Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/RiqmF8FAq7KYVZa4sFJ27Xst_bo.roa
File: RiqmF8FAq7KYVZa4sFJ27Xst_bo.roa (raw, json)
Hash identifier: HUfUswroOVl24nRKxiuT2bYtOIo4k8BjBGvCXwJmw6c=
Subject key identifier: 46:2A:A6:17:C1:40:AB:B2:98:55:96:B8:B0:52:76:ED:7B:2D:FD:BA
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01942369CB46F271AD487BEC68005D29F89D
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/RiqmF8FAq7KYVZa4sFJ27Xst_bo.roa
Signing time: Wed 01 Jan 2025 19:48:43 +0000
ROA not before: Wed 01 Jan 2025 19:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213773
IP address blocks: 170.62.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:cb:46:f2:71:ad:48:7b:ec:68:00:5d:29:f8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jan 1 19:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=462aa617c140abb2985596b8b05276ed7b2dfdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7c:f1:60:b7:ef:fe:d6:20:65:bb:5f:c1:73:
a2:6c:07:32:29:1f:f7:46:b7:d9:2d:ae:8b:0b:13:
d4:56:1e:2a:8d:f5:af:68:bf:2f:0b:23:46:4c:bf:
9a:01:d9:64:d1:dc:24:5e:11:ec:fa:77:9d:eb:08:
73:c3:9c:49:5f:a6:9b:68:59:c5:94:56:0d:65:91:
6c:b7:bd:23:4e:25:0c:21:17:d6:da:5c:1b:79:0d:
4f:f2:9f:8f:aa:89:b2:2c:09:6b:62:90:ec:c5:a8:
88:33:6c:12:41:1e:ee:29:3b:09:be:17:7b:b3:9c:
a7:49:71:c6:96:f7:9a:30:bf:30:b6:6b:f4:ae:98:
e7:64:5f:9e:24:66:4a:38:bf:73:b1:08:a0:f6:4b:
aa:e8:11:de:4c:c1:b5:62:92:81:c7:38:39:ad:c6:
5d:09:62:57:8e:92:aa:ef:7a:05:c5:07:f9:1a:e9:
69:e4:b3:87:93:f0:eb:13:a2:8b:ff:a5:9d:66:5b:
86:df:89:e1:51:81:a0:d9:46:d4:db:f4:79:c6:c2:
79:fb:48:4e:fa:5e:98:7f:51:35:9a:bd:2b:db:53:
11:29:ae:20:4c:57:d1:bc:86:05:2a:eb:cb:fe:02:
68:18:08:4a:67:9b:72:c1:d2:9c:33:06:cd:f6:d2:
80:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2A:A6:17:C1:40:AB:B2:98:55:96:B8:B0:52:76:ED:7B:2D:FD:BA
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/RiqmF8FAq7KYVZa4sFJ27Xst_bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.62.203.0/24
Signature Algorithm: sha256WithRSAEncryption
de:cb:c2:08:20:84:e1:da:ae:0e:f9:2c:89:ff:9d:8e:22:0d:
b9:a6:23:da:1e:5e:f5:f2:a5:e0:b0:fd:41:a7:85:7b:be:b4:
7f:32:4b:a4:20:74:c1:cf:d8:3a:70:73:1d:9c:50:b6:75:17:
e0:68:2d:2b:8c:b3:6c:ff:17:59:71:69:90:8a:bd:ff:b7:e5:
df:9d:7e:6d:86:44:6c:1d:cc:1c:50:0b:e8:b6:d7:0c:ae:2d:
80:b7:63:cf:fa:89:9e:71:cb:65:67:77:31:0a:8e:b2:70:3b:
37:0c:1a:b1:2f:67:f0:7d:a3:ca:10:43:a2:a1:6e:5f:f4:e4:
51:49:da:98:d3:3f:bf:7a:00:1b:43:76:8d:09:c5:24:65:a9:
f6:2e:41:bc:3c:2d:6c:5b:f2:2a:7f:4a:89:83:1b:e0:33:51:
02:47:e4:57:6d:46:7b:6d:1c:68:25:0e:28:7c:71:fd:30:c6:
7c:b2:ad:e5:e7:a1:ee:47:f1:90:43:ec:c0:f3:a9:83:63:f1:
cd:c2:18:16:02:39:7e:c3:a3:da:7a:59:28:b2:8f:b8:5e:6c:
67:77:37:49:80:af:e7:2c:06:51:ad:24:46:29:48:0a:ee:ff:
52:f6:93:a1:9f:11:c9:53:4c:c9:81:75:7f:84:da:66:8d:a3:
19:55:d1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 22:13:28 2025 by rpki-client on console.sobornost.net