Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/lbIBAsMcwtnW6evro5HI9kLaZ2o.roa
File: lbIBAsMcwtnW6evro5HI9kLaZ2o.roa (raw, json)
Hash identifier: 7Al+LeK1zis7wrF6sMroB/aYJhE1/KfbImp4opC0jXw=
Subject key identifier: 95:B2:01:02:C3:1C:C2:D9:D6:E9:EB:EB:A3:91:C8:F6:42:DA:67:6A
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0193908B52A8BC5825F38497854514D581E6
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/lbIBAsMcwtnW6evro5HI9kLaZ2o.roa
Signing time: Wed 04 Dec 2024 07:21:10 +0000
ROA not before: Wed 04 Dec 2024 07:21:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 329007
IP address blocks: 62.60.186.0/24 maxlen: 24
62.60.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:90:8b:52:a8:bc:58:25:f3:84:97:85:45:14:d5:81:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Dec 4 07:21:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95b20102c31cc2d9d6e9ebeba391c8f642da676a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:e7:e7:1d:99:72:b8:58:5c:56:5c:0f:d6:
4c:14:d0:96:b6:8d:8c:15:c6:7d:0c:1a:67:cd:42:
6d:d7:32:3a:d7:75:21:0b:c3:7a:2f:87:9a:51:08:
a2:a8:3e:6c:db:a9:09:ed:6f:b7:b9:5c:dc:57:c4:
c2:fe:36:a4:69:e9:72:ea:82:01:83:69:f1:91:5d:
42:f6:09:46:bc:86:1e:af:74:1f:2e:58:b2:19:79:
39:37:7b:ec:15:50:5f:17:59:19:c5:ab:38:0c:9b:
14:26:19:12:ce:fe:3e:f4:00:0b:a1:d1:21:17:82:
45:a2:aa:3a:5d:9c:53:9b:2f:a7:ef:a4:58:90:ea:
f7:71:2e:7f:ec:a5:94:d1:66:93:c7:b7:b8:dc:6a:
93:98:79:fc:5e:4a:1d:c5:9a:3e:cd:3c:63:05:d6:
51:46:8c:e4:eb:1a:e0:14:fc:57:3d:92:0f:d4:2a:
79:e1:2a:09:0d:1a:7b:d6:04:f0:92:42:1a:14:94:
27:b7:b3:80:ae:2b:e1:af:50:34:ab:3b:7b:0c:09:
25:b8:39:e5:51:dd:19:c8:6c:99:a0:50:a4:aa:0a:
fc:c5:32:2d:1d:9b:4e:13:f6:58:b8:29:ea:9e:2b:
32:43:b0:bf:99:86:b2:6e:0d:15:0e:e1:3c:88:2d:
ed:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B2:01:02:C3:1C:C2:D9:D6:E9:EB:EB:A3:91:C8:F6:42:DA:67:6A
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/lbIBAsMcwtnW6evro5HI9kLaZ2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.186.0/24
62.60.235.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:f9:24:36:7e:d2:9b:75:24:57:63:93:6e:2e:9a:7f:42:1d:
d8:42:3d:9f:91:ec:3f:af:0f:de:a5:65:e3:e2:38:6e:61:2b:
7b:4f:92:8a:f7:d2:ae:94:85:25:f6:36:d6:f0:35:ba:fe:f7:
69:5b:a6:4a:5e:82:0e:e2:b8:ad:71:ea:33:ff:a3:60:fe:44:
e8:5d:bf:1b:2d:04:cc:40:c6:30:46:00:2d:0b:b7:e3:28:5f:
17:30:7b:4e:84:2d:f8:0b:32:f3:0e:cf:92:95:ad:4f:61:7c:
e9:ec:77:fc:e8:c9:ea:85:f4:99:eb:35:af:5c:37:3d:8b:3d:
98:ea:8f:1c:4d:d6:15:f0:c7:fc:27:b7:af:70:cc:9b:15:de:
db:c9:45:83:95:35:01:6b:97:8e:cc:c9:59:c3:de:54:10:a3:
69:b3:eb:6f:c1:a1:39:1c:f7:39:ac:3c:1e:95:9a:9d:94:f3:
f3:13:97:e2:e3:54:25:b0:53:e3:f1:07:33:9c:73:f2:94:71:
d5:69:f3:b8:b2:bc:86:9f:a1:9c:f1:15:0d:a5:9d:ba:e4:bb:
f7:1a:c1:e0:0d:64:22:50:c5:df:e8:c6:ca:35:53:b8:fb:71:
e5:37:74:01:8c:5e:5b:68:24:36:09:2f:95:e2:71:b5:3d:db:
eb:ed:70:63
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZOQi1KovFgl84SXhUUU1YHmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQxMjA0MDcyMTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWIyMDEwMmMzMWNjMmQ5ZDZlOWViZWJhMzkxYzhmNjQyZGE2NzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4zn5x2ZcrhYXFZcD9ZMFNCWto2M
FcZ9DBpnzUJt1zI613UhC8N6L4eaUQiiqD5s26kJ7W+3uVzcV8TC/jakaely6oIB
g2nxkV1C9glGvIYer3QfLliyGXk5N3vsFVBfF1kZxas4DJsUJhkSzv4+9AALodEh
F4JFoqo6XZxTmy+n76RYkOr3cS5/7KWU0WaTx7e43GqTmHn8XkodxZo+zTxjBdZR
Rozk6xrgFPxXPZIP1Cp54SoJDRp71gTwkkIaFJQnt7OArivhr1A0qzt7DAkluDnl
Ud0ZyGyZoFCkqgr8xTItHZtOE/ZYuCnqnisyQ7C/mYaybg0VDuE8iC3tKwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJWyAQLDHMLZ1unr66ORyPZC2mdqMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvbGJJQkFzTWN3dG5XNmV2cm81SEk5a0xhWjJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPjy6AwQA
PjzrMA0GCSqGSIb3DQEBCwUAA4IBAQCq+SQ2ftKbdSRXY5NuLpp/Qh3YQj2fkew/
rw/epWXj4jhuYSt7T5KK99KulIUl9jbW8DW6/vdpW6ZKXoIO4ritceoz/6Ng/kTo
Xb8bLQTMQMYwRgAtC7fjKF8XMHtOhC34CzLzDs+Sla1PYXzp7Hf86MnqhfSZ6zWv
XDc9iz2Y6o8cTdYV8Mf8J7evcMybFd7byUWDlTUBa5eOzMlZw95UEKNps+tvwaE5
HPc5rDwelZqdlPPzE5fi41QlsFPj8QcznHPylHHVafO4sryGn6Gc8RUNpZ265Lv3
GsHgDWQiUMXf6MbKNVO4+3HlN3QBjF5baCQ2CS+V4nG1Pdvr7XBj
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:16:34 2025 by rpki-client