Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/N1ZYCogp-CZhL-6UZZKuhDL1Q-w.roa
File: N1ZYCogp-CZhL-6UZZKuhDL1Q-w.roa (raw, json)
Hash identifier: d89uwgUVrY4u1T9Lp41ESAN921NeMDVR5qfqy9S6h+Y=
Subject key identifier: 37:56:58:0A:88:29:F8:26:61:2F:EE:94:65:92:AE:84:32:F5:43:EC
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01856D9D1738A2CA6AE9BC4A8533843C9FA9
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/N1ZYCogp-CZhL-6UZZKuhDL1Q-w.roa
Signing time: Sun 01 Jan 2023 13:54:49 +0000
ROA not before: Sun 01 Jan 2023 13:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141158
IP address blocks: 82.118.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:17:38:a2:ca:6a:e9:bc:4a:85:33:84:3c:9f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 13:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3756580a8829f826612fee946592ae8432f543ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:09:53:cd:3f:a4:66:19:94:89:07:ba:93:8a:
d2:22:a8:7b:21:d5:05:4b:eb:74:b2:40:7c:99:38:
1c:57:23:52:71:8f:01:5f:6b:04:1c:d9:19:49:19:
2c:0a:32:ad:dd:63:1d:e2:8b:36:2c:0b:ed:d1:9e:
52:89:f6:f2:aa:6a:38:e6:ba:ea:82:f7:62:02:57:
1c:d2:e9:3c:ae:e6:13:35:0d:4a:7a:cf:74:58:44:
f6:e6:54:71:11:63:5c:61:27:97:d5:1d:4a:a6:57:
c2:fa:d7:a6:83:6f:db:27:de:66:92:91:2d:5c:5f:
1d:c9:62:d7:48:9d:fd:92:19:a1:4a:87:4c:53:d7:
77:39:9b:00:a7:12:ac:3b:64:b1:01:b0:f4:f7:e9:
31:cb:63:fe:67:46:2b:92:6b:0f:8b:af:9e:79:9f:
9c:49:e6:33:32:b8:3f:4b:49:2b:87:77:69:45:6a:
4d:10:d2:32:49:b5:56:bf:89:80:54:40:bb:c4:83:
24:c7:06:e8:c5:a7:78:b5:c6:91:26:35:4d:00:94:
a6:fa:ae:fa:c6:ee:e6:f3:eb:f3:73:61:8f:b3:45:
6c:d4:29:79:e7:a5:a9:ea:3d:e5:36:23:df:95:c6:
29:a6:fe:97:b1:4e:ac:96:90:ee:e9:4e:5f:97:9a:
50:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:56:58:0A:88:29:F8:26:61:2F:EE:94:65:92:AE:84:32:F5:43:EC
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/N1ZYCogp-CZhL-6UZZKuhDL1Q-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.31.0/24
Signature Algorithm: sha256WithRSAEncryption
05:53:d5:b1:f4:d2:ab:e0:66:05:26:ac:62:05:6c:5f:dd:8f:
34:5b:b0:39:25:8b:fc:14:c7:c7:26:03:ff:df:5b:3a:1e:09:
c9:86:1d:7d:33:a3:b8:51:d3:29:94:90:f8:37:fc:53:94:13:
1b:e9:07:09:cb:e8:97:ad:c0:6f:5d:cb:c0:8d:b2:ab:bf:e4:
b4:c3:83:60:c9:4b:37:8d:44:3b:cf:36:76:48:64:00:bb:65:
ce:9a:40:2b:c8:ba:79:b6:22:5d:3b:e2:89:1e:a3:59:01:be:
45:e8:ed:81:91:52:f5:85:e3:a9:f1:42:80:8a:10:b1:86:a2:
3c:25:88:40:e7:8d:08:6e:d6:df:b3:a1:12:90:a0:32:d7:16:
78:63:3a:c2:20:7d:6f:4e:7b:ff:de:3f:c4:d8:be:6a:37:49:
dc:b9:33:0e:7f:38:58:e9:4b:05:8f:ab:da:8d:11:2c:fd:7c:
7a:38:e8:d4:fb:5a:51:24:dd:49:f8:fb:6d:95:bd:17:bb:e9:
b6:84:ce:c2:7f:8c:2f:cc:c9:e4:05:75:2b:db:f8:8e:31:aa:
42:48:e2:be:31:55:2c:e1:7c:57:04:91:3b:fd:bc:3c:60:95:
6b:aa:32:2a:89:2f:71:1b:b1:46:dd:63:5e:40:21:f8:9e:78:
28:2c:59:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:12 2025 by rpki-client