Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/o7vShmdJNAXgfmG27ea-gjCdOF0.roa
File: o7vShmdJNAXgfmG27ea-gjCdOF0.roa (raw, json)
Hash identifier: BQM6ifBZygawldMEKvYwW3yeuPE2XxTDtRpH/V8m2Sw=
Subject key identifier: A3:BB:D2:86:67:49:34:05:E0:7E:61:B6:ED:E6:BE:82:30:9D:38:5D
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019564D908F09E165B218E07471F334E54EC
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/o7vShmdJNAXgfmG27ea-gjCdOF0.roa
Signing time: Wed 05 Mar 2025 05:48:20 +0000
ROA not before: Wed 05 Mar 2025 05:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211904
IP address blocks: 62.60.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:64:d9:08:f0:9e:16:5b:21:8e:07:47:1f:33:4e:54:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Mar 5 05:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3bbd28667493405e07e61b6ede6be82309d385d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:04:6f:5f:58:43:2d:ab:65:81:b2:f7:1f:ad:
0b:e8:b9:80:1b:d4:95:75:64:e5:3e:ca:d9:e8:6f:
39:63:4c:8d:4c:59:7e:c5:4f:78:2e:32:81:e8:5b:
f7:cd:dc:e8:6d:49:00:cb:24:f5:9f:03:15:a3:e4:
e6:69:0c:8a:f1:3c:21:bb:c0:1f:0d:38:a7:ab:84:
8c:e0:64:77:7a:b8:f7:02:c9:ba:d6:29:e2:43:bf:
15:c9:66:68:22:ac:92:54:e1:23:15:32:b2:16:21:
af:38:5a:14:c7:78:2a:1c:a0:47:01:71:9f:ec:08:
c0:da:53:6a:12:fd:a9:9a:92:68:a5:67:6e:d8:2b:
d9:78:55:aa:ba:50:f4:3e:ef:23:85:bb:26:4b:fd:
fb:ec:a5:71:f3:76:7f:cf:a0:c9:6f:35:ef:ec:fd:
92:fe:84:00:06:af:ad:bc:dc:8b:5f:66:b1:ad:81:
0a:95:a2:5f:80:01:a7:dd:be:90:f1:84:4f:8f:92:
20:85:2b:c7:f8:ef:d4:5c:a7:3c:e3:8a:83:c4:5d:
0a:75:16:3d:14:1a:55:79:f0:05:35:7d:e5:c4:12:
f5:02:a6:cb:1a:b6:59:b1:2b:c0:d3:24:c7:68:58:
70:25:ad:46:f5:58:a9:25:27:4d:25:ee:8d:e6:ec:
b4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BB:D2:86:67:49:34:05:E0:7E:61:B6:ED:E6:BE:82:30:9D:38:5D
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/o7vShmdJNAXgfmG27ea-gjCdOF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.193.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:8e:d8:c3:a9:68:23:7d:12:b5:4d:c7:20:9a:34:9c:81:44:
98:ad:93:33:0d:e3:bf:dc:44:36:66:4c:b9:95:1f:ae:f8:b5:
84:ea:2c:b7:f9:fa:b3:39:a0:72:b5:af:76:dc:64:e0:ea:d8:
a7:0d:5b:40:b1:b7:83:f3:71:85:68:49:50:d1:82:1c:31:2c:
01:e3:28:fa:fb:2c:26:e0:f7:f7:61:24:c2:99:63:47:e7:d0:
76:63:a3:fc:13:b9:44:dd:ad:c2:32:c0:8e:99:9b:94:b5:64:
21:ce:1a:23:b8:d4:69:fe:77:83:d0:f2:57:a4:91:2c:4d:65:
96:7d:b0:ae:13:06:c1:aa:25:9c:dd:bf:51:0c:60:81:51:d5:
ec:03:6b:f5:42:9d:e4:89:0b:3c:fc:0c:df:b5:dd:e6:4c:d0:
af:b0:87:7e:2c:78:26:32:be:6f:1a:50:87:3e:92:7c:e9:73:
fc:f3:a9:50:2a:c3:53:32:1d:2a:55:33:de:be:74:2d:1d:d3:
8e:f0:ac:64:6e:f2:d2:b0:f5:c2:81:d3:4a:1e:2e:5f:ef:ac:
f8:48:9d:a2:39:06:68:db:75:4e:40:3c:63:6d:e6:92:9b:d0:
00:57:01:c9:4a:40:17:fa:82:83:bb:9c:8e:de:5c:a4:2d:4b:
fe:61:d5:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVk2QjwnhZbIY4HRx8zTlTsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjUwMzA1MDU0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2JiZDI4NjY3NDkzNDA1ZTA3ZTYxYjZlZGU2YmU4MjMwOWQzODVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ARvX1hDLatlgbL3H60L6LmAG9SV
dWTlPsrZ6G85Y0yNTFl+xU94LjKB6Fv3zdzobUkAyyT1nwMVo+TmaQyK8Twhu8Af
DTinq4SM4GR3erj3Asm61iniQ78VyWZoIqySVOEjFTKyFiGvOFoUx3gqHKBHAXGf
7AjA2lNqEv2pmpJopWdu2CvZeFWqulD0Pu8jhbsmS/377KVx83Z/z6DJbzXv7P2S
/oQABq+tvNyLX2axrYEKlaJfgAGn3b6Q8YRPj5IghSvH+O/UXKc844qDxF0KdRY9
FBpVefAFNX3lxBL1AqbLGrZZsSvA0yTHaFhwJa1G9VipJSdNJe6N5uy0LQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKO70oZnSTQF4H5htu3mvoIwnThdMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvbzd2U2htZEpOQVhnZm1HMjdlYS1nakNkT0YwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPjzBMA0G
CSqGSIb3DQEBCwUAA4IBAQA6jtjDqWgjfRK1TccgmjScgUSYrZMzDeO/3EQ2Zky5
lR+u+LWE6iy3+fqzOaByta923GTg6tinDVtAsbeD83GFaElQ0YIcMSwB4yj6+ywm
4Pf3YSTCmWNH59B2Y6P8E7lE3a3CMsCOmZuUtWQhzhojuNRp/neD0PJXpJEsTWWW
fbCuEwbBqiWc3b9RDGCBUdXsA2v1Qp3kiQs8/Azftd3mTNCvsId+LHgmMr5vGlCH
PpJ86XP886lQKsNTMh0qVTPevnQtHdOO8KxkbvLSsPXCgdNKHi5f76z4SJ2iOQZo
23VOQDxjbeaSm9AAVwHJSkAX+oKDu5yO3lykLUv+YdU9
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:56:50 2025 by rpki-client