Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Exmz-bkpR5hUSWGHLwLIMLc2Yq8.roa
File: Exmz-bkpR5hUSWGHLwLIMLc2Yq8.roa (raw, json)
Hash identifier: jcbl+HMqw20dWPkAT19tZYwQ/gZKFFWGJc2Eptz2PWk=
Subject key identifier: 13:19:B3:F9:B9:29:47:98:54:49:61:87:2F:02:C8:30:B7:36:62:AF
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01942369CA6B55263437A164994BECA1D257
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Exmz-bkpR5hUSWGHLwLIMLc2Yq8.roa
Signing time: Wed 01 Jan 2025 19:48:43 +0000
ROA not before: Wed 01 Jan 2025 19:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212396
IP address blocks: 170.62.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ca:6b:55:26:34:37:a1:64:99:4b:ec:a1:d2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jan 1 19:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1319b3f9b9294798544961872f02c830b73662af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d4:96:dc:0b:07:14:59:20:4b:18:70:91:35:
9d:91:f0:ee:a1:10:f8:48:37:64:61:4d:c8:e5:3c:
e4:74:d6:1d:e0:93:db:1d:5f:88:5f:f3:7b:fa:71:
ae:5e:41:b2:96:6b:ae:31:ef:a3:d8:56:2c:57:6d:
0e:33:b6:da:38:15:ea:65:3e:9c:ba:1b:40:62:dc:
4c:10:e2:c3:ad:40:16:fb:f4:8f:ca:b5:7a:25:76:
d6:23:95:84:8a:e5:27:c2:33:d7:1a:1f:d6:df:6c:
a7:89:ca:52:1e:fc:ce:89:98:b5:f0:d6:18:ec:59:
64:31:c2:92:1a:35:6f:fa:e7:96:5e:87:8a:bb:e9:
04:d8:a0:f8:53:15:78:22:30:51:7d:b8:dc:b5:00:
89:40:08:f8:5f:d1:26:1b:4f:b3:50:71:e7:ee:91:
80:b0:a9:eb:3b:54:4b:be:f5:13:98:54:b5:5b:3c:
a4:50:c5:fe:79:5c:e5:41:fe:2f:6d:a7:85:50:24:
7f:49:3c:7a:05:ac:73:3f:fb:24:06:0c:cb:65:08:
dd:4c:9c:ae:b5:ab:32:e2:67:96:48:52:ce:fd:83:
7f:d8:21:90:2e:5e:ef:0a:d2:26:6f:26:59:69:ed:
50:7a:2f:55:76:1b:21:33:95:5c:59:bc:1a:bf:82:
65:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:19:B3:F9:B9:29:47:98:54:49:61:87:2F:02:C8:30:B7:36:62:AF
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Exmz-bkpR5hUSWGHLwLIMLc2Yq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.62.202.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:11:c7:7c:8d:78:62:bb:58:02:af:a2:72:ab:79:23:0f:a4:
66:70:97:5e:de:79:87:db:48:62:b9:9c:89:30:40:f9:25:5a:
2a:e7:08:a5:50:fe:75:0f:99:0b:c7:50:30:12:cf:55:f7:65:
2f:7c:d7:54:cf:6c:5b:d7:fa:44:45:31:ac:b2:4e:4f:83:72:
8f:9a:16:ce:7c:7b:b0:42:7f:06:b9:ac:b8:9d:df:dc:ff:73:
22:7e:19:a0:2f:78:98:31:0b:68:a4:e4:47:9b:dc:64:94:a8:
8f:91:d5:bb:b4:be:4e:dd:3c:ab:83:e5:d5:88:4d:94:a2:65:
6b:95:bb:b4:65:9a:13:15:18:8e:e5:3d:94:d7:04:ba:45:ac:
05:0f:fe:1e:bd:2e:2a:dc:68:2a:ae:e5:77:db:85:05:0d:8b:
e4:a5:d2:04:7b:b9:1f:9a:c0:6d:36:45:22:28:a1:19:73:4e:
0e:43:45:74:c8:de:ca:1f:f0:2b:c4:a7:45:6c:a5:f1:1f:5e:
d9:8f:86:70:06:00:4f:cc:9a:8b:f5:ba:fa:87:b3:00:a4:bd:
cc:d4:9b:3d:1f:dc:dd:ff:fd:89:c0:53:dc:8b:53:1e:ff:48:
ce:3e:cd:20:a6:30:76:68:94:2f:ed:f5:04:07:e3:c5:e9:b3:
f7:07:ff:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:19:06 2025 by rpki-client