Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/BpfzlhxlnU0b_wY21VYFiA_Y2f4.roa
File: BpfzlhxlnU0b_wY21VYFiA_Y2f4.roa (raw, json)
Hash identifier: o5N+9t+Nwi3zWNRrw2+QumzYoa6i699pEUUI3yxOnxo=
Subject key identifier: 06:97:F3:96:1C:65:9D:4D:1B:FF:06:36:D5:56:05:88:0F:D8:D9:FE
Certificate issuer: /CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38
Certificate serial: 019422FC4AF52CBCF7E5BABDBCE2A62E7E4F
Authority key identifier: 31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/BpfzlhxlnU0b_wY21VYFiA_Y2f4.roa
Signing time: Wed 01 Jan 2025 17:49:07 +0000
ROA not before: Wed 01 Jan 2025 17:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 202.22.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:4a:f5:2c:bc:f7:e5:ba:bd:bc:e2:a6:2e:7e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38
Validity
Not Before: Jan 1 17:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0697f3961c659d4d1bff0636d55605880fd8d9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a2:7b:ef:c2:d2:83:74:c8:25:0a:24:3a:77:
1b:9d:d0:4b:37:9c:df:b6:31:13:1f:7a:21:a9:5c:
ed:ef:3f:c0:12:7c:96:9c:56:47:2a:96:61:11:58:
26:53:21:ce:7e:95:a8:f4:3b:b3:e2:db:28:e2:9c:
12:fb:76:12:b0:76:90:9c:39:ff:00:43:12:40:6a:
93:45:23:d5:bd:48:e1:5a:78:f7:df:12:13:ec:7e:
7c:34:9e:50:59:30:57:ec:6b:33:0c:88:bf:17:ee:
f5:ff:bd:51:40:67:c9:44:41:85:42:48:1b:02:f6:
d9:d2:48:a8:7c:c9:2f:a0:f3:fc:01:f9:f1:ce:a8:
d5:cb:4a:ea:63:72:9d:0e:63:8d:33:8c:2d:68:2c:
00:b8:f8:36:57:2a:ef:67:97:fa:cb:0b:24:8d:97:
35:9c:b2:c0:8b:12:a2:15:7b:70:4f:24:1e:3c:fd:
24:c8:fe:43:b2:df:74:90:02:f5:db:21:f8:6c:8d:
9c:81:c8:55:29:93:f2:39:a7:a6:d2:19:49:f9:28:
a6:7d:f4:b4:35:ca:f0:68:34:74:1b:08:2a:15:94:
97:27:5f:4a:1a:18:d1:7c:8b:56:35:a1:77:18:df:
13:7a:c0:95:fb:91:78:53:fe:91:b6:2f:6c:fb:2c:
64:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:97:F3:96:1C:65:9D:4D:1B:FF:06:36:D5:56:05:88:0F:D8:D9:FE
X509v3 Authority Key Identifier:
keyid:31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/BpfzlhxlnU0b_wY21VYFiA_Y2f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.22.173.0/24
Signature Algorithm: sha256WithRSAEncryption
84:9d:02:23:02:00:ca:86:c0:ff:d5:e9:d1:4e:f8:6d:7a:f6:
c2:be:d1:38:d4:79:e3:f7:d1:bd:77:96:84:05:dd:dd:20:eb:
c6:9c:f4:70:80:a2:f1:68:84:b5:a7:f6:d6:ea:09:a1:71:b4:
ae:2f:76:71:cd:6d:c4:83:ef:42:96:df:80:47:87:96:a9:66:
5b:7a:fb:93:74:65:d5:0c:f0:11:cb:6d:0e:6e:65:4c:4b:19:
d6:68:ea:ed:ce:21:b8:a3:e7:9c:df:b7:c1:7e:95:66:d8:19:
3a:24:3a:61:7d:31:42:38:f5:ec:29:f5:15:02:ff:2e:68:b8:
0a:c0:f1:2a:d7:70:15:05:30:37:23:88:0d:3d:00:0a:d9:ae:
5e:26:54:18:af:50:68:f3:aa:38:45:6a:1d:13:ec:26:1b:b2:
cd:e4:6b:f9:a3:2b:60:ee:51:c7:bb:5a:35:e5:61:e3:5e:f4:
fe:18:10:65:a9:79:37:0d:a1:ce:ee:5d:da:03:9b:8a:af:ef:
30:ad:03:5f:b1:b7:2e:dd:58:49:91:7b:43:f2:06:30:19:8e:
97:5a:13:00:5e:72:db:ed:d6:60:2f:53:7b:65:d3:e8:1a:c6:
ba:e6:98:c4:45:b4:e7:23:57:85:59:6f:8f:76:95:b9:b7:9c:
07:92:7a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:39 2025 by rpki-client