Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/wJiZKUsUZgClbGLE7b2XWgcweo0.roa
File: wJiZKUsUZgClbGLE7b2XWgcweo0.roa (raw, json)
Hash identifier: 6ZG16kxQhfbxvHqykHWGAKns+dA7A7tcWi8ZFZ70KII=
Subject key identifier: C0:98:99:29:4B:14:66:00:A5:6C:62:C4:ED:BD:97:5A:07:30:7A:8D
Certificate issuer: /CN=720606eddbcec7a57211941a67cc729b42915c5e
Certificate serial: 018D8431D9BCF7371B8E000DF421D53564FA
Authority key identifier: 72:06:06:ED:DB:CE:C7:A5:72:11:94:1A:67:CC:72:9B:42:91:5C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgYG7dvOx6VyEZQaZ8xym0KRXF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/wJiZKUsUZgClbGLE7b2XWgcweo0.roa
Signing time: Wed 07 Feb 2024 15:31:15 +0000
ROA not before: Wed 07 Feb 2024 15:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 62.3.2.0/24 maxlen: 24
62.204.34.0/24 maxlen: 24
91.213.85.0/24 maxlen: 24
146.19.47.0/24 maxlen: 24
176.116.28.0/24 maxlen: 24
185.187.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:31:d9:bc:f7:37:1b:8e:00:0d:f4:21:d5:35:64:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720606eddbcec7a57211941a67cc729b42915c5e
Validity
Not Before: Feb 7 15:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c09899294b146600a56c62c4edbd975a07307a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:53:3f:ad:1c:f6:6a:46:36:d6:54:72:57:
b2:df:0e:28:81:e1:98:cc:b6:88:24:58:89:33:27:
f5:9c:d2:40:a3:06:73:d2:11:0d:3f:a7:88:47:fc:
f5:e8:16:73:12:59:20:10:2e:6a:73:06:13:f3:26:
f8:87:ea:61:89:88:15:4d:4d:c5:27:0c:c4:89:f9:
20:53:e2:7a:4f:74:53:2a:36:af:ef:7a:6d:38:4e:
23:f7:dd:1e:31:cb:b7:11:5b:6b:5f:c4:31:cd:7e:
7d:43:35:b8:64:8a:bc:90:72:6a:30:92:e4:ad:b8:
24:fe:54:dc:01:53:c3:c2:dd:35:68:a0:ed:a0:45:
e6:88:63:7f:ac:5d:f3:91:95:3a:3d:84:f5:a0:d9:
e0:06:2f:2f:a3:3f:da:3b:2f:08:a8:e7:cd:a9:df:
ae:05:46:39:a8:c8:36:61:8e:11:17:4b:63:23:26:
8f:e3:b2:ed:bd:f1:b4:fa:d7:89:30:ae:68:01:36:
4b:ac:ef:64:2d:cf:f5:ec:67:d4:06:4a:71:66:da:
e5:39:f9:6c:df:0c:71:ae:53:a7:b7:54:0c:66:aa:
bf:4f:7d:ce:96:82:fe:4a:b9:d9:17:63:1b:91:7c:
25:d0:74:e5:51:ca:23:83:b9:e4:85:e4:6a:be:de:
64:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:98:99:29:4B:14:66:00:A5:6C:62:C4:ED:BD:97:5A:07:30:7A:8D
X509v3 Authority Key Identifier:
keyid:72:06:06:ED:DB:CE:C7:A5:72:11:94:1A:67:CC:72:9B:42:91:5C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgYG7dvOx6VyEZQaZ8xym0KRXF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/wJiZKUsUZgClbGLE7b2XWgcweo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/cgYG7dvOx6VyEZQaZ8xym0KRXF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.2.0/24
62.204.34.0/24
91.213.85.0/24
146.19.47.0/24
176.116.28.0/24
185.187.19.0/24
Signature Algorithm: sha256WithRSAEncryption
68:06:f3:6b:b0:24:7a:cb:22:d3:db:ba:ff:fd:e9:d1:d0:6b:
14:e0:f2:9c:49:4a:18:3b:ef:3e:79:b3:76:54:81:18:09:4e:
bb:5e:53:5c:49:d6:ac:c8:12:cb:76:60:e7:54:75:f4:fd:51:
35:01:94:b3:7c:63:03:28:f5:86:4d:5c:f1:c9:6b:59:84:1b:
6c:10:d8:9a:80:ac:8d:3a:68:83:59:63:e8:ce:f4:10:02:7b:
2e:42:a1:31:e2:48:fe:da:10:78:7a:7f:38:98:a1:19:c0:b1:
77:d7:14:93:12:bf:5d:0d:23:27:8f:a6:7d:ea:6c:3b:78:4f:
9c:6f:97:c7:63:b3:d4:45:35:2f:46:14:b2:a9:e1:e0:21:2b:
57:af:94:e4:20:8d:3a:a9:eb:5d:ca:a7:ef:64:89:ce:7e:ca:
03:8d:21:61:43:d3:5d:14:32:25:0f:b6:92:6d:a7:5a:c2:b3:
0d:18:43:bd:81:ab:d9:b7:b7:4e:b8:71:99:6c:e2:ac:b8:cd:
ae:ad:28:56:a9:56:4d:4c:01:1c:41:ad:46:1c:b2:c7:1c:ab:
6e:90:cb:e9:48:43:9d:71:71:43:88:cf:1d:4d:a7:0c:86:47:
e5:97:8a:0c:12:ff:78:04:b1:86:01:b3:e7:f9:8a:70:6c:c3:
f3:50:7c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:05:15 2025 by rpki-client