Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/Btc4qpdT0aRzIHC1dA2Swul-oTg.roa
File: Btc4qpdT0aRzIHC1dA2Swul-oTg.roa (raw, json)
Hash identifier: uKGbMNZQlHtPafIv0wdS9IBOfkHQ7RxwMz40Kx+7kY8=
Subject key identifier: 06:D7:38:AA:97:53:D1:A4:73:20:70:B5:74:0D:92:C2:E9:7E:A1:38
Certificate issuer: /CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Certificate serial: 019426D9D3576DCC74255B3D5A7B280A216A
Authority key identifier: 1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/Btc4qpdT0aRzIHC1dA2Swul-oTg.roa
Signing time: Thu 02 Jan 2025 11:49:56 +0000
ROA not before: Thu 02 Jan 2025 11:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48571
IP address blocks: 185.62.8.0/24 maxlen: 24
185.62.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d3:57:6d:cc:74:25:5b:3d:5a:7b:28:0a:21:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Validity
Not Before: Jan 2 11:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06d738aa9753d1a4732070b5740d92c2e97ea138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:40:73:97:8e:78:7d:0c:eb:fe:ba:d2:2c:
67:b2:1c:e9:49:ee:ec:a3:dd:b4:bd:a5:2e:0f:8e:
5e:52:eb:05:b2:d4:6c:bc:f8:ca:d1:5c:93:2d:48:
a3:bd:94:9f:00:0e:6c:71:f7:c1:9a:bf:62:d7:e0:
94:4f:25:c6:5b:2d:3a:6a:c7:98:c6:19:fb:88:2a:
69:67:ef:25:a2:b1:f2:5e:60:ed:e7:92:3d:f8:65:
9a:57:93:1a:6d:33:f1:5b:07:70:ba:fe:29:22:ba:
97:d1:4e:cf:26:a6:97:8f:a2:e4:fe:ed:81:43:65:
02:ae:e5:2d:a2:d9:9b:10:4c:e8:c5:ad:e8:78:63:
a1:09:d7:52:e3:21:af:54:ba:76:d1:54:1a:47:df:
2a:c9:27:33:11:be:b5:bd:78:a9:af:61:93:4e:1b:
60:94:dc:e9:19:83:42:1d:aa:3e:91:5f:df:57:d4:
72:56:47:15:d5:43:ee:d4:e5:fb:8a:55:2b:70:c0:
8f:07:41:8c:b7:4a:2c:b9:36:a4:2b:ac:70:c8:ff:
44:6c:d2:50:3a:85:ad:8d:d4:eb:45:13:22:d1:d2:
a1:f0:d6:95:74:f7:23:ee:81:d5:3d:55:48:b5:58:
7a:53:1d:43:6b:3e:2d:eb:4c:85:89:d2:d7:ff:ff:
20:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D7:38:AA:97:53:D1:A4:73:20:70:B5:74:0D:92:C2:E9:7E:A1:38
X509v3 Authority Key Identifier:
keyid:1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/Btc4qpdT0aRzIHC1dA2Swul-oTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.8.0/24
185.62.11.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:8c:10:8d:7a:d6:fd:4b:2c:80:5b:44:0a:4d:cc:d1:14:ee:
47:dd:84:ac:25:06:44:b7:d3:c8:4b:6e:ec:07:35:ca:3a:06:
9b:36:82:88:3a:ac:5d:a2:8e:44:9c:19:2f:75:56:bf:94:e1:
f0:05:49:ba:87:5a:0a:b0:8f:bb:ee:66:f7:e9:b8:ee:e0:2f:
c3:67:f4:1d:11:dd:38:23:f5:48:ac:53:a6:b9:aa:f2:c9:06:
dc:12:13:df:c5:3a:49:dc:63:b7:d8:5e:03:b7:55:33:fc:58:
e7:ad:3d:58:55:1b:26:06:5b:cc:07:38:6f:ec:4f:e7:cf:59:
e1:ee:6f:fa:0c:11:bc:eb:4b:f4:78:b3:c7:cc:2e:a6:81:09:
d3:71:b6:b4:cd:64:03:ce:6a:e9:93:5b:9a:60:95:d9:84:88:
12:f0:b6:a7:88:00:d9:ce:de:e6:b7:43:a5:da:ca:98:b7:8a:
c9:51:f0:f6:71:1c:50:d7:e3:34:bd:af:df:51:2c:14:50:44:
ef:79:66:83:3d:0a:1c:84:ae:77:9b:42:de:df:38:4b:5d:fc:
b2:cd:d0:73:af:2a:9f:d7:c1:62:0e:95:ab:63:35:1d:51:79:
4c:3a:20:b0:db:66:a5:9d:8c:ed:c3:83:54:f3:75:38:50:b3:
5d:7a:47:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:38:56 2025 by rpki-client