Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ZwITz76TqIqjDddSzNfU7A6dfxc.roa
File: ZwITz76TqIqjDddSzNfU7A6dfxc.roa (raw, json)
Hash identifier: BhlYCFjvuf0/l60a3BqjYKqnsGdc41kvyEBNuQyXx8U=
Subject key identifier: 67:02:13:CF:BE:93:A8:8A:A3:0D:D7:52:CC:D7:D4:EC:0E:9D:7F:17
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019424B38AA71A0012D2B0499F9E6BBCAAE7
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ZwITz76TqIqjDddSzNfU7A6dfxc.roa
Signing time: Thu 02 Jan 2025 01:48:53 +0000
ROA not before: Thu 02 Jan 2025 01:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214119
IP address blocks: 62.60.224.0/24 maxlen: 24
62.60.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:8a:a7:1a:00:12:d2:b0:49:9f:9e:6b:bc:aa:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 01:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=670213cfbe93a88aa30dd752ccd7d4ec0e9d7f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:13:e2:a9:36:88:8a:74:e2:27:3a:cc:a9:a2:
b5:f8:84:21:2d:f5:07:66:58:34:2b:25:f3:35:d0:
4a:cc:f0:c8:14:1d:b3:0b:80:94:e0:4a:76:f0:33:
0b:74:f1:a2:ca:57:ce:f1:57:87:a8:57:6d:1b:66:
f3:a3:18:13:da:c1:ce:cc:6b:f8:78:60:6c:25:df:
3a:9f:70:58:ab:c7:88:92:d9:3d:e2:98:27:e8:2d:
34:e5:13:5c:00:54:34:e7:27:1f:33:e9:48:e5:0e:
2d:1a:a2:45:a9:05:11:13:48:93:f6:ab:8c:f1:50:
28:16:09:d4:2c:2f:90:ef:1f:98:bb:d5:4f:d4:f1:
ee:bb:24:df:8f:21:8a:f3:5a:16:e6:bf:6c:e6:22:
9f:8d:52:bd:66:c1:a0:6b:65:0b:12:be:6a:1e:1d:
52:a9:82:28:77:c3:ad:97:fd:63:db:3c:cf:87:7e:
4b:58:35:45:ef:1f:49:d8:f6:15:05:a3:bb:e9:ef:
b9:ce:8c:c5:e7:be:c7:9a:f8:24:e7:4e:0b:07:ab:
78:f1:48:46:98:63:85:04:b2:1a:50:f5:2b:34:80:
ad:63:c9:9c:cf:b7:ff:c1:8a:22:71:44:6c:3d:c5:
9a:a4:6d:2b:3a:8e:50:95:47:70:a2:04:d1:36:49:
38:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:02:13:CF:BE:93:A8:8A:A3:0D:D7:52:CC:D7:D4:EC:0E:9D:7F:17
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ZwITz76TqIqjDddSzNfU7A6dfxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.224.0/23
Signature Algorithm: sha256WithRSAEncryption
42:09:c5:4d:9e:90:e9:ff:12:31:b3:63:12:35:6a:86:67:ad:
15:70:de:13:da:f8:e9:5a:f1:d5:76:91:d4:8c:1f:05:e4:43:
ab:ed:0d:67:68:c2:ef:53:1b:0c:f3:85:e6:7f:d2:01:2b:7f:
8e:ac:3b:2a:ae:36:f6:71:6e:25:57:71:20:6e:3f:63:09:83:
f0:42:31:62:6d:b1:0b:fc:95:17:65:b6:c9:09:1f:a8:f9:82:
37:a6:a4:f4:c3:bb:ed:98:50:38:fc:27:fb:fe:9c:24:ba:b6:
43:2b:65:66:49:96:c0:28:7c:bc:b7:c7:3d:81:e8:14:85:c0:
7f:d4:b8:c3:bb:cc:88:09:71:be:58:cb:df:09:dc:7f:2d:a0:
53:d2:d8:2d:23:e2:0e:2a:73:74:57:87:43:77:9b:db:97:0a:
7a:e6:d9:dc:f2:13:5a:44:7b:09:0a:e7:21:73:b8:21:4e:bf:
76:74:fa:57:70:e9:eb:3e:ac:3d:df:80:b8:0a:ca:a1:0a:97:
1f:a3:ae:3e:73:32:28:28:b1:f9:55:4e:08:fa:4d:8b:ed:51:
fd:39:ec:8e:35:80:8e:44:4c:49:c4:08:ea:19:22:b2:79:7b:
a5:2c:87:7a:bb:46:66:54:b1:96:05:bc:f1:74:77:1a:ea:e1:
e6:69:65:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:01:48 2025 by rpki-client