Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/GwkO3rz6AgdBiNzLEo4XvzaeMQc.roa
File: GwkO3rz6AgdBiNzLEo4XvzaeMQc.roa (raw, json)
Hash identifier: Bn4d1iggK7KVZMUMWRluUdrbUjnZ2dokn+Kfa7Izaa4=
Subject key identifier: 1B:09:0E:DE:BC:FA:02:07:41:88:DC:CB:12:8E:17:BF:36:9E:31:07
Certificate issuer: /CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Certificate serial: 018CC5008C56131CB4C4B04CF19E2C768087
Authority key identifier: 40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/GwkO3rz6AgdBiNzLEo4XvzaeMQc.roa
Signing time: Mon 01 Jan 2024 12:29:56 +0000
ROA not before: Mon 01 Jan 2024 12:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206175
IP address blocks: 62.148.112.0/24 maxlen: 24
62.148.111.0/24 maxlen: 24
62.148.107.0/24 maxlen: 24
62.148.106.0/24 maxlen: 24
62.148.110.0/24 maxlen: 24
62.148.109.0/24 maxlen: 24
62.148.108.0/24 maxlen: 24
62.148.114.0/24 maxlen: 24
62.148.113.0/24 maxlen: 24
62.148.117.0/24 maxlen: 24
62.148.116.0/24 maxlen: 24
62.148.115.0/24 maxlen: 24
62.148.118.0/24 maxlen: 24
62.148.125.0/24 maxlen: 24
62.148.121.0/24 maxlen: 24
62.148.120.0/24 maxlen: 24
62.148.119.0/24 maxlen: 24
62.148.124.0/24 maxlen: 24
62.148.123.0/24 maxlen: 24
62.148.122.0/24 maxlen: 24
62.148.127.0/24 maxlen: 24
62.148.126.0/24 maxlen: 24
62.148.98.0/24 maxlen: 24
62.148.97.0/24 maxlen: 24
62.148.96.0/24 maxlen: 24
62.148.100.0/24 maxlen: 24
62.148.99.0/24 maxlen: 24
62.148.103.0/24 maxlen: 24
62.148.102.0/24 maxlen: 24
62.148.101.0/24 maxlen: 24
62.148.105.0/24 maxlen: 24
62.148.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:8c:56:13:1c:b4:c4:b0:4c:f1:9e:2c:76:80:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Validity
Not Before: Jan 1 12:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b090edebcfa02074188dccb128e17bf369e3107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:88:97:49:0c:a3:d6:7e:d3:d9:aa:bf:7c:37:
13:16:54:dd:4c:08:fa:53:b6:fa:a5:b4:b7:af:a9:
24:01:08:b2:4c:fe:f4:7c:39:1b:59:39:44:23:04:
fe:23:3d:ac:63:aa:9d:08:3f:db:fd:e3:01:86:5a:
c1:c5:76:c7:3a:eb:ed:59:b3:c4:a0:73:c1:8f:73:
32:e1:d4:74:fc:3a:82:c6:a7:3d:60:66:1a:04:99:
f0:f5:bf:af:cc:6d:85:dd:b7:fc:d1:c8:22:ee:51:
c4:19:75:c7:71:48:94:da:69:c6:bd:2a:e7:7d:39:
b7:f4:08:35:49:96:28:fa:ef:30:0d:3c:74:bc:e4:
af:da:a6:0e:fd:ef:19:a7:ed:85:84:63:97:f1:30:
c0:c1:f1:b2:ca:f5:ce:2f:64:2d:67:42:9a:53:83:
f1:ba:25:8e:6b:42:d0:1c:27:eb:f3:51:70:c1:f0:
72:5c:ca:5f:b6:21:4b:19:44:0d:a4:46:1f:05:81:
25:7e:3a:50:2e:a9:66:b6:c8:f3:17:55:84:de:9d:
00:7f:9c:b1:40:e2:0d:d9:d6:cd:cc:4a:5e:8f:c6:
09:9f:64:3f:55:5c:c1:19:e6:43:8a:9b:35:a8:90:
35:76:d6:be:9d:e5:82:4d:bb:3f:b8:b8:5c:14:f9:
5b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:09:0E:DE:BC:FA:02:07:41:88:DC:CB:12:8E:17:BF:36:9E:31:07
X509v3 Authority Key Identifier:
keyid:40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/GwkO3rz6AgdBiNzLEo4XvzaeMQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.148.96.0/19
Signature Algorithm: sha256WithRSAEncryption
2e:6a:28:c2:e7:18:ea:7d:42:66:c1:76:2d:e3:f3:34:53:52:
c9:f6:82:3b:57:a5:f0:14:63:6d:c1:1a:6b:3c:ed:68:9c:d2:
06:49:d2:75:89:35:00:c8:0a:c2:f5:ce:af:1c:3f:a6:f3:8c:
f5:aa:b4:6e:6c:51:3e:bc:23:e0:12:22:78:85:37:4d:1e:af:
51:56:67:10:ec:a4:29:12:60:68:c8:ba:ee:5d:aa:79:61:6e:
89:bb:e1:e5:ca:a1:d4:f1:fc:cd:27:a1:4b:40:b8:43:91:a4:
7b:85:40:01:39:62:3e:e1:d4:4b:5b:94:97:5b:54:2d:25:e8:
c3:54:dc:f6:53:f5:17:d9:08:83:b5:f7:98:f9:45:59:cc:6d:
e4:88:2a:a4:4c:3b:65:3e:fc:d9:d3:51:43:56:e7:50:b8:f6:
a0:26:b1:af:1d:b4:d9:f9:30:14:40:3a:0f:a5:15:27:7b:30:
9d:92:76:64:dc:9c:d1:71:cd:3c:46:dd:c6:d7:df:00:13:e8:
2f:f3:c9:c4:be:58:08:f8:6c:8a:a2:be:74:a3:4f:84:c7:55:
bb:1f:6d:f7:87:fd:f6:51:9b:a9:6e:5e:19:b5:72:04:c2:41:
03:2c:55:22:bc:3c:cc:08:3c:ab:19:f0:9e:c4:57:9d:74:09:
2c:e8:54:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:34 2025 by rpki-client