Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/EtKR-kQx-fQIYWuQ-lYzi3aG73M.roa
File: EtKR-kQx-fQIYWuQ-lYzi3aG73M.roa (raw, json)
Hash identifier: Tv2U/xkIvhOtN5S9AYeK8bEvblqxzhCnqAMAXe7i/DA=
Subject key identifier: 12:D2:91:FA:44:31:F9:F4:08:61:6B:90:FA:56:33:8B:76:86:EF:73
Certificate issuer: /CN=6fd60d9b943b08c447cf7e54989f52b0dec5f7e7
Certificate serial: 0195416F3947CF6A3D92C169C96367F82172
Authority key identifier: 6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/EtKR-kQx-fQIYWuQ-lYzi3aG73M.roa
Signing time: Wed 26 Feb 2025 08:46:02 +0000
ROA not before: Wed 26 Feb 2025 08:46:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13267
IP address blocks: 62.240.192.0/19 maxlen: 19
62.240.192.0/22 maxlen: 22
62.240.192.0/23 maxlen: 23
62.240.194.0/23 maxlen: 23
62.240.196.0/22 maxlen: 22
62.240.196.0/23 maxlen: 23
62.240.200.0/21 maxlen: 21
62.240.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:41:6f:39:47:cf:6a:3d:92:c1:69:c9:63:67:f8:21:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fd60d9b943b08c447cf7e54989f52b0dec5f7e7
Validity
Not Before: Feb 26 08:46:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12d291fa4431f9f408616b90fa56338b7686ef73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:29:80:09:78:dc:a0:2e:eb:8a:fa:46:fd:62:
b0:0f:76:4c:4d:7b:37:fd:6b:12:14:20:fc:05:dd:
72:0f:2b:ca:60:3c:8b:4a:7f:ea:5d:2a:cc:fe:71:
2c:2d:4e:2a:05:9f:d2:9a:6b:93:a0:29:50:02:14:
65:94:c4:9b:4e:4b:be:f9:17:34:3a:80:12:82:86:
33:84:a6:28:9d:cb:5d:9b:ca:0c:13:2c:5a:56:ca:
d4:60:9b:f5:1c:59:72:3d:a6:ed:b0:83:9e:3c:46:
d9:91:8c:bd:30:88:8f:0e:b1:34:57:12:9c:c3:96:
50:fd:66:a6:fd:4c:61:88:33:20:ed:4c:e7:68:82:
6e:f2:90:1d:44:8e:18:3b:9b:de:7b:a8:0d:75:d9:
e2:ef:e0:6d:ca:a2:c1:69:d3:38:a3:ff:9d:86:da:
56:d7:e5:26:a6:1a:98:78:48:4e:c3:7a:1d:ec:57:
14:24:46:03:ce:fd:c6:c6:4d:7a:8f:84:55:88:e4:
0a:3c:ab:55:6f:f1:20:10:1a:c7:ed:fc:04:32:c7:
fd:2a:a7:03:86:6a:98:c4:16:16:4f:96:17:f5:bd:
c6:94:f1:ca:85:cd:e9:c7:0a:d7:c9:2a:9a:45:c2:
c8:c4:fc:1c:2a:48:66:a0:ce:6a:4d:61:a7:86:7d:
44:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D2:91:FA:44:31:F9:F4:08:61:6B:90:FA:56:33:8B:76:86:EF:73
X509v3 Authority Key Identifier:
keyid:6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/EtKR-kQx-fQIYWuQ-lYzi3aG73M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.240.192.0/19
Signature Algorithm: sha256WithRSAEncryption
52:fb:97:4c:60:2b:23:ea:99:ce:e9:75:7d:ff:ad:d0:6d:0d:
1a:cb:22:4c:d3:37:21:59:39:29:65:fe:17:cb:32:20:60:d1:
85:86:a6:fb:6d:ff:45:5c:0a:10:7d:8b:63:c0:2c:fa:5d:94:
8f:24:19:5f:b6:b6:04:a5:d3:21:59:4c:4f:ba:aa:ca:7a:68:
cb:29:74:46:27:2b:c7:4a:2b:b1:47:59:75:37:1a:14:43:db:
cb:89:fc:3b:b6:78:04:f7:27:0d:e6:23:84:10:c7:ac:26:bd:
ca:c5:7d:de:35:aa:7a:df:7a:20:5f:99:ed:03:db:55:c5:b1:
87:b9:cd:5e:28:ba:68:65:a7:2f:34:c2:36:ae:55:53:74:a3:
50:0a:cf:d7:d7:de:95:48:db:75:8c:36:88:cd:90:98:de:67:
5b:2c:d5:70:e7:45:f7:72:ad:fe:21:ab:81:33:57:cb:1e:91:
61:b5:d3:c5:46:dc:f6:79:da:c0:bd:15:03:39:7b:d8:e0:1d:
bb:c7:0c:55:e3:2b:0f:a0:ba:c6:7c:65:92:77:70:e3:1b:ca:
50:14:3b:8c:a3:78:ae:2f:42:82:e3:22:09:b5:d2:4f:51:6f:
dd:4a:ef:b1:8c:c8:ba:36:65:c2:27:3e:d9:1f:cd:8c:c1:a8:
36:1a:f3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:42 2025 by rpki-client on console.sobornost.net