Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8c51a0-7272-4e12-bbc4-882572ad9833/1/p1ch5H7l6zeh3bZhYF2rkOMTgOE.roa
File: p1ch5H7l6zeh3bZhYF2rkOMTgOE.roa (raw, json)
Hash identifier: 8zftOZo3afqPHeUmW5f9dgY9rZ6AOOAgHIcyksWIf7I=
Subject key identifier: A7:57:21:E4:7E:E5:EB:37:A1:DD:B6:61:60:5D:AB:90:E3:13:80:E1
Certificate issuer: /CN=b6721c64a39da3370247319ef0bb053ce6ddc71e
Certificate serial: 0185712769C679C94C6074AC7E91D9001533
Authority key identifier: B6:72:1C:64:A3:9D:A3:37:02:47:31:9E:F0:BB:05:3C:E6:DD:C7:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tnIcZKOdozcCRzGe8LsFPObdxx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8c51a0-7272-4e12-bbc4-882572ad9833/1/p1ch5H7l6zeh3bZhYF2rkOMTgOE.roa
Signing time: Mon 02 Jan 2023 06:24:46 +0000
ROA not before: Mon 02 Jan 2023 06:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34047
IP address blocks: 31.222.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:69:c6:79:c9:4c:60:74:ac:7e:91:d9:00:15:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6721c64a39da3370247319ef0bb053ce6ddc71e
Validity
Not Before: Jan 2 06:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a75721e47ee5eb37a1ddb661605dab90e31380e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f6:e8:40:b7:7b:6c:b3:0d:8f:ab:f4:0d:f6:
d2:93:0b:99:31:81:c4:22:37:66:d1:93:54:e4:72:
c2:1b:1a:64:35:85:ee:04:21:97:c1:13:d0:e9:ea:
29:8f:be:6e:b9:f6:ce:99:f0:0f:5d:ba:a8:6c:62:
7f:ed:54:de:e7:4c:ea:7b:6c:ac:2f:89:0a:e1:4a:
54:20:29:d4:9a:57:6a:c5:bd:e5:d5:a8:7a:fd:d0:
87:22:0c:21:2c:6c:79:45:80:86:ca:10:47:72:86:
39:e3:e0:a9:be:ac:e8:e5:18:5d:d0:f9:7d:5d:d3:
0d:e4:9b:24:2f:78:19:69:d0:ac:01:2d:10:85:ee:
7e:27:61:b9:d3:61:b4:f8:1a:38:70:46:e6:5d:28:
31:7c:37:0f:0b:fc:af:75:18:32:49:53:3f:a6:ab:
cb:0d:a0:47:09:1a:74:5b:09:7b:2f:11:c5:e8:05:
9c:ed:7a:08:28:3e:78:52:b5:b3:0c:2b:31:9a:59:
6a:f8:8a:73:3c:01:74:a8:ee:29:63:98:79:79:c4:
33:4d:3e:18:ed:53:91:2b:3d:37:3d:7a:a5:f2:63:
4b:f3:c0:2d:5e:50:af:52:73:f2:fc:a4:e5:a3:53:
5c:c5:c2:60:0f:c0:ad:02:85:02:b3:b9:97:de:2f:
e3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:57:21:E4:7E:E5:EB:37:A1:DD:B6:61:60:5D:AB:90:E3:13:80:E1
X509v3 Authority Key Identifier:
keyid:B6:72:1C:64:A3:9D:A3:37:02:47:31:9E:F0:BB:05:3C:E6:DD:C7:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tnIcZKOdozcCRzGe8LsFPObdxx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8c51a0-7272-4e12-bbc4-882572ad9833/1/p1ch5H7l6zeh3bZhYF2rkOMTgOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8c51a0-7272-4e12-bbc4-882572ad9833/1/tnIcZKOdozcCRzGe8LsFPObdxx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.253.0/24
Signature Algorithm: sha256WithRSAEncryption
35:92:6b:74:be:fd:6a:5a:e3:61:9f:d2:6f:a5:58:e6:08:75:
87:7e:cd:08:49:fc:08:68:fb:10:90:1d:01:c4:25:21:ac:32:
25:fa:40:85:f7:d1:67:83:54:ad:cb:88:08:9e:d3:67:a7:78:
fd:bd:32:10:ba:ce:72:d4:72:c0:c5:8c:2d:97:2f:39:33:d6:
40:5b:ba:8e:d2:e9:65:06:8c:4d:1f:61:64:f6:68:78:e6:f4:
da:9d:ba:eb:41:55:3f:7b:52:27:1c:b2:e7:45:be:e8:0d:e6:
ee:c5:24:f7:1a:71:fa:41:1f:f3:c1:d4:7f:bd:e8:bd:47:36:
84:09:0f:03:7e:ea:a7:aa:fd:53:7e:cf:2d:d8:63:bd:ba:90:
df:8a:d1:7d:4b:96:c9:c7:82:1d:aa:3d:4e:7f:cd:0d:15:68:
d0:a3:16:e1:cb:63:2c:77:f4:b3:3e:a7:55:4a:cd:d9:38:d9:
75:64:4f:82:6f:88:d5:2c:2c:9e:8a:13:9d:ba:3c:2d:3b:23:
b1:88:46:53:cf:54:3a:c4:e3:bb:69:96:9d:6d:24:cd:f4:df:
17:b5:5f:3d:92:17:73:0e:dd:35:36:ea:4e:41:89:29:35:00:
da:f0:a5:18:c6:0e:22:1f:8c:90:bf:19:b5:ac:08:ec:26:09:
78:f5:6e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:49 2025 by rpki-client