Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/uZW0Hpw2N23PdRj-GS-t4TVyHhU.roa
File: uZW0Hpw2N23PdRj-GS-t4TVyHhU.roa (raw, json)
Hash identifier: wxhJlzBnXGlaVOYKUcRmBiT9gU3+on/juFXaoNCdgzE=
Subject key identifier: B9:95:B4:1E:9C:36:37:6D:CF:75:18:FE:19:2F:AD:E1:35:72:1E:15
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019424B37ADFB13FB9D13EE976CE55B2954A
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/uZW0Hpw2N23PdRj-GS-t4TVyHhU.roa
Signing time: Thu 02 Jan 2025 01:48:49 +0000
ROA not before: Thu 02 Jan 2025 01:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15611
IP address blocks: 62.60.132.0/22 maxlen: 24
62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
62.60.168.0/21 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
213.176.96.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
2001:790::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:7a:df:b1:3f:b9:d1:3e:e9:76:ce:55:b2:95:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 01:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b995b41e9c36376dcf7518fe192fade135721e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f2:c7:07:c4:ca:40:77:06:73:59:79:dc:da:
d1:40:7b:01:74:ec:86:8f:3e:91:13:12:50:f0:53:
72:5f:ba:3b:d7:88:a5:39:43:ea:f1:e5:c9:34:f6:
e2:ff:7b:a7:02:40:ea:47:f9:38:50:17:2f:f6:d7:
48:90:f7:d4:ce:b0:bb:79:bb:9a:ea:b0:8a:33:1f:
4c:32:42:96:ed:42:28:60:a6:1e:c3:22:ef:65:ce:
a8:86:9d:81:c1:f6:b2:b7:e1:95:b3:a7:68:11:7f:
52:ea:02:8d:05:5b:dc:d6:8c:ad:21:93:5f:00:69:
8c:43:5a:7c:b4:96:24:69:f9:40:fb:65:68:2b:55:
11:ba:dc:7f:ed:29:b7:1f:c9:36:0f:72:2a:1b:7e:
32:00:c0:ad:c1:63:fb:1c:7b:02:43:c5:b5:99:e4:
c0:d3:21:b9:41:39:b3:27:28:b3:79:6d:2b:9c:b6:
4c:cc:51:c4:b9:70:96:0d:31:48:25:0f:f5:d0:73:
fc:61:7a:9d:f8:e4:d5:91:5d:5e:df:43:85:1c:69:
4d:6a:00:bc:fc:e3:e1:8b:e0:ee:68:fb:ed:5e:2b:
71:f0:87:c4:97:04:6d:ae:93:43:11:34:9c:3b:cd:
8a:b8:21:2e:08:54:ef:03:ee:62:63:6c:f1:8a:19:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:95:B4:1E:9C:36:37:6D:CF:75:18:FE:19:2F:AD:E1:35:72:1E:15
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/uZW0Hpw2N23PdRj-GS-t4TVyHhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.132.0-62.60.137.255
62.60.139.0-62.60.140.255
62.60.142.0/24
62.60.145.0/24
62.60.168.0/21
213.176.4.0/23
213.176.96.0/24
213.176.122.0-213.176.125.255
IPv6:
2001:790::/32
Signature Algorithm: sha256WithRSAEncryption
bf:03:dd:92:4e:ce:f6:23:36:40:8e:90:a7:9f:90:72:c8:46:
8e:53:0c:77:9d:39:2b:e3:7c:43:4e:f2:73:04:56:2d:6d:0b:
ca:98:e7:0f:40:26:af:46:38:70:af:87:81:ee:76:d1:e3:4a:
23:40:ea:55:89:8e:7d:73:0e:36:a2:90:47:31:d6:fd:37:e7:
81:89:2f:96:8e:cd:ca:74:8c:7e:2f:83:17:9b:fd:fa:de:c2:
05:88:e5:51:d9:92:b2:ad:03:dd:0e:93:9d:31:b0:28:dd:43:
08:86:89:8c:f0:9a:a9:32:56:fa:53:23:59:a8:2d:98:31:b2:
34:99:b2:75:b0:c1:23:70:f1:76:c7:67:48:30:d2:84:3c:b3:
ef:5d:44:94:c3:c6:ce:4e:1c:29:43:3d:e0:cf:1d:5c:e3:b2:
26:85:28:28:f6:98:38:cf:8e:73:74:48:b9:d1:fe:6d:f9:a2:
90:b6:2a:b9:74:43:3a:1a:05:90:99:c5:25:1b:4f:80:62:2e:
55:c4:20:07:8b:b8:cc:56:35:6f:48:b2:c7:f9:3d:82:b7:a1:
0f:64:76:78:6e:d0:f4:2d:72:26:50:1a:15:02:6b:63:cf:f3:
5c:24:5c:0a:a3:c4:7a:3e:30:6b:76:21:b9:9b:b7:64:a2:f8:
47:08:79:6f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgISAZQks3rfsT+50T7pds5VspVKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjUwMTAyMDE0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTk1YjQxZTljMzYzNzZkY2Y3NTE4ZmUxOTJmYWRlMTM1NzIxZTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovLHB8TKQHcGc1l53NrRQHsBdOyG
jz6RExJQ8FNyX7o714ilOUPq8eXJNPbi/3unAkDqR/k4UBcv9tdIkPfUzrC7ebua
6rCKMx9MMkKW7UIoYKYewyLvZc6ohp2Bwfayt+GVs6doEX9S6gKNBVvc1oytIZNf
AGmMQ1p8tJYkaflA+2VoK1URutx/7Sm3H8k2D3IqG34yAMCtwWP7HHsCQ8W1meTA
0yG5QTmzJyizeW0rnLZMzFHEuXCWDTFIJQ/10HP8YXqd+OTVkV1e30OFHGlNagC8
/OPhi+DuaPvtXitx8IfElwRtrpNDETScO82KuCEuCFTvA+5iY2zxihlLVQIDAQAB
o4ICWjCCAlYwHQYDVR0OBBYEFLmVtB6cNjdtz3UY/hkvreE1ch4VMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvdVpXMEhwdzJOMjNQZFJqLUdTLXQ0VFZ5SGhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIMAwDBAI+PIQD
BAE+PIgwDAMEAD48iwMEAD48jAMEAD48jgMEAD48kQMEAz48qAMEAdWwBAMEANWw
YDAMAwQB1bB6AwQB1bB8MA0EAgACMAcDBQAgAQeQMA0GCSqGSIb3DQEBCwUAA4IB
AQC/A92STs72IzZAjpCnn5ByyEaOUwx3nTkr43xDTvJzBFYtbQvKmOcPQCavRjhw
r4eB7nbR40ojQOpViY59cw42opBHMdb9N+eBiS+Wjs3KdIx+L4MXm/363sIFiOVR
2ZKyrQPdDpOdMbAo3UMIhomM8JqpMlb6UyNZqC2YMbI0mbJ1sMEjcPF2x2dIMNKE
PLPvXUSUw8bOThwpQz3gzx1c47ImhSgo9pg4z45zdEi50f5t+aKQtiq5dEM6GgWQ
mcUlG0+AYi5VxCAHi7jMVjVvSLLH+T2Ct6EPZHZ4btD0LXImUBoVAmtjz/NcJFwK
o8R6PjBrdiG5m7dkovhHCHlv
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:37:31 2025 by rpki-client