Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/bLRBVxmtw-gPwUTZ-q4eHdexiXU.roa
File: bLRBVxmtw-gPwUTZ-q4eHdexiXU.roa (raw, json)
Hash identifier: sj33bQG8IQCf0NkqI9s3oSfmGO/PjKvtmZPWwrsto3M=
Subject key identifier: 6C:B4:41:57:19:AD:C3:E8:0F:C1:44:D9:FA:AE:1E:1D:D7:B1:89:75
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019362195E7206D10A26243EC34657E5619C
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/bLRBVxmtw-gPwUTZ-q4eHdexiXU.roa
Signing time: Mon 25 Nov 2024 06:54:09 +0000
ROA not before: Mon 25 Nov 2024 06:54:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 62.60.148.0/22 maxlen: 24
62.60.152.0/23 maxlen: 24
62.60.154.0/23 maxlen: 24
62.60.156.0/22 maxlen: 24
62.60.216.0/23 maxlen: 24
62.60.236.0/22 maxlen: 24
62.60.244.0/22 maxlen: 24
62.60.248.0/22 maxlen: 24
213.176.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:19:5e:72:06:d1:0a:26:24:3e:c3:46:57:e5:61:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Nov 25 06:54:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cb4415719adc3e80fc144d9faae1e1dd7b18975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:bb:57:f7:7d:89:21:0a:66:b9:bd:7d:9b:
f8:c4:38:21:70:39:5c:69:f9:c9:8d:4e:39:cc:ba:
0b:a6:fe:24:d1:87:82:95:d6:37:94:39:be:a2:56:
02:33:2f:d3:63:14:b2:ff:af:58:d6:cb:41:80:53:
73:d3:7f:ed:42:6a:e2:5c:dc:3d:02:59:60:c4:37:
e2:a1:52:99:96:0c:7f:09:ea:ee:d1:39:ec:ad:79:
77:e5:e8:d9:59:c1:aa:1d:9c:08:c6:21:3c:32:8b:
c7:aa:95:e5:0b:b0:65:0c:b9:36:4e:d0:ac:f6:c9:
9d:39:71:55:c2:b6:c2:d3:00:53:01:44:7d:f9:fc:
93:78:68:e6:db:1a:0a:21:94:5e:b8:dc:5d:e0:fe:
b8:49:09:a7:8b:db:51:60:54:be:08:b8:a5:29:cb:
e2:d7:a7:48:d4:16:00:85:53:f2:fa:7f:18:32:41:
8c:27:03:91:09:1e:91:d2:4a:9e:95:c1:0f:74:64:
a9:71:b8:2d:a1:f0:5b:f2:8e:51:3e:40:f6:4f:a0:
f5:e1:56:2b:f5:e9:45:cd:57:68:3d:79:48:38:85:
99:60:ff:cd:fd:67:ad:d5:fb:9a:5a:14:65:7c:73:
92:98:09:7e:07:f4:f0:28:b1:a8:74:67:d2:62:9e:
e3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B4:41:57:19:AD:C3:E8:0F:C1:44:D9:FA:AE:1E:1D:D7:B1:89:75
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/bLRBVxmtw-gPwUTZ-q4eHdexiXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.148.0-62.60.159.255
62.60.216.0/23
62.60.236.0/22
62.60.244.0-62.60.251.255
213.176.64.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:8d:ea:ef:58:bd:70:50:f7:40:7f:e4:e2:1f:7f:5e:06:03:
0b:2a:ab:4d:06:06:13:8e:22:2d:4c:d5:3a:d2:af:45:bf:58:
de:01:36:da:39:dc:a3:06:bb:c7:ba:6d:f2:dc:ff:85:5d:d0:
0d:c6:d7:1e:4a:10:20:3e:31:64:5f:e5:2a:b9:4c:f8:90:77:
39:ce:1d:03:91:72:2c:04:f0:58:db:81:e5:2e:c4:f4:0a:99:
3a:32:df:42:f1:a5:e8:2c:9c:10:b6:64:25:af:75:d3:5c:b6:
89:d2:07:d9:b7:02:b6:8d:06:b1:4a:a3:ba:e9:de:e8:91:4b:
49:36:f4:e1:47:c5:fc:b1:79:2e:ca:e1:a1:56:10:c0:3f:6b:
08:2e:40:ba:c1:40:ed:fe:89:e8:a4:18:84:82:df:b7:03:a2:
0f:c8:65:69:34:b9:92:2e:9e:d0:7a:fd:93:16:8d:32:02:fb:
71:a8:de:10:a0:c4:63:2b:4b:ab:e2:bd:2e:de:ac:28:5f:14:
fd:a5:49:7e:bd:6a:51:1e:28:bf:08:df:9d:4f:09:9d:57:4c:
fb:aa:55:be:6d:ba:4b:3d:f7:a2:21:b4:3a:e7:d3:c5:99:7e:
3a:cc:22:9b:bc:97:2f:c7:54:bf:bb:51:e5:88:a8:92:08:3d:
b1:53:4a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:29 2025 by rpki-client