Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/_STJRhAaGtTprZXDUB8qIuPAZXU.roa
File: _STJRhAaGtTprZXDUB8qIuPAZXU.roa (raw, json)
Hash identifier: xfvbArO5C6z0ozoxsDXEseZ+EzQc1pP+zmayuSsuHqA=
Subject key identifier: FD:24:C9:46:10:1A:1A:D4:E9:AD:95:C3:50:1F:2A:22:E3:C0:65:75
Certificate issuer: /CN=c4c20ab2f244ec6a7f09cf1eb1752e8c328248f2
Certificate serial: 01856FCBA932C7A3A41A32410492AC3EFF48
Authority key identifier: C4:C2:0A:B2:F2:44:EC:6A:7F:09:CF:1E:B1:75:2E:8C:32:82:48:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMIKsvJE7Gp_Cc8esXUujDKCSPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/_STJRhAaGtTprZXDUB8qIuPAZXU.roa
Signing time: Mon 02 Jan 2023 00:04:56 +0000
ROA not before: Mon 02 Jan 2023 00:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60478
IP address blocks: 185.31.100.0/22 maxlen: 24
2a00:b420::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:a9:32:c7:a3:a4:1a:32:41:04:92:ac:3e:ff:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c20ab2f244ec6a7f09cf1eb1752e8c328248f2
Validity
Not Before: Jan 2 00:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd24c946101a1ad4e9ad95c3501f2a22e3c06575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2c:b0:fe:85:ab:bf:5e:d3:61:89:2d:ea:82:
f9:92:ef:c4:75:2e:13:47:15:8f:f4:30:ad:8f:a5:
fd:77:3f:d8:97:bf:8f:86:96:5f:36:50:30:e6:bc:
4c:3b:21:22:b1:99:9b:1a:50:e2:bf:04:51:2a:ad:
40:33:59:c9:97:44:92:5b:ba:21:9e:77:68:19:05:
00:65:c0:82:14:d4:48:a9:19:9c:b3:cf:b3:e2:10:
d8:88:b1:15:d6:72:d2:79:4c:fe:9f:cf:da:90:64:
eb:a3:f0:97:be:ca:c6:d2:15:88:a3:34:d1:61:f3:
de:3d:d7:13:7e:7f:e9:c2:d9:c2:46:1f:f3:4a:da:
7c:db:36:0f:d5:81:8e:50:48:79:d2:e3:13:8c:43:
81:9e:66:ed:cd:d9:a3:fb:de:4b:e3:99:b7:8e:fc:
62:d4:4c:f6:ad:86:fa:5f:d9:0d:26:9b:00:5a:8c:
ef:32:89:4e:e0:78:07:09:e5:eb:39:a7:86:9b:cc:
a0:e1:1f:88:50:04:a0:9d:84:5e:b6:70:80:e7:84:
d6:76:e3:8c:82:ec:00:e6:7e:d5:7e:57:da:32:af:
c7:6b:0b:0d:bb:db:06:e5:29:9a:9e:2c:a5:61:43:
34:24:f0:55:95:f4:f5:85:5b:b7:d8:d1:1e:27:95:
a7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:24:C9:46:10:1A:1A:D4:E9:AD:95:C3:50:1F:2A:22:E3:C0:65:75
X509v3 Authority Key Identifier:
keyid:C4:C2:0A:B2:F2:44:EC:6A:7F:09:CF:1E:B1:75:2E:8C:32:82:48:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMIKsvJE7Gp_Cc8esXUujDKCSPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/_STJRhAaGtTprZXDUB8qIuPAZXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/xMIKsvJE7Gp_Cc8esXUujDKCSPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.100.0/22
IPv6:
2a00:b420::/32
Signature Algorithm: sha256WithRSAEncryption
1b:e5:c3:65:de:a1:3f:48:19:99:b0:f3:64:90:37:fa:85:5b:
59:6f:80:a6:31:18:db:d1:48:15:b5:c3:17:ef:4e:93:69:7d:
43:23:28:3f:52:62:69:01:ff:0b:af:62:ec:88:0b:76:6f:70:
1d:2c:5a:3a:8e:6f:ae:c6:0d:05:87:db:89:d5:3a:eb:57:a1:
ff:0c:b4:83:b7:e4:21:66:f1:00:19:18:ee:a6:2b:62:9d:57:
d2:0d:40:28:70:e7:1d:63:ec:2c:9b:2b:70:d6:da:8d:a9:fa:
55:19:a1:b1:81:ed:f1:28:95:96:34:e2:97:97:ef:ac:0b:b7:
53:9b:bd:ac:99:20:e5:43:75:97:6e:d8:ad:82:a9:1b:1f:27:
0a:7d:ac:1b:b5:ac:9a:79:f5:6c:82:fb:5d:fd:8c:b1:f9:00:
84:00:57:1f:70:e5:f4:fb:77:9b:cc:73:8b:26:d5:b8:cd:e9:
f9:c7:69:65:63:ef:63:66:83:7c:a0:7e:32:e5:79:40:f2:80:
2b:6d:49:d7:de:65:38:21:9b:ed:77:a2:63:14:f0:a3:d2:71:
ac:45:58:3b:44:1b:ce:88:c3:5c:d4:38:f3:ee:26:a4:d7:21:
94:15:29:4e:64:a5:7e:ad:65:f7:1d:65:2b:d4:c0:10:5b:85:
d3:be:88:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:39 2025 by rpki-client