Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/i9AJyMpzX2vyYj4H4Ofn0V4Di3E.roa
File: i9AJyMpzX2vyYj4H4Ofn0V4Di3E.roa (raw, json)
Hash identifier: awr9oQmxNqlc8X7GU8JQ6v2Bdl2SC+IQueAf856WT3Q=
Subject key identifier: 8B:D0:09:C8:CA:73:5F:6B:F2:62:3E:07:E0:E7:E7:D1:5E:03:8B:71
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01961A206367A5BB9D8DF5013D84DD34E7F8
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/i9AJyMpzX2vyYj4H4Ofn0V4Di3E.roa
Signing time: Wed 09 Apr 2025 10:37:32 +0000
ROA not before: Wed 09 Apr 2025 10:37:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59441
IP address blocks: 62.60.128.0/21 maxlen: 24
62.60.164.0/22 maxlen: 24
62.60.200.0/22 maxlen: 24
62.60.204.0/22 maxlen: 24
62.60.209.0/24 maxlen: 24
62.60.210.0/24 maxlen: 24
62.60.211.0/24 maxlen: 24
62.60.212.0/22 maxlen: 24
213.176.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:20:63:67:a5:bb:9d:8d:f5:01:3d:84:dd:34:e7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Apr 9 10:37:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bd009c8ca735f6bf2623e07e0e7e7d15e038b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7c:59:fe:c9:21:d2:02:49:ae:a6:b2:e0:f6:
da:a9:49:25:b4:39:e7:93:6b:72:a9:9d:57:64:43:
1a:f6:dc:31:a4:7a:1c:76:1f:45:39:22:7d:b3:6e:
cb:46:b4:23:a4:b6:6c:e1:33:5e:d3:5c:dd:a8:5a:
c0:4e:5b:9b:8d:fe:19:f6:53:92:76:a5:72:08:0a:
5f:03:1c:e3:0b:68:21:f4:88:b4:6a:c9:b1:5d:d7:
35:26:4e:46:d3:45:e4:48:70:63:bf:9e:27:a7:19:
c9:59:d0:cd:c2:6d:85:8a:25:9f:84:5c:b4:0c:76:
45:08:d0:f0:2b:01:51:ea:bd:74:38:86:11:a4:59:
c6:91:bd:c7:ee:3b:de:0f:d7:94:c6:e6:92:bc:bc:
57:5c:37:a0:ec:41:8c:ee:29:ac:54:55:8f:39:b4:
29:1d:c9:f3:1d:11:ca:ff:95:48:d8:0c:5c:a4:18:
a4:32:6b:6d:42:1f:da:ad:21:86:e5:fb:0c:d5:ab:
69:d0:8f:1e:d7:28:22:78:86:fd:93:53:29:c3:9a:
e7:12:a8:bc:3d:b2:39:19:d9:99:04:dc:06:6f:1f:
68:88:ea:ef:ab:63:1c:a1:41:41:8c:c1:63:f3:55:
c9:84:fa:5c:e3:30:ae:fa:72:e8:2c:20:d1:29:a2:
b6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D0:09:C8:CA:73:5F:6B:F2:62:3E:07:E0:E7:E7:D1:5E:03:8B:71
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/i9AJyMpzX2vyYj4H4Ofn0V4Di3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.128.0/21
62.60.164.0/22
62.60.200.0/21
62.60.209.0-62.60.215.255
213.176.28.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:22:be:e8:59:7f:31:0e:f4:1f:ac:05:97:e5:60:aa:f8:d0:
b5:75:a8:5c:98:ad:0a:cc:8e:c0:f0:f1:7c:44:21:b7:be:68:
83:34:fa:c7:fa:5a:d9:4c:f6:15:90:d6:ac:ff:7c:64:44:bb:
a3:aa:be:3d:aa:17:de:ed:14:17:0e:9f:67:62:c7:e1:96:ea:
ba:4b:f3:b2:64:6f:60:d7:2e:cb:14:81:9e:98:7a:80:88:27:
4d:d8:ee:3a:59:7c:7c:12:9e:13:b2:a7:61:3e:ab:fe:be:9e:
e8:43:e1:12:27:31:72:94:6f:95:34:2f:be:e1:51:e3:e3:1e:
3f:b4:ec:d6:3b:ee:43:53:f3:3d:1e:d2:95:d3:06:1e:ad:19:
d8:4f:35:b1:80:ff:d7:e9:b9:ef:3e:7b:f4:f8:66:4a:be:d5:
92:1b:e7:54:c0:ca:cb:6e:ff:c4:2f:41:a3:0d:23:e5:9d:4b:
15:f3:36:47:74:71:e4:a1:9a:4c:df:44:a2:49:32:da:27:7e:
77:8e:76:af:07:e3:c9:fb:96:c7:ab:f8:71:c2:d3:f9:aa:27:
f3:a9:f1:f3:3e:cc:aa:16:52:69:dc:1e:5d:ed:57:a3:f8:16:
1a:8c:8e:97:49:b1:bc:42:0d:ba:b6:29:a7:5f:23:e5:d5:58:
b6:af:8a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:06 2025 by rpki-client on console.sobornost.net