Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/cRMbg0fxhP1qhnsEjQC2-CY8gUY.roa
File: cRMbg0fxhP1qhnsEjQC2-CY8gUY.roa (raw, json)
Hash identifier: UnekKVumAh456529EmpAmI9DhYcdhULmFBrRaAC+HAM=
Subject key identifier: 71:13:1B:83:47:F1:84:FD:6A:86:7B:04:8D:00:B6:F8:26:3C:81:46
Certificate issuer: /CN=61544481d3be7fca5e80a564ad93c1b8a2f636f8
Certificate serial: 018D13D7F220386BD70B618488A35D17D362
Authority key identifier: 61:54:44:81:D3:BE:7F:CA:5E:80:A5:64:AD:93:C1:B8:A2:F6:36:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVREgdO-f8pegKVkrZPBuKL2Nvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/cRMbg0fxhP1qhnsEjQC2-CY8gUY.roa
Signing time: Tue 16 Jan 2024 19:55:35 +0000
ROA not before: Tue 16 Jan 2024 19:55:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212667
IP address blocks: 31.222.250.0/24 maxlen: 24
212.18.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:d7:f2:20:38:6b:d7:0b:61:84:88:a3:5d:17:d3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61544481d3be7fca5e80a564ad93c1b8a2f636f8
Validity
Not Before: Jan 16 19:55:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71131b8347f184fd6a867b048d00b6f8263c8146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f3:67:a5:b3:20:de:ae:92:7f:0e:38:69:23:
11:27:e3:d7:ef:00:58:9a:b1:c6:1e:1c:55:72:f8:
fe:63:6c:bb:5c:92:a5:0c:54:26:63:16:9d:37:ec:
21:41:4a:36:ec:8e:11:9f:c7:c7:76:36:17:cb:c5:
11:ea:a8:84:23:e4:94:97:3d:f6:b3:df:8d:41:2c:
44:18:e3:9e:81:ef:75:5a:1f:e1:87:33:db:64:4c:
34:bf:51:62:d1:23:25:a1:91:02:bd:b0:da:79:83:
4b:5a:65:d6:96:85:38:66:6a:b2:29:32:c4:01:87:
e7:b5:b4:cc:1a:06:ed:85:25:22:bb:45:2d:67:7d:
12:70:e3:bb:56:e0:f5:5b:43:7b:0f:4f:fd:07:38:
66:06:8c:c1:0f:1d:66:ca:07:88:18:73:42:13:79:
f0:98:16:fb:05:06:01:05:e8:86:98:29:3b:b6:49:
e9:b1:c2:5e:b2:c2:a7:d6:26:9d:95:e4:50:15:b9:
0f:7e:cf:ba:0f:b3:2a:99:77:bc:c9:88:b9:6c:44:
fb:b5:01:ed:72:f1:57:1c:53:9f:e9:08:db:cd:98:
6e:1a:74:0f:b0:c0:4f:c8:f1:a2:eb:09:8b:39:d1:
b6:0c:5e:25:da:7e:f1:a4:96:c9:85:8c:c0:a4:2b:
a2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:13:1B:83:47:F1:84:FD:6A:86:7B:04:8D:00:B6:F8:26:3C:81:46
X509v3 Authority Key Identifier:
keyid:61:54:44:81:D3:BE:7F:CA:5E:80:A5:64:AD:93:C1:B8:A2:F6:36:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVREgdO-f8pegKVkrZPBuKL2Nvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/cRMbg0fxhP1qhnsEjQC2-CY8gUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/YVREgdO-f8pegKVkrZPBuKL2Nvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.250.0/24
212.18.122.0/24
Signature Algorithm: sha256WithRSAEncryption
94:be:a2:fa:f6:d7:be:b6:7a:ef:18:b1:98:0b:ef:86:25:bc:
7a:96:89:b0:4c:a3:cd:01:6f:f0:84:24:90:ee:d0:01:d3:52:
81:61:5f:59:71:b3:cc:cd:d7:90:35:28:e9:42:80:22:ae:09:
eb:e2:70:22:e4:de:7c:29:ac:40:8a:24:f9:26:96:ca:26:89:
0c:28:36:ae:bf:29:89:80:36:62:56:26:7e:3e:d3:4f:dc:0d:
cd:44:de:dc:7f:f8:4e:af:4f:9d:27:00:04:80:9d:73:f7:a6:
68:51:85:50:f3:f5:7b:1e:05:98:4b:50:54:31:e0:a5:54:1f:
53:68:1c:37:f8:cb:1f:ab:16:7e:8e:87:0e:4e:17:bf:38:46:
f7:6f:99:55:34:f1:41:6a:8a:18:4b:8c:f7:db:fe:e3:be:6a:
2f:6b:95:90:bc:bd:82:76:1b:78:9f:4f:37:cb:b3:99:f0:d3:
c9:9a:6b:07:20:63:3b:1b:13:1f:1f:82:29:f6:93:16:4f:ff:
b7:42:9f:55:8e:a7:6c:cd:e7:71:81:96:c4:6d:d0:f8:2b:17:
68:1c:2b:8e:65:11:c9:7b:16:02:9b:bb:0a:96:1e:3f:17:23:
1d:1c:77:a2:ab:80:4c:19:ce:4b:ce:a9:b8:95:75:e4:a1:b2:
3d:9f:bc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:48 2024 by rpki-client on console-fra.rpki-client.org