Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/uI-XAngekBy-y_fEkUp8IBMMQBM.roa
File: uI-XAngekBy-y_fEkUp8IBMMQBM.roa (raw, json)
Hash identifier: wcz2lk0sgJKwTKH+ZqTJXICWw3XfoeTeYdhXJJGljN0=
Subject key identifier: B8:8F:97:02:78:1E:90:1C:BE:CB:F7:C4:91:4A:7C:20:13:0C:40:13
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019424B37B7A6296CB7845FD3EEDE9887408
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/uI-XAngekBy-y_fEkUp8IBMMQBM.roa
Signing time: Thu 02 Jan 2025 01:48:49 +0000
ROA not before: Thu 02 Jan 2025 01:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35372
IP address blocks: 62.60.138.0/24 maxlen: 24
62.60.144.0/24 maxlen: 24
62.60.147.0/24 maxlen: 24
62.60.160.0/22 maxlen: 24
62.60.218.0/23 maxlen: 24
213.176.0.0/24 maxlen: 24
213.176.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:7b:7a:62:96:cb:78:45:fd:3e:ed:e9:88:74:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 01:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b88f9702781e901cbecbf7c4914a7c20130c4013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3b:c5:8a:cb:4b:24:f1:b2:51:c8:32:3f:ab:
e3:ac:5f:63:f8:59:94:44:97:12:f5:ef:7c:60:00:
50:20:34:25:18:2d:ce:45:70:a2:e1:f9:b2:f0:67:
4d:cb:13:9f:8e:91:40:22:85:f2:4d:a6:dc:12:df:
32:6f:69:79:68:26:d7:45:31:2d:b8:ce:6f:90:2d:
74:09:cd:8a:79:67:39:af:a5:e2:66:b0:f5:34:ef:
cd:93:66:a9:b4:c9:1f:48:9c:bb:22:e4:f4:c3:eb:
e8:25:df:85:48:8a:fb:ce:f5:94:64:1f:e4:80:19:
5d:0b:98:a3:6b:0d:c9:1c:8e:c9:62:d8:9f:46:3e:
89:50:c8:64:9c:f0:13:bf:74:29:a4:77:e6:fd:4c:
05:71:aa:4c:9b:fc:6a:0c:9f:20:fb:81:06:ac:05:
c6:f3:dc:70:66:d2:e3:e2:52:b9:c3:25:22:7b:4f:
19:98:f7:fd:f3:ae:15:b3:0f:b3:ed:29:5c:24:a0:
59:00:1b:48:af:90:e6:b3:8c:af:65:35:7a:32:97:
70:b6:8d:15:ef:cd:99:56:e6:33:f7:01:a6:75:c0:
eb:c2:00:d4:92:39:96:f2:99:85:68:e0:21:8a:ec:
1d:2b:97:b1:79:5b:68:ed:51:13:f4:e4:43:f9:88:
5e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8F:97:02:78:1E:90:1C:BE:CB:F7:C4:91:4A:7C:20:13:0C:40:13
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/uI-XAngekBy-y_fEkUp8IBMMQBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.138.0/24
62.60.144.0/24
62.60.147.0/24
62.60.160.0/22
62.60.218.0/23
213.176.0.0/24
213.176.126.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:97:93:b6:a2:ea:fe:64:3c:b8:50:f4:84:f6:66:e7:de:63:
12:3b:ba:c1:39:f4:a5:79:45:72:5a:91:dd:4b:c1:19:20:67:
30:a9:d3:03:b2:dd:ca:cf:36:8f:02:99:27:08:d5:7c:33:b2:
27:69:ad:86:e3:3a:60:fd:9e:1a:ba:ee:53:a2:e2:ba:53:6d:
9c:7b:21:2d:31:11:bb:31:21:bc:cb:91:e4:54:5d:1c:13:62:
e5:6c:09:d2:ba:a8:40:ab:92:21:9e:50:c1:22:72:57:3f:00:
cf:16:50:de:4b:e0:cb:6d:5f:12:8e:de:af:89:6d:53:81:48:
79:45:20:01:5e:b5:46:67:bc:95:4b:e6:ea:45:55:4d:c9:f1:
65:1f:6b:a5:6f:28:57:65:22:5f:36:c5:51:ba:16:81:6a:bc:
20:eb:a9:d2:76:ed:21:ce:ec:d2:a2:a9:73:f0:54:4c:6b:22:
6e:b8:d5:d9:a8:38:70:f8:66:50:c5:e1:ed:42:8b:7b:a4:be:
c2:0c:02:38:39:4e:be:12:b9:fd:f4:a0:64:ef:1c:b9:73:f1:
7c:c9:76:24:cf:f7:fc:2b:1f:8b:bd:31:56:19:5d:e3:15:72:
60:67:07:57:a9:f1:f3:4b:09:05:f5:c0:ba:b3:5b:5d:fa:17:
7a:f0:20:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:02:27 2025 by rpki-client