Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/CGcxtmWeCpvy-hws3eRHzilM_U8.roa
File: CGcxtmWeCpvy-hws3eRHzilM_U8.roa (raw, json)
Hash identifier: jBVl4vxGiFiecF4Ya3SdDsWeuPXdCCfCm0o+ggirOFY=
Subject key identifier: 08:67:31:B6:65:9E:0A:9B:F2:FA:1C:2C:DD:E4:47:CE:29:4C:FD:4F
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01961A749D44D1A549C5EBCC495671C45564
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/CGcxtmWeCpvy-hws3eRHzilM_U8.roa
Signing time: Wed 09 Apr 2025 12:09:32 +0000
ROA not before: Wed 09 Apr 2025 12:09:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48147
IP address blocks: 62.60.162.0/24 maxlen: 24
62.60.196.0/23 maxlen: 24
62.60.199.0/24 maxlen: 24
62.60.222.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:74:9d:44:d1:a5:49:c5:eb:cc:49:56:71:c4:55:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Apr 9 12:09:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=086731b6659e0a9bf2fa1c2cdde447ce294cfd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ba:40:69:d0:d1:e1:4b:12:03:a6:1f:c4:2d:
74:f5:54:62:43:c4:ec:64:3a:ec:5e:e6:9f:4f:61:
c6:c2:e1:a3:9f:6a:58:5f:19:ec:f6:9b:96:1f:c8:
39:38:3e:37:c6:0b:95:3e:fc:40:9e:56:20:88:51:
04:c0:61:03:37:ad:76:d9:92:fa:e3:99:06:6a:f2:
ed:3e:d3:d4:86:cd:23:2e:ee:a5:6a:60:f0:d9:b2:
1a:28:ba:14:e8:4b:ec:4a:90:ff:f4:12:e7:d2:ae:
09:77:52:64:c6:53:2a:d1:fc:8b:a4:17:f1:f9:72:
4d:cd:e9:35:5f:f3:1c:bc:d7:be:5f:d8:71:be:28:
95:c7:61:d7:ee:e6:ce:1a:11:12:62:01:51:d6:26:
3b:25:a3:c2:b2:ee:f0:1d:9f:2d:49:54:e4:27:a6:
a5:24:26:07:e7:28:89:1e:88:76:0d:7f:6b:a6:ca:
c4:15:12:0b:6f:de:5b:43:47:c2:4a:ba:05:85:64:
3d:95:45:0c:7c:a9:19:9a:8f:aa:e5:a1:79:10:1f:
54:9d:75:22:c2:9e:ea:8a:f2:3c:1a:01:4e:a3:41:
ae:78:7a:4d:a7:10:65:cf:77:cd:ae:d1:65:30:f8:
f8:6a:2d:50:80:a1:ec:6e:f4:9d:eb:cd:45:72:5e:
82:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:67:31:B6:65:9E:0A:9B:F2:FA:1C:2C:DD:E4:47:CE:29:4C:FD:4F
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/CGcxtmWeCpvy-hws3eRHzilM_U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.162.0/24
62.60.196.0/23
62.60.199.0/24
62.60.222.0/23
Signature Algorithm: sha256WithRSAEncryption
03:cf:26:4e:50:62:34:b2:60:da:59:d7:d7:ce:8f:fd:10:0a:
ad:47:34:99:80:4e:d3:b3:ef:6e:e0:97:1b:66:f7:74:04:af:
26:03:82:15:2f:4d:f9:d0:06:cf:b5:29:c5:ed:20:25:ba:ad:
0d:6d:dd:3e:8b:0b:ce:a2:23:74:22:c9:16:65:d0:b0:b0:2a:
6e:f5:b0:67:df:7e:32:3b:48:8b:08:a7:03:73:d9:16:76:eb:
96:4a:71:44:a0:71:17:3e:03:0f:c5:a3:5a:9a:c7:81:c0:c1:
3c:11:d8:c8:19:15:8d:5f:1f:fa:cf:23:f3:45:2e:54:0b:f1:
b0:5a:d7:fd:18:f5:2a:ad:16:4a:e4:7d:6b:62:20:aa:b7:72:
0a:9e:51:f3:25:46:48:7f:11:5c:6f:11:24:c0:97:2d:c9:2c:
e2:b0:7c:28:a2:a1:52:f3:9d:05:95:09:60:5b:f2:11:58:2c:
73:9b:b8:04:1a:01:a7:a7:d4:ce:bb:b0:89:6b:40:09:f6:61:
df:3a:ba:ed:ea:c6:45:6d:1d:ae:67:af:c2:8a:43:d5:52:75:
96:15:5f:da:82:5f:a7:5b:11:0d:60:4b:99:7d:dd:19:8e:e3:
5f:e0:45:77:3b:73:0b:03:e2:8b:18:ad:18:37:18:2f:a6:72:
a5:7c:99:d5
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZYadJ1E0aVJxevMSVZxxFVkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjUwNDA5MTIwOTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODY3MzFiNjY1OWUwYTliZjJmYTFjMmNkZGU0NDdjZTI5NGNmZDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bpAadDR4UsSA6YfxC109VRiQ8Ts
ZDrsXuafT2HGwuGjn2pYXxns9puWH8g5OD43xguVPvxAnlYgiFEEwGEDN6122ZL6
45kGavLtPtPUhs0jLu6lamDw2bIaKLoU6EvsSpD/9BLn0q4Jd1JkxlMq0fyLpBfx
+XJNzek1X/McvNe+X9hxviiVx2HX7ubOGhESYgFR1iY7JaPCsu7wHZ8tSVTkJ6al
JCYH5yiJHoh2DX9rpsrEFRILb95bQ0fCSroFhWQ9lUUMfKkZmo+q5aF5EB9UnXUi
wp7qivI8GgFOo0GueHpNpxBlz3fNrtFlMPj4ai1QgKHsbvSd681Fcl6C+QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFAhnMbZlngqb8vocLN3kR84pTP1PMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvQ0djeHRtV2VDcHZ5LWh3czNlUkh6aWxNX1U4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAPjyiAwQB
PjzEAwQAPjzHAwQBPjzeMA0GCSqGSIb3DQEBCwUAA4IBAQADzyZOUGI0smDaWdfX
zo/9EAqtRzSZgE7Ts+9u4JcbZvd0BK8mA4IVL0350AbPtSnF7SAluq0Nbd0+iwvO
oiN0IskWZdCwsCpu9bBn334yO0iLCKcDc9kWduuWSnFEoHEXPgMPxaNamseBwME8
EdjIGRWNXx/6zyPzRS5UC/GwWtf9GPUqrRZK5H1rYiCqt3IKnlHzJUZIfxFcbxEk
wJctySzisHwooqFS850FlQlgW/IRWCxzm7gEGgGnp9TOu7CJa0AJ9mHfOrrt6sZF
bR2uZ6/CikPVUnWWFV/agl+nWxENYEuZfd0ZjuNf4EV3O3MLA+KLGK0YNxgvpnKl
fJnV
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:06 2025 by rpki-client on console.sobornost.net