Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/uwxSfgtDb1hs4GjNpuGb8j73UQc.roa
File: uwxSfgtDb1hs4GjNpuGb8j73UQc.roa (raw, json)
Hash identifier: RSHlzEu5gedHDd64WPHnVhXKRlBuPWqfK8I3+3ZiN70=
Subject key identifier: BB:0C:52:7E:0B:43:6F:58:6C:E0:68:CD:A6:E1:9B:F2:3E:F7:51:07
Certificate issuer: /CN=8559fea7e83e64e5d82562313c3a3f190f49f032
Certificate serial: 019427B66799AB0665C8989184B3938F6CE3
Authority key identifier: 85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/uwxSfgtDb1hs4GjNpuGb8j73UQc.roa
Signing time: Thu 02 Jan 2025 15:50:53 +0000
ROA not before: Thu 02 Jan 2025 15:50:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200869
IP address blocks: 62.112.14.0/24 maxlen: 24
62.112.15.0/24 maxlen: 24
62.112.16.0/24 maxlen: 24
62.112.17.0/24 maxlen: 24
62.112.20.0/24 maxlen: 24
185.93.16.0/24 maxlen: 24
185.93.17.0/24 maxlen: 24
185.93.18.0/24 maxlen: 24
185.93.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:67:99:ab:06:65:c8:98:91:84:b3:93:8f:6c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8559fea7e83e64e5d82562313c3a3f190f49f032
Validity
Not Before: Jan 2 15:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb0c527e0b436f586ce068cda6e19bf23ef75107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a1:08:63:3c:74:50:b0:02:45:e4:67:a6:bd:
1d:e9:5a:30:af:0d:5e:c1:c9:aa:b2:6f:74:6b:ea:
fa:58:43:e8:2d:7e:8b:b0:12:69:19:ed:14:68:6d:
3a:68:f6:0a:44:2b:19:36:6d:a7:2b:47:81:f1:56:
af:ad:22:6a:2e:4e:05:e1:ad:00:a7:86:46:5c:18:
79:71:34:9c:6c:32:56:19:7a:0c:18:81:8a:1f:87:
dc:4f:89:56:93:9c:b0:63:80:34:46:7f:d0:5d:ec:
02:33:d8:4d:a7:6f:6a:2a:7b:fb:19:db:c5:ff:f5:
aa:f8:4f:7d:f8:5b:fe:a8:db:e3:d9:b1:19:b2:f0:
b5:2d:97:86:a9:82:41:bb:dd:b8:e3:b9:ed:2e:38:
6d:c2:73:54:7c:42:b1:43:d2:6c:ce:47:d4:cd:46:
38:15:ce:b5:d0:39:e4:ad:b0:a2:80:d6:d6:ab:05:
e6:bc:32:42:b9:52:58:97:6c:86:03:08:ba:0c:03:
6e:e4:12:9b:f3:c2:6b:1c:ad:7f:1c:d3:ea:86:5e:
fd:6b:e2:97:0f:60:7d:0e:37:9a:bd:1d:00:57:42:
b0:8a:e6:ca:fa:c2:2a:a8:ac:89:8e:d7:a4:a6:cf:
46:02:c1:78:97:26:ef:4d:84:38:55:db:0d:29:76:
aa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0C:52:7E:0B:43:6F:58:6C:E0:68:CD:A6:E1:9B:F2:3E:F7:51:07
X509v3 Authority Key Identifier:
keyid:85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/uwxSfgtDb1hs4GjNpuGb8j73UQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.14.0-62.112.17.255
62.112.20.0/24
185.93.16.0/22
Signature Algorithm: sha256WithRSAEncryption
cf:88:45:22:c5:c8:60:62:98:62:72:ea:f8:68:6c:73:4c:34:
75:5d:b7:58:5c:73:60:aa:2c:99:49:5f:e5:20:82:cc:36:5b:
f2:53:67:ce:92:89:08:fc:08:d5:f9:5b:2f:e3:6b:dc:45:e9:
db:f8:91:fc:c2:f1:56:e5:20:d3:66:3e:64:5b:12:f9:0f:37:
30:2a:ad:96:dd:7f:78:71:36:0b:09:87:67:2a:3e:c0:20:24:
7c:21:07:2d:fd:f8:dd:7d:17:71:91:ac:f3:c9:d1:84:14:24:
48:22:7d:8b:59:ff:f7:f2:aa:45:f1:40:34:de:0a:a0:08:5a:
03:11:bb:4c:e4:68:a8:76:08:07:96:d1:81:9f:1c:ea:0f:89:
b9:b4:63:85:da:14:b0:4c:43:62:1b:11:42:65:8d:c7:64:e1:
80:3c:8a:cc:fd:53:46:c1:5d:e2:5f:4b:8c:65:db:38:15:34:
78:71:73:7d:2d:d2:3c:48:51:1a:34:04:35:47:9d:79:a3:29:
4b:62:5e:00:91:c4:a1:34:c6:df:5b:0f:41:f2:54:03:dc:25:
bd:32:0d:d0:84:e3:db:61:53:5b:70:02:38:44:89:ae:2e:9f:
14:2d:46:36:67:63:d6:c8:85:22:bc:4c:93:98:5a:a0:3d:e1:
56:61:47:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:08:18 2025 by rpki-client