Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/GFcS4vfS6cbDsWk8_YK7-X7cP58.roa
File: GFcS4vfS6cbDsWk8_YK7-X7cP58.roa (raw, json)
Hash identifier: StFs7ZC90u8FOIscBN6bvCEt1qUCX4xj25vgQrcQe6U=
Subject key identifier: 18:57:12:E2:F7:D2:E9:C6:C3:B1:69:3C:FD:82:BB:F9:7E:DC:3F:9F
Certificate issuer: /CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Certificate serial: 01896499DABFBA363EFD03D559D6C4046633
Authority key identifier: 72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/GFcS4vfS6cbDsWk8_YK7-X7cP58.roa
Signing time: Mon 17 Jul 2023 16:05:51 +0000
ROA not before: Mon 17 Jul 2023 16:05:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 31.40.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:99:da:bf:ba:36:3e:fd:03:d5:59:d6:c4:04:66:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Validity
Not Before: Jul 17 16:05:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=185712e2f7d2e9c6c3b1693cfd82bbf97edc3f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0c:83:6b:ab:4e:ed:cf:51:c3:f5:a7:26:c5:
12:42:16:0e:a1:5f:c6:2c:26:71:4c:ce:16:e8:62:
22:84:03:b8:36:48:ba:02:e9:93:8f:12:49:b7:85:
b8:13:8c:38:5f:74:b5:4e:37:a1:18:45:84:af:b0:
0f:a0:0c:40:34:46:e8:49:68:b7:b6:e2:a5:69:6a:
bd:42:7c:09:e4:eb:c8:79:9f:43:c0:aa:65:b5:50:
71:e4:91:cf:2e:31:ad:c7:81:c3:12:02:ef:57:63:
8d:70:87:5c:2b:a9:d0:b6:ab:34:51:b7:08:4b:11:
d5:76:0d:ef:ff:ba:15:bb:c5:f0:78:d0:2e:c0:be:
7f:02:fc:e1:51:8c:13:0a:65:63:a7:1f:c1:b9:4e:
6c:f9:b0:44:f5:20:68:72:b0:1c:61:f7:29:e3:54:
ba:da:b7:ec:69:ce:53:3d:99:09:47:ae:4e:0e:6d:
01:f6:64:a2:a3:94:0f:a9:df:5c:37:dc:3b:0c:8d:
4c:a2:61:f7:90:a4:ae:21:03:62:91:5d:0f:1b:dc:
8b:96:91:e8:0c:33:1c:1d:4b:6b:9e:76:de:35:8d:
bf:6a:91:64:04:f3:77:71:9d:2c:f9:0d:8a:ad:9a:
b8:6b:dd:87:1c:72:a7:7e:59:2e:21:bd:78:e2:98:
ff:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:57:12:E2:F7:D2:E9:C6:C3:B1:69:3C:FD:82:BB:F9:7E:DC:3F:9F
X509v3 Authority Key Identifier:
keyid:72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/GFcS4vfS6cbDsWk8_YK7-X7cP58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/cntIdqLREFjC5qd5_OrF8ECDtMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.202.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:23:3f:33:3b:16:0f:bc:f3:a5:6e:4e:9c:ed:f0:03:39:b5:
63:3c:4c:e3:5f:bb:76:77:cd:74:84:28:57:fa:d9:56:45:e3:
5d:f7:fa:ee:75:d1:5f:89:2e:08:26:d7:c0:57:71:18:ad:3d:
30:bf:2a:55:05:66:91:b6:e6:b1:2d:53:fa:9e:17:16:ea:2a:
fd:85:03:a3:a1:a3:20:bc:29:e3:33:86:5c:09:70:75:4b:77:
82:bf:31:a5:77:f9:ac:de:8a:ff:3f:f1:76:c4:f2:7c:6b:03:
ec:48:f5:e6:57:0f:17:ff:b0:fc:5d:1c:ad:56:83:59:31:e2:
03:c3:8e:0e:38:cb:79:fe:ab:70:61:53:fb:e3:7d:e2:e9:5a:
77:9e:9e:58:4c:f3:b9:4e:57:82:ae:8c:1e:b2:37:6c:8a:10:
e8:11:41:12:f0:2b:bc:d7:fa:e1:19:79:e1:79:6c:8b:f9:23:
03:f6:ff:89:6c:3a:0e:fd:97:b8:16:a1:f6:42:c7:d5:d1:c4:
c0:ed:9b:17:05:b5:0d:75:36:19:25:05:7c:1d:7b:2a:f2:14:
8f:9d:b1:fc:55:62:c0:c0:ea:c3:ee:80:7f:f4:d6:90:83:b8:
07:62:53:9b:5e:88:67:1a:dd:c0:14:0c:04:6e:77:08:60:1e:
f6:a4:37:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:24:35 2025 by rpki-client