Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/w1jxPfhhAGoPgMVjXM3Ou6y_Dx8.roa
File: w1jxPfhhAGoPgMVjXM3Ou6y_Dx8.roa (raw, json)
Hash identifier: IN9dqG4HVYMpeJNEn9edKzmhnoaRgOzebwM5zcjPB3o=
Subject key identifier: C3:58:F1:3D:F8:61:00:6A:0F:80:C5:63:5C:CD:CE:BB:AC:BF:0F:1F
Certificate issuer: /CN=19dcc560daf3e2ac85b60b8661387f06c1fa1315
Certificate serial: 018D8432C4A561BE144E7B62BE7BFFF3F723
Authority key identifier: 19:DC:C5:60:DA:F3:E2:AC:85:B6:0B:86:61:38:7F:06:C1:FA:13:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdzFYNrz4qyFtguGYTh_BsH6ExU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/w1jxPfhhAGoPgMVjXM3Ou6y_Dx8.roa
Signing time: Wed 07 Feb 2024 15:32:16 +0000
ROA not before: Wed 07 Feb 2024 15:32:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 62.204.38.0/24 maxlen: 24
146.19.25.0/24 maxlen: 24
178.212.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:32:c4:a5:61:be:14:4e:7b:62:be:7b:ff:f3:f7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19dcc560daf3e2ac85b60b8661387f06c1fa1315
Validity
Not Before: Feb 7 15:32:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c358f13df861006a0f80c5635ccdcebbacbf0f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3f:42:57:73:0f:77:00:cc:94:fa:71:f9:03:
45:49:0d:fc:74:f4:01:5d:00:b6:5d:28:90:7b:fd:
8b:34:81:87:2b:cd:d2:4b:fb:cd:ef:19:13:d2:9f:
36:ca:32:ff:fa:ea:f9:78:ce:ec:9a:82:86:bc:96:
43:65:09:b4:d6:7e:54:3e:f8:8d:8d:6a:41:06:90:
9d:ca:e5:17:77:bc:83:76:e3:eb:b1:b1:36:5d:a4:
0b:64:f2:02:17:ee:87:f2:9a:67:72:02:b6:9d:14:
d9:17:15:af:23:79:47:88:bc:89:70:76:45:48:cc:
6b:04:29:75:97:9d:e2:01:06:ba:88:95:b4:52:d4:
48:d6:0d:bc:13:ee:d2:77:4b:7f:3b:9e:ed:b7:26:
f9:9a:0c:3c:95:50:5f:86:99:83:36:f8:70:4c:79:
ce:2a:c5:d1:db:1c:78:cb:83:e2:4d:12:ab:e8:f3:
e5:74:ff:ee:23:91:9e:b3:e4:a6:a2:07:d6:b7:56:
59:d0:9a:af:89:33:f5:25:fa:5a:79:10:65:00:29:
9a:33:01:94:4b:f8:cd:28:7d:52:03:1e:c0:6c:35:
f9:af:54:c2:9a:51:0b:d1:c3:18:cc:e1:86:b1:60:
a2:d7:13:36:a2:b3:e5:b1:03:e0:71:65:15:28:da:
3c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:58:F1:3D:F8:61:00:6A:0F:80:C5:63:5C:CD:CE:BB:AC:BF:0F:1F
X509v3 Authority Key Identifier:
keyid:19:DC:C5:60:DA:F3:E2:AC:85:B6:0B:86:61:38:7F:06:C1:FA:13:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdzFYNrz4qyFtguGYTh_BsH6ExU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/w1jxPfhhAGoPgMVjXM3Ou6y_Dx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/GdzFYNrz4qyFtguGYTh_BsH6ExU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.38.0/24
146.19.25.0/24
178.212.136.0/24
Signature Algorithm: sha256WithRSAEncryption
04:51:67:9b:4c:8d:3c:d9:7f:be:2b:2d:10:53:f1:74:c9:ff:
1f:a8:57:4b:51:8d:93:c4:f0:cc:f9:a8:33:63:c6:0f:e2:21:
5d:7b:a8:02:31:18:6d:df:e4:e8:7a:b7:74:de:6f:09:59:f4:
aa:e8:e6:94:81:19:d5:f2:7c:e0:4f:c6:bf:d7:2d:51:74:fa:
94:99:f1:4b:79:f1:f3:e4:50:78:16:b0:76:1a:1c:18:6d:a6:
6a:a7:49:06:da:9a:43:b2:7b:8f:dc:42:81:27:30:85:fb:d6:
3f:2b:8e:85:f4:9a:77:59:22:15:61:45:34:ef:db:11:79:e6:
f6:79:e9:36:8f:1f:2a:ec:fe:20:6e:23:13:5b:d5:56:9f:39:
51:c4:82:17:17:79:19:6a:57:6b:f9:de:a7:52:44:16:13:cf:
12:df:50:b6:f6:b4:59:e7:32:1f:38:a7:2e:38:3c:2f:f4:d3:
5e:97:3f:fe:e2:dc:43:e7:66:5e:3f:40:0b:2d:b1:60:c4:34:
57:08:8f:f4:3a:a9:1f:7c:cf:d0:b3:a4:f4:f1:6f:ce:1c:eb:
d7:dc:86:fa:a3:63:ef:77:b6:b9:e6:49:9b:a0:80:21:51:da:
a9:66:6e:2e:00:df:17:65:89:dc:56:99:9c:f8:e2:36:ba:97:
0a:c8:95:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:36:16 2025 by rpki-client