Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/e8g3s16GFZnLCv02Upnaj2J6-mQ.roa
File: e8g3s16GFZnLCv02Upnaj2J6-mQ.roa (raw, json)
Hash identifier: wMc2D4jzT9ZRdLYpbuWRXIpAi3jh93kDdvLZpBfBnGQ=
Subject key identifier: 7B:C8:37:B3:5E:86:15:99:CB:0A:FD:36:52:99:DA:8F:62:7A:FA:64
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0194C52A884E76DF3D2BF62FFAA1D886DCD4
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/e8g3s16GFZnLCv02Upnaj2J6-mQ.roa
Signing time: Sun 02 Feb 2025 05:38:06 +0000
ROA not before: Sun 02 Feb 2025 05:38:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213852
IP address blocks: 62.60.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:2a:88:4e:76:df:3d:2b:f6:2f:fa:a1:d8:86:dc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Feb 2 05:38:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bc837b35e861599cb0afd365299da8f627afa64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ec:08:0d:4c:02:30:93:74:1b:95:03:98:a4:
02:72:05:82:b7:c3:92:43:14:88:34:5c:37:a1:a6:
a5:99:16:51:86:ba:b3:4f:35:ef:f7:54:26:d7:d5:
54:81:dc:1e:44:75:58:8f:78:56:75:95:4c:cf:3d:
2d:db:b4:98:9e:00:e9:37:07:7a:f3:8d:f4:9c:83:
c1:3f:55:ec:7a:c5:fb:0d:0b:d0:51:73:10:59:af:
56:5a:e5:72:86:fb:da:59:a4:30:e4:e4:a5:a2:1f:
ea:68:68:55:ad:ef:ff:6c:aa:cc:87:78:cd:db:c6:
eb:60:61:78:74:8f:3d:91:5a:d1:19:6c:e6:32:ce:
3e:84:ec:f0:fb:f6:76:41:40:b2:92:ed:bf:14:35:
50:6c:61:05:27:31:dd:ee:76:fe:39:6b:9e:32:4d:
b8:62:42:fb:d6:c5:f3:77:4e:90:54:df:aa:b7:9d:
bc:c5:a2:ba:d2:c2:d2:5b:59:86:55:69:0d:18:1d:
22:3f:0c:c3:f3:1c:e1:c6:9f:23:96:1d:b9:cf:6d:
bf:43:67:10:ce:c7:56:7a:e3:a2:f0:5f:08:f2:89:
83:2e:7d:3e:ad:e3:82:9f:7d:0b:b7:d8:26:4d:aa:
02:db:ad:1b:e9:0e:fc:03:bc:b9:12:33:c5:ba:30:
65:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C8:37:B3:5E:86:15:99:CB:0A:FD:36:52:99:DA:8F:62:7A:FA:64
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/e8g3s16GFZnLCv02Upnaj2J6-mQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.198.0/24
Signature Algorithm: sha256WithRSAEncryption
33:c7:17:df:fb:87:70:56:b4:03:e3:40:1d:8e:f5:f5:b7:5b:
95:37:ca:83:be:71:0a:d0:9e:28:48:73:67:f8:8f:42:8f:84:
c6:fa:d6:fc:64:62:cc:8c:fd:ea:04:9d:6c:ba:d5:0f:60:ed:
14:16:0d:63:31:8a:b0:ef:37:5d:0b:7c:f0:62:79:5d:e4:a4:
b8:d2:e0:6f:0a:40:10:f2:c5:8a:40:e5:f7:45:70:22:78:43:
48:ea:61:ff:fb:2b:3f:4d:ea:c5:fd:8a:11:d1:e0:b8:c7:e8:
a1:85:57:77:4b:4d:b7:2d:f5:1a:0a:f4:21:68:f7:5c:85:17:
d7:46:39:73:1c:b1:bd:42:d6:a9:81:d9:80:f4:62:06:e2:bb:
fa:7e:74:c3:a9:2f:29:65:df:6b:ee:b9:9c:f3:95:e6:54:e3:
57:44:ed:65:3e:93:76:e9:e5:07:ec:98:eb:4d:08:62:07:00:
8e:8a:d0:71:4a:6d:41:30:c4:c9:e6:ad:fd:99:48:32:ec:12:
b0:55:1e:1b:c5:74:3a:db:a7:36:90:32:90:79:97:83:d4:92:
06:05:04:60:b0:93:74:80:cd:12:9a:e1:4f:aa:98:65:6b:18:
b5:2a:66:6a:62:b3:5d:fe:3f:2d:e1:25:19:00:01:51:80:d9:
00:76:4d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:01:57 2025 by rpki-client