Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/sITeG_UohbIGJ-DOalhc1mVveNU.roa
File: sITeG_UohbIGJ-DOalhc1mVveNU.roa (raw, json)
Hash identifier: XCld+4utYUOOw9NMx7EpPipMbovPBbaAZa82uOTA6Tg=
Subject key identifier: B0:84:DE:1B:F5:28:85:B2:06:27:E0:CE:6A:58:5C:D6:65:6F:78:D5
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0193873A6071A091D36C76F5A84F41899F8A
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/sITeG_UohbIGJ-DOalhc1mVveNU.roa
Signing time: Mon 02 Dec 2024 11:56:10 +0000
ROA not before: Mon 02 Dec 2024 11:56:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 62.60.148.0/22 maxlen: 24
62.60.152.0/23 maxlen: 24
62.60.154.0/23 maxlen: 24
62.60.156.0/22 maxlen: 24
62.60.216.0/23 maxlen: 24
62.60.228.0/22 maxlen: 24
62.60.236.0/22 maxlen: 24
62.60.244.0/22 maxlen: 24
62.60.248.0/22 maxlen: 24
213.176.64.0/22 maxlen: 24
213.176.74.0/23 maxlen: 24
213.176.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:87:3a:60:71:a0:91:d3:6c:76:f5:a8:4f:41:89:9f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Dec 2 11:56:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b084de1bf52885b20627e0ce6a585cd6656f78d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c4:f5:95:1c:af:89:65:01:a8:8f:25:cf:09:
41:1d:f7:bf:9a:63:8f:24:9b:71:5b:cc:4f:92:4b:
c4:35:fe:68:25:66:9c:fb:18:4f:1d:bf:a5:2f:f2:
42:71:89:98:70:50:67:f6:98:f5:26:1f:6a:1d:47:
1c:ba:61:4a:ce:7b:3d:0d:d3:7f:7e:09:62:43:dd:
cb:ca:2b:2e:b4:f6:60:cf:a5:f7:1b:a7:24:4e:16:
cc:b2:17:22:70:22:a2:63:25:1a:e9:b8:03:02:e2:
dd:ae:62:f3:6e:df:86:22:4a:92:e7:af:2c:47:0f:
34:83:68:f3:9a:ce:81:c8:d3:c6:f8:7e:02:b5:09:
e4:46:b1:58:5e:6b:2e:90:88:91:3d:bc:39:80:38:
6c:e8:7b:e0:1c:4f:8f:4b:85:0e:a7:77:2d:3b:d5:
b5:78:7a:4e:61:7f:e6:06:39:a1:b3:f3:3d:91:6d:
c0:ed:a3:41:28:f1:25:c3:6f:4b:fc:79:93:af:ff:
2e:98:35:c2:10:cf:5c:dc:6b:93:9d:4e:d5:9a:c5:
1e:b5:c3:8d:c0:61:cf:c2:1e:02:af:38:66:aa:2a:
cb:16:94:b3:5a:4c:11:c9:ad:de:73:2f:00:88:07:
23:3a:1c:69:d2:ef:5d:5b:c7:e7:e3:6a:a2:4c:77:
34:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:84:DE:1B:F5:28:85:B2:06:27:E0:CE:6A:58:5C:D6:65:6F:78:D5
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/sITeG_UohbIGJ-DOalhc1mVveNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.148.0-62.60.159.255
62.60.216.0/23
62.60.228.0/22
62.60.236.0/22
62.60.244.0-62.60.251.255
213.176.64.0/22
213.176.74.0/23
213.176.92.0/22
Signature Algorithm: sha256WithRSAEncryption
98:ac:5e:5a:cb:b3:bb:14:ad:fe:ce:6c:46:6d:60:d2:3d:f0:
26:38:e1:6b:9d:21:05:2e:80:f3:83:32:ae:5e:91:4e:1b:cb:
46:e4:4d:16:ad:c5:44:8d:71:73:b4:04:8d:06:36:36:9f:bf:
ab:46:06:e2:e6:3d:30:5b:f5:4c:78:19:b9:4e:be:73:88:33:
b8:a6:8e:ee:82:af:2e:c9:ab:2f:3a:76:99:02:15:fd:11:1d:
b4:75:2b:4a:75:ce:ee:99:31:32:84:75:20:3c:eb:63:e1:b9:
51:28:49:21:53:0c:9e:fb:d1:5c:65:e6:59:05:e1:44:01:d0:
ec:bb:4e:6f:27:a3:c5:ab:d9:64:be:10:97:ca:de:72:dc:ae:
df:57:c3:93:97:e9:e5:9e:e1:63:e1:97:ac:4c:88:4b:c9:b1:
fb:e5:11:51:88:3e:dd:72:6f:b4:6e:b6:29:d8:59:2b:61:6a:
72:ae:a6:1e:f1:91:f2:e5:85:48:58:43:e5:b0:a7:8f:27:d3:
06:85:60:3e:97:4e:35:41:a3:32:bc:b2:3a:73:f1:08:42:87:
71:5e:62:0f:62:42:82:5e:26:18:7f:27:59:b4:3f:fe:32:1e:
81:d3:af:dd:3c:bb:0e:9a:ec:5e:36:3a:ad:ab:f9:b7:8e:a7:
24:83:79:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:29 2025 by rpki-client