Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/stMRXdwPqb8eYIvESneOrlT58Xc.roa
File: stMRXdwPqb8eYIvESneOrlT58Xc.roa (raw, json)
Hash identifier: +oxbYyZHteZNH5w6jOgSakRDldeFH+ORY631ZEGHAHI=
Subject key identifier: B2:D3:11:5D:DC:0F:A9:BF:1E:60:8B:C4:4A:77:8E:AE:54:F9:F1:77
Certificate issuer: /CN=7d59659636089e32324697629c218da38a2b673d
Certificate serial: 018571D7ACC7CCE532B35746CE81CB410396
Authority key identifier: 7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/stMRXdwPqb8eYIvESneOrlT58Xc.roa
Signing time: Mon 02 Jan 2023 09:37:17 +0000
ROA not before: Mon 02 Jan 2023 09:37:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197540
IP address blocks: 202.61.192.0/20 maxlen: 22
202.61.224.0/20 maxlen: 24
202.61.240.0/20 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:ac:c7:cc:e5:32:b3:57:46:ce:81:cb:41:03:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d59659636089e32324697629c218da38a2b673d
Validity
Not Before: Jan 2 09:37:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2d3115ddc0fa9bf1e608bc44a778eae54f9f177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:85:9c:d5:d2:31:8e:3c:3d:ea:55:50:a3:10:
53:1e:77:fb:62:68:7c:e4:74:0d:26:74:1c:7b:f9:
85:b9:27:76:6a:a9:6a:a6:0a:91:d8:a9:0e:7d:fa:
a9:1d:be:18:3f:75:49:e6:f1:c7:5e:9b:e3:55:e1:
ee:f7:09:23:bf:b8:ff:58:1e:04:a3:00:01:c2:7b:
f8:0a:fb:5d:98:52:0a:1b:18:bf:e2:d3:37:e3:52:
4c:85:98:d5:32:d3:83:de:97:95:fa:b7:24:26:45:
ed:c1:66:d2:ad:65:2c:d5:f3:ef:92:6d:83:85:68:
4a:c8:ff:0e:15:cf:27:cc:ee:c2:d0:88:57:59:46:
0b:d5:87:23:71:65:89:fe:7d:4d:00:59:d1:53:f8:
a9:3e:37:65:89:a8:d2:3b:69:19:49:67:eb:16:d6:
95:75:7e:5a:97:87:dc:dc:63:61:13:ed:3d:d4:b3:
20:a6:95:ff:a7:b7:24:d1:9b:41:d6:02:7d:d6:b7:
a9:20:44:fe:33:b6:96:aa:0a:b0:b9:dc:9a:26:14:
c6:a7:48:81:d2:c6:7f:a5:a5:ee:d5:e8:3c:e6:e0:
24:c8:78:30:47:aa:93:cb:8a:50:77:94:a1:17:fc:
1e:ec:6e:74:df:b9:ca:4c:c7:21:e4:9d:f7:62:d8:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D3:11:5D:DC:0F:A9:BF:1E:60:8B:C4:4A:77:8E:AE:54:F9:F1:77
X509v3 Authority Key Identifier:
keyid:7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/stMRXdwPqb8eYIvESneOrlT58Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.61.192.0/20
202.61.224.0/19
Signature Algorithm: sha256WithRSAEncryption
1e:c6:fd:45:7b:d5:ac:b4:d2:ec:07:cd:c7:13:4a:aa:4b:df:
88:51:f5:fc:cc:ea:41:76:dc:e7:17:1a:09:f0:50:b5:38:fb:
33:05:aa:fa:3f:5f:2a:f1:13:90:bc:d8:07:f3:e1:21:0d:a2:
11:46:61:ad:cf:6f:69:04:f1:f8:dd:3b:7d:06:e3:e1:5e:8b:
51:a7:c3:2e:6b:b3:84:5f:ae:31:47:83:3b:b4:9d:6e:d3:b2:
55:7a:36:73:91:36:5b:d4:bd:c4:74:6c:8b:7c:95:1c:18:a0:
4c:52:40:93:0d:8c:0a:65:b2:5e:0c:3e:18:a1:c9:0f:74:a2:
9d:22:f8:39:6f:b7:66:bb:0c:0d:f2:57:7e:43:62:f9:17:bf:
85:73:c0:e6:89:e3:ff:ee:65:9a:00:38:46:6a:ce:42:b7:fb:
9c:ae:27:93:b3:8b:a5:14:0f:78:03:4b:9f:4d:6a:a9:fe:01:
b6:54:b3:c3:ca:2d:12:50:e0:3b:d9:92:e9:30:b5:ab:0c:bd:
f0:39:ff:22:6a:f6:e5:1f:ce:7a:e5:15:96:67:15:c4:08:ca:
14:69:67:68:55:d8:66:73:c1:e9:82:55:7a:82:89:0c:e5:a0:
8f:eb:66:9f:32:89:10:9b:4d:cd:32:fc:8e:8f:db:4c:bd:70:
ae:69:85:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:07 2025 by rpki-client