Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/msTbd_cRgqE8u0I4x9SddZe62KE.roa
File: msTbd_cRgqE8u0I4x9SddZe62KE.roa (raw, json)
Hash identifier: mupJQETdaQVPnbs2vC2bYij0saRrza6SHsY1QyVDaJY=
Subject key identifier: 9A:C4:DB:77:F7:11:82:A1:3C:BB:42:38:C7:D4:9D:75:97:BA:D8:A1
Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial: 0194258F684F238C9554E8AB715C2ECF6AC8
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/msTbd_cRgqE8u0I4x9SddZe62KE.roa
Signing time: Thu 02 Jan 2025 05:49:02 +0000
ROA not before: Thu 02 Jan 2025 05:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60798
IP address blocks: 31.210.21.0/24 maxlen: 24
162.12.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:68:4f:23:8c:95:54:e8:ab:71:5c:2e:cf:6a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Validity
Not Before: Jan 2 05:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ac4db77f71182a13cbb4238c7d49d7597bad8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:31:c7:b7:63:d8:4e:ad:87:b0:d4:ea:19:
56:87:0d:2c:3a:c2:48:43:60:fc:0c:f8:5e:11:d9:
00:3f:ee:39:6f:48:38:51:bc:e9:72:8f:6c:ae:3b:
c6:39:3b:12:2b:d2:64:8b:ae:1b:fb:52:6c:08:a8:
c2:39:99:3e:1a:7a:03:71:20:b4:82:53:40:af:0d:
a8:8a:c4:a1:b6:5c:d3:1d:83:28:b0:b3:48:f7:a4:
5e:29:e8:6a:23:d7:9a:3a:62:5f:aa:23:2a:a5:e8:
29:1d:c8:52:1b:30:06:a0:7b:30:96:d6:4c:09:bb:
1d:d1:a7:12:6d:64:6c:eb:77:0d:92:dc:3d:13:48:
df:f6:d7:12:8b:73:93:db:da:17:9f:96:30:c9:8b:
c9:f8:4c:0a:5c:a4:b0:31:bb:e0:f0:d9:8b:7b:50:
eb:b9:ad:93:fc:6e:58:e0:a3:64:ac:55:fe:d2:59:
b8:f9:12:18:4f:df:7d:19:69:2e:c8:bc:e8:95:f5:
5d:a7:a8:7b:ad:c2:fb:4c:c4:e5:16:90:41:6b:9f:
56:39:95:c5:cc:a6:e6:9c:8d:dc:e6:49:fb:a8:45:
04:4f:80:d3:6b:b7:19:d8:de:e2:08:30:d2:04:01:
20:0f:c9:d6:a3:d4:63:81:c2:21:f9:97:a3:e8:db:
be:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C4:DB:77:F7:11:82:A1:3C:BB:42:38:C7:D4:9D:75:97:BA:D8:A1
X509v3 Authority Key Identifier:
keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/msTbd_cRgqE8u0I4x9SddZe62KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.21.0/24
162.12.205.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:c5:b6:df:1c:e6:5b:d5:73:08:20:25:af:16:10:31:5f:a5:
c9:ba:84:c7:49:f5:5d:70:f1:2a:e1:04:45:42:5c:a6:98:86:
8f:43:11:88:86:8e:f4:4d:2c:7e:d5:b7:2b:ab:e2:85:12:73:
35:95:be:7e:9d:81:15:76:2d:a2:f7:71:75:52:d5:25:53:07:
5d:ef:e0:50:65:8f:57:e6:0c:fd:a4:60:21:21:7c:b6:76:81:
3d:ea:28:42:90:12:fc:3b:fe:5f:be:d6:ae:a0:46:9f:96:48:
7f:df:6e:b0:04:57:8f:83:39:6b:fe:7b:c5:a0:78:8b:97:7a:
20:6e:9c:a0:cb:da:a3:19:40:0a:0b:1e:53:44:06:14:f5:a5:
94:d5:8e:50:ac:3f:c2:f7:19:b2:ad:cf:5c:6f:a3:05:77:50:
01:ca:e7:be:ff:0c:48:eb:a8:e3:16:11:95:f4:b5:6b:39:29:
6a:1b:b1:3e:ba:fb:ff:9d:5a:84:9e:13:6a:83:a5:80:9c:d8:
94:e8:cf:28:d5:83:95:42:a7:7a:77:b7:45:b6:5f:81:1c:4e:
0f:d7:25:86:71:fd:99:b8:f1:03:ae:a5:b7:e9:de:90:3c:76:
d6:a3:5d:2a:a0:65:1e:a5:ea:f2:82:f4:7b:b4:ff:6e:6c:e5:
d6:cd:e4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:25:54 2025 by rpki-client