Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/97913c-748e-4fd1-9194-208fcfdfb201/1/1-vHw1KHzMD-Iksbm_2I1cloZX30.roa
File: 1-vHw1KHzMD-Iksbm_2I1cloZX30.roa (raw, json)
Hash identifier: rV358XcRTnapTC1mQP2b7YbH1JzrAh4n0TlpPUOJUro=
Subject key identifier: FA:F1:F0:D4:A1:F3:30:3F:88:92:C6:E6:FF:62:35:72:5A:19:5F:7D
Certificate issuer: /CN=7cac8d7f4b75170607bfcf8439c2e1d03a21410d
Certificate serial: 01826B0C96B867CE8B10C05FD750E2301953
Authority key identifier: 7C:AC:8D:7F:4B:75:17:06:07:BF:CF:84:39:C2:E1:D0:3A:21:41:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKyNf0t1FwYHv8-EOcLh0DohQQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/97913c-748e-4fd1-9194-208fcfdfb201/1/1-vHw1KHzMD-Iksbm_2I1cloZX30.roa
Signing time: Thu 04 Aug 2022 22:49:23 +0000
ROA not before: Thu 04 Aug 2022 22:49:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205402
IP address blocks: 109.234.224.0/24 maxlen: 24
109.234.225.0/24 maxlen: 24
31.25.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6b:0c:96:b8:67:ce:8b:10:c0:5f:d7:50:e2:30:19:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cac8d7f4b75170607bfcf8439c2e1d03a21410d
Validity
Not Before: Aug 4 22:49:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=faf1f0d4a1f3303f8892c6e6ff6235725a195f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:45:0a:ef:ba:10:1e:af:96:d3:3c:12:b5:e3:
e2:d4:a7:09:32:aa:bb:40:db:9e:9e:40:f7:fc:ab:
e5:1f:f8:ed:0a:aa:25:dd:e7:26:6e:ef:3e:35:7f:
6e:8f:23:67:70:a0:d6:84:05:88:cf:07:39:29:a1:
2a:57:22:3c:4e:82:45:52:6e:4a:be:ed:f3:71:40:
f3:e7:88:71:f8:e4:3a:fa:2e:a4:99:de:5d:81:8c:
a5:75:87:ba:5e:cf:b4:f1:cf:54:6a:39:0f:40:f5:
ae:23:d7:ab:0e:b8:5f:58:ad:a2:39:e9:c4:42:ca:
f3:0f:f2:e6:8b:1f:24:cb:70:07:42:cc:3d:21:87:
2a:1d:b6:27:f9:e9:f1:c0:3c:83:bc:68:b6:6a:7e:
51:ce:52:f9:f6:90:7b:5e:f4:a1:37:46:0b:7c:9c:
3e:90:de:0a:8f:96:77:01:7b:e9:b5:0e:94:d0:51:
3c:7a:21:c7:00:c8:ba:07:c9:d6:8b:3f:f6:95:30:
bd:28:05:f7:cd:91:7d:c2:f4:f8:fd:0f:d3:75:b1:
6a:fd:88:d3:b2:e8:c5:0a:4e:53:d9:5b:2e:4f:0a:
37:a0:45:5e:e0:39:69:2c:c8:5c:38:fa:4c:a9:42:
3f:fe:af:a1:cd:d6:0f:6c:68:cc:fc:e0:91:94:bc:
98:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F1:F0:D4:A1:F3:30:3F:88:92:C6:E6:FF:62:35:72:5A:19:5F:7D
X509v3 Authority Key Identifier:
keyid:7C:AC:8D:7F:4B:75:17:06:07:BF:CF:84:39:C2:E1:D0:3A:21:41:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKyNf0t1FwYHv8-EOcLh0DohQQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97913c-748e-4fd1-9194-208fcfdfb201/1/1-vHw1KHzMD-Iksbm_2I1cloZX30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97913c-748e-4fd1-9194-208fcfdfb201/1/fKyNf0t1FwYHv8-EOcLh0DohQQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.56.0/21
109.234.224.0/23
Signature Algorithm: sha256WithRSAEncryption
97:12:ec:8c:0a:b4:f7:d7:b1:3b:dd:cc:d0:12:3a:f7:d8:2e:
14:75:52:51:a1:db:51:35:0f:8b:fe:51:1b:0a:7e:3d:ce:e8:
c3:90:90:af:38:c6:ed:6c:c4:e0:48:3e:aa:c1:db:94:6f:db:
35:38:c6:92:87:16:9f:0b:01:79:f1:39:9a:44:a3:13:1c:a4:
ab:5f:a3:eb:21:16:27:f7:cd:0a:04:cd:63:38:35:24:fa:71:
13:b7:6a:cd:9a:0d:9d:36:a7:27:bb:c5:c0:04:f2:bd:7c:4d:
9e:3b:83:c7:5d:02:cb:a4:d3:44:56:9f:ee:f3:81:be:ad:96:
26:2b:a2:7d:17:57:4f:d7:f2:2b:65:07:2b:8f:c4:3d:85:86:
0d:e8:69:84:25:e5:9c:2c:a0:06:cc:53:30:5d:95:cb:ef:24:
7a:45:e5:be:0d:fa:23:68:00:fe:ae:19:77:75:0b:d4:0b:0c:
17:f8:67:e5:12:68:dd:6d:66:90:4b:0f:5e:58:ec:08:9e:fa:
78:a3:64:04:ff:21:a5:58:78:33:ad:04:a2:40:6a:b2:c0:21:
cc:ef:2b:7e:6b:92:f4:00:0f:8f:c7:e4:64:93:6f:f2:10:d2:
53:d3:d5:01:4b:92:94:1e:15:8d:1a:cb:2d:77:d2:81:2f:81:
1d:89:af:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-fra.rpki-client.org