Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/Z27odeAw_NXJehyB-fy3FNRc6to.roa
File: Z27odeAw_NXJehyB-fy3FNRc6to.roa (raw, json)
Hash identifier: AQOZKpMALx7C9oCtz366eVXQquGIlXipPb9ncWEUe5g=
Subject key identifier: 67:6E:E8:75:E0:30:FC:D5:C9:7A:1C:81:F9:FC:B7:14:D4:5C:EA:DA
Certificate issuer: /CN=c441ae2612d2527167c83f7afc16f5e674d88b0f
Certificate serial: 0194244599F107B4857D0CD542A2E9367A36
Authority key identifier: C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/Z27odeAw_NXJehyB-fy3FNRc6to.roa
Signing time: Wed 01 Jan 2025 23:48:48 +0000
ROA not before: Wed 01 Jan 2025 23:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60023
IP address blocks: 185.62.52.0/22 maxlen: 22
2a04:ef40::/29 maxlen: 29
2a0b:d180::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:99:f1:07:b4:85:7d:0c:d5:42:a2:e9:36:7a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c441ae2612d2527167c83f7afc16f5e674d88b0f
Validity
Not Before: Jan 1 23:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=676ee875e030fcd5c97a1c81f9fcb714d45ceada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f0:35:9a:5a:b1:e3:8f:52:3c:00:6d:00:c1:
98:ea:86:94:f2:09:88:7e:a5:9f:be:22:b3:11:40:
f5:d1:d6:97:b9:3b:0d:43:94:a2:17:25:9d:da:a5:
a3:bc:d2:17:4b:de:22:fc:b9:6f:3d:21:e7:68:c2:
12:ea:5c:53:74:01:c5:b3:8d:54:62:99:e7:12:84:
55:52:fa:ad:aa:db:40:38:0f:36:bc:ec:a1:fb:37:
c6:82:d2:01:0e:70:4f:a2:01:fe:b2:b9:01:c6:38:
14:31:c6:fe:cd:f7:b2:b6:1d:23:a8:c1:75:e1:b1:
ce:2e:8f:e8:7b:53:97:a7:55:28:43:7f:70:6f:5b:
06:c3:fe:60:72:5c:c3:d9:4d:e2:63:95:96:6a:9f:
a5:b4:7e:cf:90:cf:4b:4b:f5:7e:e5:ed:c5:a7:1d:
80:77:84:f2:6b:29:37:8c:02:db:2b:80:53:62:5e:
19:70:1b:77:3b:d1:3b:8d:01:d3:8f:c2:f2:3e:94:
98:6b:53:85:e5:f8:97:a2:91:80:8a:79:57:8f:fe:
2e:9c:c0:58:ae:32:e5:98:02:cc:e9:16:f6:15:35:
65:b9:d6:9d:8f:1a:a1:20:ab:f8:75:bc:67:af:98:
b4:87:55:c8:b6:93:9d:12:1d:e8:2a:a6:3d:7c:cb:
5e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6E:E8:75:E0:30:FC:D5:C9:7A:1C:81:F9:FC:B7:14:D4:5C:EA:DA
X509v3 Authority Key Identifier:
keyid:C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/Z27odeAw_NXJehyB-fy3FNRc6to.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.52.0/22
IPv6:
2a04:ef40::/29
2a0b:d180::/29
Signature Algorithm: sha256WithRSAEncryption
2d:21:0b:e2:6a:fe:bf:c5:74:72:51:44:ae:21:ad:cf:80:91:
cd:e7:84:ec:2f:2e:8c:39:02:f6:69:4e:53:b5:bc:09:bf:bb:
ef:b3:c6:01:bb:df:0b:6b:a8:ca:3f:c5:fa:12:41:cd:fc:ac:
98:d4:b6:25:a8:1c:26:89:1f:b3:51:02:3d:30:d4:bf:bb:c6:
be:da:b9:e7:bf:38:14:f6:99:4a:a1:fb:50:7a:05:53:69:35:
59:5a:b4:9a:64:6b:fe:30:4e:fb:44:7d:d6:0a:b2:5d:ef:df:
8a:49:0e:7a:4e:24:f2:6d:70:6a:85:14:b7:86:0e:af:4c:6c:
75:c3:49:c2:cb:1e:00:84:a8:77:71:e4:90:fa:8d:ac:a3:39:
3e:72:21:e5:0d:88:4d:72:f1:2f:d6:13:29:f4:a8:d5:6c:43:
9b:cd:38:be:1d:31:f0:f8:71:27:74:2d:eb:a0:be:dd:50:c8:
a3:bf:1e:c5:5b:90:e3:f6:f6:1a:c7:ff:6f:3a:e0:14:85:5c:
40:2c:d9:0c:ab:5b:0d:e2:74:90:08:24:55:a1:a3:4f:b9:9c:
11:5e:52:d2:56:4c:2e:a2:6c:e7:6e:f4:5b:03:59:e3:d1:a1:
f9:eb:dd:c2:f6:21:ca:2d:a0:c8:21:f5:36:9f:a9:0b:7d:e0:
b0:72:9f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:03 2025 by rpki-client on console.sobornost.net