Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d3cc0e-03c2-4eda-8766-a4344e79c999/1/1e8B2ECLTxFGnTRfkBEKNbeA7DA.roa
File: 1e8B2ECLTxFGnTRfkBEKNbeA7DA.roa (raw, json)
Hash identifier: iMKorWUFI/T3QmQO/4rLtKuTNcHKHPQZQ7lh5mX1TcY=
Subject key identifier: D5:EF:01:D8:40:8B:4F:11:46:9D:34:5F:90:11:0A:35:B7:80:EC:30
Certificate issuer: /CN=18f5d12b58f708d054bfc781ff9ce0abb24ec343
Certificate serial: BD0E55
Authority key identifier: 18:F5:D1:2B:58:F7:08:D0:54:BF:C7:81:FF:9C:E0:AB:B2:4E:C3:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPXRK1j3CNBUv8eB_5zgq7JOw0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d3cc0e-03c2-4eda-8766-a4344e79c999/1/1e8B2ECLTxFGnTRfkBEKNbeA7DA.roa
Signing time: Sat 01 Jan 2022 09:00:11 +0000
ROA not before: Sat 01 Jan 2022 09:00:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 31.222.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12389973 (0xbd0e55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f5d12b58f708d054bfc781ff9ce0abb24ec343
Validity
Not Before: Jan 1 09:00:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5ef01d8408b4f11469d345f90110a35b780ec30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:de:92:4c:2d:0e:4e:d5:b5:4b:ab:cd:31:e0:
2e:58:7b:58:3c:77:fd:b9:94:1a:9a:c7:49:c7:76:
cb:20:40:d1:ea:60:d7:56:35:90:86:c9:32:ed:f5:
77:0c:5e:9c:a9:14:b1:d3:a4:5c:27:2a:fd:0b:4e:
1d:0e:fb:e0:6e:60:70:bb:e9:d0:a4:19:55:02:24:
df:fe:21:0b:a8:c3:85:a0:e0:f1:20:9c:15:6f:b8:
6a:43:e8:04:4b:a0:43:f4:88:7f:1d:b3:32:64:18:
d2:a6:b5:7e:f3:3e:d0:e2:f1:56:c8:6c:a7:99:e6:
36:76:4f:40:e1:eb:a7:32:d6:fe:cf:f4:25:03:c8:
87:0c:31:91:2d:b1:72:27:2f:03:57:54:d0:97:dc:
fb:95:df:45:16:d2:df:1c:00:a3:bb:c2:6f:6b:32:
e1:63:36:1a:8d:2e:da:fa:0f:ab:ce:14:ac:8b:42:
4c:ec:f2:c3:a5:71:21:ba:3d:9f:4f:93:dc:85:4d:
a3:f5:96:8e:98:7d:52:18:28:87:35:16:c7:74:d2:
20:95:46:6c:c9:a3:44:d3:8a:92:f2:5e:7c:37:75:
92:da:1d:d1:d0:bc:a4:10:17:4b:d1:5f:5d:c6:c4:
e7:36:9b:fa:d8:fe:68:0f:2c:a7:51:0e:aa:89:fc:
f3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EF:01:D8:40:8B:4F:11:46:9D:34:5F:90:11:0A:35:B7:80:EC:30
X509v3 Authority Key Identifier:
keyid:18:F5:D1:2B:58:F7:08:D0:54:BF:C7:81:FF:9C:E0:AB:B2:4E:C3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPXRK1j3CNBUv8eB_5zgq7JOw0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d3cc0e-03c2-4eda-8766-a4344e79c999/1/1e8B2ECLTxFGnTRfkBEKNbeA7DA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d3cc0e-03c2-4eda-8766-a4344e79c999/1/GPXRK1j3CNBUv8eB_5zgq7JOw0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.255.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:98:aa:ef:45:83:70:31:e5:b2:03:4f:41:d1:3f:01:67:b7:
28:73:ca:da:ed:37:a0:69:2a:78:de:54:9b:62:2f:dd:91:1e:
54:19:3f:51:d5:3c:a6:89:4c:b8:ac:4c:71:33:50:8d:35:d3:
37:38:82:0c:61:ce:e5:f8:39:fe:93:ad:94:89:a8:ef:90:21:
3a:7a:b3:8f:4c:f8:bf:e4:9e:b4:2c:c5:7b:80:72:cd:4f:43:
12:38:f6:f8:49:60:a4:ff:3a:70:a5:f5:9b:c1:71:f1:4f:eb:
43:21:39:25:54:0e:a6:d8:6b:7e:0e:0e:d5:54:40:5e:86:0a:
25:f8:41:5e:99:a4:5d:69:2f:a4:08:30:07:27:99:da:28:c3:
fc:5d:0f:dc:5c:61:e2:ab:ca:21:3d:cf:cb:87:a6:4d:b6:56:
9f:f0:e8:db:f7:ba:7b:7e:83:02:48:07:75:c1:70:7a:a5:59:
dd:72:94:d1:54:80:87:ee:6a:4e:2f:0f:64:bf:27:2b:f8:dd:
31:e7:78:ee:73:4b:dd:67:78:0b:1d:05:35:5e:f0:ad:c7:b3:
51:26:91:90:09:8b:6d:b3:d8:9f:8c:24:5f:6c:16:01:64:38:
6f:be:dc:e4:e9:07:44:59:28:d8:73:12:db:2b:f5:c1:b9:53:
f0:03:38:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:40 2024 by rpki-client on console-ams.rpki-client.org