Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/q4USsJz7K6890VuEtSmmGcu2ZHE.roa
File: q4USsJz7K6890VuEtSmmGcu2ZHE.roa (raw, json)
Hash identifier: 1eYvKyNra90JzjPBcCkOKxw+TZx1HRBJozcK8lDQUow=
Subject key identifier: AB:85:12:B0:9C:FB:2B:AF:3D:D1:5B:84:B5:29:A6:19:CB:B6:64:71
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 018674266039F98CE543AC07D506F7510BDE
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/q4USsJz7K6890VuEtSmmGcu2ZHE.roa
Signing time: Tue 21 Feb 2023 13:25:17 +0000
ROA not before: Tue 21 Feb 2023 13:25:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61429
IP address blocks: 62.41.77.248/29 maxlen: 29
62.41.20.0/24 maxlen: 24
62.41.21.0/24 maxlen: 24
62.41.160.144/30 maxlen: 30
62.41.160.128/28 maxlen: 28
62.41.160.192/26 maxlen: 26
62.41.60.0/24 maxlen: 24
62.41.59.0/24 maxlen: 24
62.41.160.148/30 maxlen: 30
62.41.2.0/24 maxlen: 24
62.41.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:74:26:60:39:f9:8c:e5:43:ac:07:d5:06:f7:51:0b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Feb 21 13:25:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab8512b09cfb2baf3dd15b84b529a619cbb66471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:40:75:3b:d0:0f:16:cd:45:8a:12:36:41:
0f:e8:2b:cf:e6:8e:f4:03:92:89:1d:e2:73:7c:70:
40:bc:5f:1f:2a:c0:94:1f:e0:fd:a4:46:61:50:69:
d0:33:1e:bf:db:02:48:3e:d4:3b:c5:8b:d0:5d:8d:
08:5c:6d:9b:72:47:3e:f1:57:ee:88:cd:d9:b1:d2:
7f:d5:a1:1d:8a:50:3e:51:6f:a6:ea:55:af:fb:de:
dd:86:37:d5:37:e1:0a:77:5b:94:d8:15:f8:93:92:
3c:3b:df:79:cb:21:b1:9d:04:2f:a7:07:3a:56:c7:
15:81:07:97:83:e6:63:4d:a0:cc:fd:e9:90:96:40:
11:6f:e3:36:df:17:5a:fd:df:f7:74:05:27:12:71:
33:dc:7b:20:6d:b1:86:64:c8:e8:29:31:1a:9e:cb:
6f:66:77:16:ad:6d:6c:5e:73:07:1f:65:7e:6a:c3:
77:6b:02:2a:f0:45:7d:4d:6f:34:47:94:85:97:e8:
fc:3a:e6:fd:f9:aa:cd:7b:15:c9:fb:af:30:d8:2a:
f8:13:ff:6d:03:c5:1e:72:63:f3:ba:09:df:e4:d5:
a5:07:9f:29:9f:61:bf:dd:da:5f:f2:b1:10:7d:46:
cc:d5:82:4f:3d:ab:4c:36:64:80:78:b8:9c:ed:85:
eb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:85:12:B0:9C:FB:2B:AF:3D:D1:5B:84:B5:29:A6:19:CB:B6:64:71
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/q4USsJz7K6890VuEtSmmGcu2ZHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.2.0/24
62.41.10.0/24
62.41.20.0/23
62.41.59.0-62.41.60.255
62.41.77.248/29
62.41.160.128-62.41.160.151
62.41.160.192/26
Signature Algorithm: sha256WithRSAEncryption
87:6c:ea:f7:51:b1:ba:74:52:9d:e6:d6:17:15:93:cf:8e:05:
f1:8b:90:17:37:25:0d:a7:0b:01:a3:fb:3a:4f:64:41:c5:ca:
a7:53:1e:3e:ce:f7:45:5b:31:b8:b2:1c:06:ab:1e:70:f2:d7:
36:9d:e5:11:bb:41:e0:70:97:b8:77:cc:e3:75:5c:4b:5b:10:
fb:10:d7:60:6a:c1:ef:9b:54:56:ab:25:ec:10:16:ec:fe:de:
6a:0b:1c:39:eb:1c:0a:18:3e:42:0e:44:09:f9:8d:f4:3e:13:
53:39:f2:a2:4c:68:c6:49:64:a8:61:4a:60:7c:23:eb:7e:b3:
22:2e:fd:1e:52:b5:59:46:15:8e:44:e6:f5:29:c1:8b:e6:ef:
77:ab:10:df:7e:87:34:26:15:a1:74:37:d5:b4:75:34:73:6b:
9c:b6:93:ae:1b:22:76:86:b6:d5:0e:af:29:48:1c:24:4f:a6:
03:bb:01:a5:6f:54:bc:38:e9:89:08:b4:3a:9a:66:12:92:ad:
b4:48:d1:22:73:b3:fe:26:71:9e:4b:f3:7b:98:ca:70:7b:6a:
71:05:8b:1f:88:1a:d0:9a:d8:30:a1:38:49:93:ad:d5:d1:42:
97:ef:f1:e8:97:b4:d5:b3:c5:32:e3:d2:a4:59:46:5f:a7:f8:
ea:8e:cb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:48 2025 by rpki-client