Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/GXnQPnuqnvBWk7kpONau-2u0RoQ.roa
File: GXnQPnuqnvBWk7kpONau-2u0RoQ.roa (raw, json)
Hash identifier: uxonlVe7DqVs73Mq5GsJwlXeQ95X/yFAybekoDtId+I=
Subject key identifier: 19:79:D0:3E:7B:AA:9E:F0:56:93:B9:29:38:D6:AE:FB:6B:B4:46:84
Certificate issuer: /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Certificate serial: 0194228E2CDE2D0FBB36C8430BEA1E97CAAA
Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/GXnQPnuqnvBWk7kpONau-2u0RoQ.roa
Signing time: Wed 01 Jan 2025 15:48:50 +0000
ROA not before: Wed 01 Jan 2025 15:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201961
IP address blocks: 62.244.102.0/24 maxlen: 24
62.244.103.0/24 maxlen: 24
62.244.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:2c:de:2d:0f:bb:36:c8:43:0b:ea:1e:97:ca:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Validity
Not Before: Jan 1 15:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1979d03e7baa9ef05693b92938d6aefb6bb44684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2e:a3:50:2c:72:9d:9c:a8:a7:5c:7a:f2:f3:
1f:40:38:d3:8a:56:70:7b:75:c1:1d:a2:7a:14:da:
31:45:f2:09:68:6e:e6:7b:1a:d2:c1:44:07:c4:a8:
53:c6:5e:01:5d:f5:24:fc:85:1d:f1:70:35:bd:3e:
87:dc:bc:89:2d:d9:06:42:1f:4a:b8:f8:96:1d:20:
df:a1:46:0e:0f:5a:0b:7f:4a:68:78:bc:47:41:5d:
85:56:50:43:cc:a8:69:0c:7b:66:bd:1a:d2:fe:9f:
47:ed:62:53:cc:20:fb:26:e6:cc:37:cc:d6:23:1f:
b0:45:3f:5e:79:16:ee:24:d9:20:9b:e1:9b:29:65:
7d:4e:12:7e:01:2e:e3:40:c2:65:97:b9:a0:c5:ef:
2d:81:6e:1a:d4:fa:29:13:00:8b:94:ae:ac:e5:70:
63:88:fb:79:db:4f:ee:3e:95:53:c1:78:6f:03:d2:
1d:fb:d7:76:5f:7d:20:ee:50:29:54:24:5a:8d:89:
23:b5:d1:64:67:1c:10:7d:5a:97:74:47:15:65:0a:
d9:2a:39:93:82:dd:64:ce:da:14:98:48:3c:35:64:
e4:00:69:21:84:0e:8d:a0:31:1f:1a:3c:3d:8a:c7:
85:e2:50:18:bd:f7:03:df:b5:17:d0:fb:6c:93:7d:
b2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:79:D0:3E:7B:AA:9E:F0:56:93:B9:29:38:D6:AE:FB:6B:B4:46:84
X509v3 Authority Key Identifier:
keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/GXnQPnuqnvBWk7kpONau-2u0RoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.102.0/23
62.244.106.0/24
Signature Algorithm: sha256WithRSAEncryption
49:b2:ec:49:ee:dc:36:d2:f1:f7:a5:b8:0d:fc:3d:37:e8:7b:
4b:1d:2b:4f:79:08:76:26:55:02:60:b5:1b:23:3c:e4:c4:08:
dc:b6:ac:9a:4e:6a:f3:8b:8f:34:1e:74:a8:b1:73:40:f4:04:
37:a1:29:1f:cf:2c:b5:2d:3c:43:0b:fd:8c:44:94:4b:d9:93:
a5:43:d7:94:cb:d8:0b:2b:39:b5:f1:cf:b0:99:e9:ac:db:a7:
3a:ca:c4:23:28:a8:b3:ca:8f:57:5c:4e:da:ac:62:cd:89:0d:
e7:d0:69:b5:d6:fb:3f:3a:ca:60:8e:ef:c6:32:48:58:c1:32:
97:29:57:79:e8:d6:ce:45:6a:60:8b:29:51:de:4a:f3:80:92:
71:22:4a:ac:62:2d:31:b2:0d:7e:37:88:bf:8f:5b:30:ed:84:
cc:45:d4:ba:ea:b5:23:40:69:b1:60:de:20:de:12:13:c4:e4:
f9:ec:01:c6:25:0f:49:4f:04:0a:60:80:22:0e:15:cb:68:64:
01:01:f9:3d:26:c7:e6:c8:64:6a:4f:c5:39:f3:48:e0:af:f5:
75:9a:5e:7e:d3:df:94:6a:80:ae:3e:bf:d6:e7:3d:02:ea:f8:
2d:87:0b:2c:fb:0d:89:ca:09:fe:6b:f5:74:bd:9b:8b:ab:b5:
34:98:d9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:20 2025 by rpki-client on console.sobornost.net