Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/tXpguYEJXeC3UA7Rh6nRPaNqKyQ.roa
File: tXpguYEJXeC3UA7Rh6nRPaNqKyQ.roa (raw, json)
Hash identifier: hD3g/VbzKoJRENTry1gYLtL+HipUSwGaUwC0M+D2O10=
Subject key identifier: B5:7A:60:B9:81:09:5D:E0:B7:50:0E:D1:87:A9:D1:3D:A3:6A:2B:24
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0193873A602752C43EA2DA804B7ACF4C8CE2
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/tXpguYEJXeC3UA7Rh6nRPaNqKyQ.roa
Signing time: Mon 02 Dec 2024 11:56:10 +0000
ROA not before: Mon 02 Dec 2024 11:56:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.240.0/22 maxlen: 24
213.176.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:87:3a:60:27:52:c4:3e:a2:da:80:4b:7a:cf:4c:8c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Dec 2 11:56:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b57a60b981095de0b7500ed187a9d13da36a2b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a5:f4:47:cb:d9:78:6c:2b:6a:68:dd:f9:f6:
c4:7b:6e:79:d3:0f:f9:0f:7b:e3:ba:ba:4c:03:c6:
b8:ad:9e:1f:f6:b2:fd:ab:c3:2f:22:c3:91:b9:2c:
f7:15:59:be:ec:ba:b8:78:a4:e2:b9:19:00:9f:42:
89:7d:90:f5:1c:84:8d:7e:84:d9:ce:f9:27:77:e8:
0d:24:a4:65:f9:f7:1d:d9:a6:be:8d:8d:60:77:79:
7d:71:5f:c1:8b:cc:a9:7c:48:5d:da:ce:ac:29:e6:
9c:5e:01:e9:37:1b:5a:eb:f4:0b:5d:bf:24:ec:ea:
1b:68:1a:67:b0:08:c7:60:e6:80:17:4a:4a:b4:6c:
0c:9c:a2:32:3c:7d:d5:0a:84:ff:8c:06:5e:eb:c1:
de:f5:ff:ee:f3:80:c4:df:44:87:5a:ad:8c:e5:48:
7a:8e:63:ee:be:bf:8c:ba:53:02:b7:32:bd:60:0f:
df:4a:90:49:a8:f5:1c:bd:53:e5:b4:29:f0:77:b3:
ca:07:36:28:53:f0:f9:97:f9:ec:aa:3d:e3:fe:ff:
69:8a:73:6d:cd:3b:d8:46:9c:d0:51:43:a4:94:fe:
17:30:33:b6:3b:01:78:8d:70:62:ff:5c:c3:56:98:
94:5b:07:cb:02:86:ab:39:d2:98:d5:4e:06:1d:97:
40:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7A:60:B9:81:09:5D:E0:B7:50:0E:D1:87:A9:D1:3D:A3:6A:2B:24
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/tXpguYEJXeC3UA7Rh6nRPaNqKyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.240.0/22
213.176.112.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:fb:1a:0a:33:bf:ae:71:d2:83:b0:75:5f:84:7a:82:9d:ac:
f9:fc:eb:f6:d9:56:32:79:26:61:fd:1d:6c:4d:b0:38:55:23:
9a:a7:cf:92:cc:01:93:4f:ae:46:28:7c:27:61:ad:3c:8f:03:
a0:79:7b:01:ff:d4:47:ee:2c:bc:a6:05:56:77:bd:b8:d1:bb:
52:56:f9:c8:d8:c3:cd:7d:28:f6:a5:c2:39:31:04:cd:96:17:
19:4b:6b:2a:37:5b:18:70:ee:34:08:e8:d8:17:ce:59:05:0d:
51:5d:71:1c:aa:7a:d3:f6:25:1f:cf:06:d1:f4:30:ed:ad:34:
4e:ab:94:67:c6:af:78:d9:55:4d:a0:4f:e8:56:18:b1:52:0a:
f3:5b:b3:96:1a:0c:98:02:f2:d8:8e:26:3b:72:09:d5:df:3e:
d7:b4:ca:41:fc:ea:89:cd:26:47:1e:bc:3e:40:87:0e:19:ba:
bf:22:0b:c2:19:a8:98:02:60:f1:1f:c6:bf:3d:fa:c7:0b:a4:
c9:e3:d7:c6:9b:a3:2b:13:93:f1:32:65:1b:82:8e:76:a0:7f:
8b:c7:ef:0f:81:10:e7:fc:25:fb:f7:19:fd:a6:d1:bf:e8:17:
f1:76:8b:7b:6e:fb:39:f4:f8:3c:b6:c9:7f:ac:5e:40:b9:48:
1a:b7:b4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:09:03 2025 by rpki-client