3:1a:bd:12:22:48:80:4e:5c:d3:8c:
23:16:6b:64:b9:82:48:fd:fa:75:c4:95:3c:ec:01:
44:7a:e2:26:bd:70:1f:7d:f9:c2:86:da:53:ae:73:
ba:fd:f0:cf:01:e5:35:fa:fb:78:fd:f5:30:ec:99:
5b:cf:65:af:ad:c3:a6:76:3a:10:0e:20:12:e2:10:
a0:34:86:39:8b:cf:8d:6c:8f:0e:00:c8:14:58:92:
5b:53:8a:fd:1c:5d:21:16:ef:d4:d1:82:3c:bf:cb:
c0:4a:89:0f:a3:43:a8:8a:d7:56:dc:d9:c7:c4:2e:
2c:ae:d8:07:20:e3:01:bb:1c:f5:57:6d:5e:cf:c5:
e4:16:c5:07:aa:b7:66:41:d2:2e:5e:32:66:53:39:
11:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7E:D9:D7:D8:7E:E3:89:5F:84:86:D1:B9:7F:85:71:CD:2A:04:76
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/XH7Z19h-44lfhIbRuX-Fcc0qBHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.232.0-62.60.234.255
Signature Algorithm: sha256WithRSAEncryption
98:64:7b:91:e6:c4:d6:28:93:af:ee:df:68:ec:bc:e5:32:21:
7f:ef:d6:ec:99:fc:9e:b3:a2:79:2e:8c:3e:fd:d5:d5:93:5b:
ec:7f:eb:66:24:77:92:1d:c6:f5:9e:02:f1:2c:8b:c1:7d:f2:
49:e4:91:21:44:b9:05:6c:39:05:28:bd:94:6f:3e:9d:58:4d:
a0:6f:55:7f:a3:b7:48:e4:25:53:71:35:a3:b3:a6:ed:66:78:
96:f8:ad:08:79:05:40:8a:d9:48:6a:29:90:6d:c4:86:23:87:
c0:11:ee:27:bc:4b:28:51:1e:85:92:ae:4a:ca:34:f1:54:14:
2d:f5:49:dc:0f:d3:f0:da:d8:82:20:13:87:05:2b:ad:0f:9c:
59:ec:b3:6b:a2:54:9d:ed:ee:63:b8:de:34:46:97:cc:a0:1c:
5c:7e:ce:98:98:92:be:29:f1:fb:bd:80:0a:dc:4a:84:73:ea:
93:84:a2:f5:fc:9b:a7:77:49:90:59:36:cc:03:b0:f1:74:4c:
74:86:7b:24:0c:35:c8:57:49:e9:d0:aa:f4:5e:50:6e:3e:8a:
ad:88:85:72:eb:93:f2:ca:b7:73:9a:8e:3f:ed:7b:43:f9:31:
d5:76:06:7d:c4:f8:57:7e:e2:6b:64:8e:35:80:4f:34:bf:3c:
09:c7:be:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:30:26 2025 by rpki-client