Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/iw6nvSzV9GD-fD5lnru3BErxvgU.roa
File: iw6nvSzV9GD-fD5lnru3BErxvgU.roa (raw, json)
Hash identifier: iZC2sc0MC9ydzz0wEl+WRBfNj5JcXlfj4wIQuD7dPGU=
Subject key identifier: 8B:0E:A7:BD:2C:D5:F4:60:FE:7C:3E:65:9E:BB:B7:04:4A:F1:BE:05
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019424B37D424BF2987AC1158CABB7481310
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/iw6nvSzV9GD-fD5lnru3BErxvgU.roa
Signing time: Thu 02 Jan 2025 01:48:50 +0000
ROA not before: Thu 02 Jan 2025 01:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.240.0/22 maxlen: 24
213.176.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:7d:42:4b:f2:98:7a:c1:15:8c:ab:b7:48:13:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 01:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b0ea7bd2cd5f460fe7c3e659ebbb7044af1be05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:dc:e9:09:b7:41:79:d9:c9:d8:05:44:31:42:
30:7b:2e:37:ba:5d:e0:db:c7:da:14:04:f0:63:1b:
5f:ac:6f:93:78:b1:d8:ea:aa:74:2e:73:41:44:f2:
2c:1e:05:fd:e8:4e:2c:2d:dd:0c:19:6c:a1:73:c6:
c1:65:a7:91:2b:c0:a6:22:2f:f1:dc:b9:9e:6b:22:
ca:ca:85:b0:ae:f3:86:69:1b:3e:93:76:e5:97:09:
76:25:56:04:88:f9:5d:cc:b9:f7:8a:22:60:58:05:
48:16:78:62:6e:ef:bf:2b:14:0a:36:be:25:5a:09:
f3:6c:1f:89:4c:5b:09:6b:4c:94:4f:e7:f1:a6:b4:
3b:c1:c3:d8:52:fa:73:36:ab:56:e5:9c:cd:5b:be:
1c:1a:d3:1f:84:75:50:06:84:86:b3:c9:b5:b7:82:
36:a4:9b:0d:4a:74:86:1f:12:ad:9e:7e:2c:b1:cd:
68:1d:c4:de:cb:54:92:91:d6:00:3e:6d:6d:5f:ea:
a8:69:a6:17:e3:66:ed:5b:46:2d:96:f9:08:f4:c8:
cd:42:be:5f:68:b6:aa:f4:e3:84:68:17:8c:d0:94:
7d:ee:de:bc:9f:b9:75:d4:eb:e8:18:52:b2:7e:72:
e5:0a:f0:5f:72:46:f8:85:d8:85:34:92:c7:cd:fd:
f7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0E:A7:BD:2C:D5:F4:60:FE:7C:3E:65:9E:BB:B7:04:4A:F1:BE:05
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/iw6nvSzV9GD-fD5lnru3BErxvgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.240.0/22
213.176.112.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:a0:46:f1:b2:a4:ac:b9:27:54:23:3e:b9:f3:1a:b7:65:f2:
13:4b:42:aa:0b:da:1c:b9:22:86:33:7d:38:99:bf:9c:79:09:
9f:54:18:dd:5f:a1:c3:c3:72:1b:05:b4:1e:6f:1a:d8:12:ab:
ac:76:36:d3:a4:fb:ce:7f:b6:04:75:85:3d:3e:07:b6:6b:8a:
6b:2d:3b:b6:c9:e9:89:7c:23:0c:1c:1f:24:6f:d2:49:34:0d:
1e:59:08:1f:3f:ca:5e:51:b9:2c:ee:18:25:dc:93:1d:46:f6:
4b:c1:f3:e1:ae:0a:34:44:2a:ee:6d:37:3f:43:d9:22:f3:ac:
42:ef:c1:ca:49:8d:6a:21:f7:57:a6:a2:d3:c2:c2:0b:61:a1:
77:2f:6d:a9:ef:3d:90:96:f1:f2:4c:a2:b3:b8:f2:91:14:38:
86:6d:fe:20:52:56:54:88:f7:e1:29:6e:5e:d5:de:e8:72:68:
85:4a:ae:95:7d:dd:f8:35:2c:04:27:5d:fa:61:9f:4a:5f:24:
9e:b8:2d:ca:29:b1:92:5c:60:92:b4:58:e2:da:af:4f:26:7d:
72:b0:92:b5:6a:5f:83:c5:92:c9:98:9c:56:98:78:1d:3b:1b:
43:27:09:d4:36:fc:aa:68:9e:1d:b8:c5:f6:57:62:84:17:2a:
23:37:8c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:00:55 2025 by rpki-client