Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/xNQLP5BFYa-o1m_wuSQJZ9Kg0VQ.roa
File: xNQLP5BFYa-o1m_wuSQJZ9Kg0VQ.roa (raw, json)
Hash identifier: vauW1wnYO27IoayAwkfS6HEmv70LjeZCHVy7oyZzM34=
Subject key identifier: C4:D4:0B:3F:90:45:61:AF:A8:D6:6F:F0:B9:24:09:67:D2:A0:D1:54
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019362CEA471A5F4243159E12E6DF70DC98B
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/xNQLP5BFYa-o1m_wuSQJZ9Kg0VQ.roa
Signing time: Mon 25 Nov 2024 10:12:09 +0000
ROA not before: Mon 25 Nov 2024 10:12:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51396
IP address blocks: 62.60.230.0/23 maxlen: 24
62.60.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:ce:a4:71:a5:f4:24:31:59:e1:2e:6d:f7:0d:c9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Nov 25 10:12:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4d40b3f904561afa8d66ff0b9240967d2a0d154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e9:a6:6b:80:9f:73:71:17:d0:71:74:a6:85:
63:ac:1d:ef:26:23:d1:1b:f6:e8:fd:5d:a9:de:07:
67:b8:55:69:54:9e:59:fb:b5:77:e6:de:d9:58:80:
5f:f9:cd:b6:12:99:79:0a:73:93:d4:dd:55:b4:40:
85:2c:1d:91:2d:8f:53:22:10:00:96:7a:51:e0:52:
4c:b4:ff:2c:db:d8:13:a5:6f:cf:bf:9e:09:06:7a:
8e:b8:a9:93:98:ec:6c:ad:b6:53:e3:ce:3e:9a:db:
ed:e8:5e:a5:0f:c1:db:8a:7c:8f:3f:ed:6b:68:e0:
90:01:88:c4:ae:2f:aa:3c:8a:1c:22:b9:2b:2a:a9:
aa:a7:e6:b0:e2:35:c5:82:87:81:b6:92:da:2d:10:
6d:58:89:82:18:84:34:13:c9:9d:92:5b:58:ae:da:
e1:4d:c8:b5:19:0e:25:cf:87:22:51:c6:d2:a1:53:
43:02:25:ee:d2:e6:fc:8a:c8:9a:9d:03:2c:89:a5:
a0:32:04:29:07:45:85:5c:19:77:d3:13:e0:31:53:
53:1e:9a:21:1f:83:4a:0f:83:e1:4d:81:2f:54:0c:
46:bc:d8:c5:28:f4:f6:ef:42:f0:96:a6:fe:5f:e4:
1f:4a:d7:4f:7d:ad:aa:2e:90:6b:87:38:eb:33:0c:
57:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D4:0B:3F:90:45:61:AF:A8:D6:6F:F0:B9:24:09:67:D2:A0:D1:54
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/xNQLP5BFYa-o1m_wuSQJZ9Kg0VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.230.0/23
62.60.235.0/24
Signature Algorithm: sha256WithRSAEncryption
87:90:36:4d:05:32:f4:3e:89:ad:f7:da:ac:32:3f:b1:39:9a:
df:94:10:5c:df:15:d3:36:2f:a2:2a:7f:d8:e0:10:7f:f3:28:
a5:90:9f:2d:bd:41:6e:d0:8d:a6:9e:02:d2:9b:55:20:7c:e0:
28:13:75:c0:60:55:ad:27:d3:88:28:3c:62:3d:7f:27:9f:1c:
aa:e7:79:b2:db:05:45:bb:25:f6:45:50:c4:54:57:71:c4:27:
35:5c:45:9e:a8:e9:ad:98:ea:89:a5:99:4c:63:b1:de:13:73:
e9:a8:a4:f7:93:89:2a:79:31:5a:6d:b9:b4:e5:7a:7c:e5:ba:
44:ae:2c:c1:11:dd:40:00:cd:92:a7:c3:36:5d:11:3f:dc:34:
d8:3e:7e:5e:f5:97:d9:08:ea:ea:fb:68:95:7f:bf:08:33:4b:
d8:8e:16:22:63:85:6c:4f:73:5a:b4:b8:2a:85:c6:a9:a2:9c:
16:7c:8f:14:0b:da:43:82:23:1a:5a:d4:6a:8e:0f:0c:2e:45:
58:60:a6:68:77:d1:ad:26:ab:62:1c:79:68:ff:ec:fe:58:e5:
3b:db:c4:94:7a:6b:f9:a5:88:99:5e:b8:b9:6d:d4:25:d7:91:
b5:83:62:6c:c8:80:df:f3:94:b0:35:e6:c4:5a:23:25:cd:7c:
46:88:fd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:17:07 2025 by rpki-client