Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/F31FrhgtMAdE3S5HgjVnQNGlB4U.roa
File: F31FrhgtMAdE3S5HgjVnQNGlB4U.roa (raw, json)
Hash identifier: YJRh3umsPiph4xUEHNfAeE9cVeQPB7zB7pdloNN/ASw=
Subject key identifier: 17:7D:45:AE:18:2D:30:07:44:DD:2E:47:82:35:67:40:D1:A5:07:85
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 018431F990EF487EC67BA174888C0455A04C
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/F31FrhgtMAdE3S5HgjVnQNGlB4U.roa
Signing time: Tue 01 Nov 2022 06:55:49 +0000
ROA not before: Tue 01 Nov 2022 06:55:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207967
IP address blocks: 212.113.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:31:f9:90:ef:48:7e:c6:7b:a1:74:88:8c:04:55:a0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Nov 1 06:55:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=177d45ae182d300744dd2e4782356740d1a50785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7d:4a:56:e1:c9:8e:75:7d:71:cd:5a:71:b5:
81:ea:9a:fc:e1:e7:4d:a1:53:66:28:3f:31:98:f9:
99:5a:2f:9e:f4:bf:4c:79:13:00:6a:a6:e1:46:a9:
64:8c:5d:6d:fa:df:db:c5:a5:2d:4c:74:0e:fa:b1:
7b:6b:e6:fb:cb:fe:37:0a:6e:42:17:fd:f4:62:ef:
16:c1:8b:91:e1:21:ff:40:5d:a5:75:32:82:df:77:
00:1b:7a:e5:6d:d3:60:a9:3a:39:9b:8f:40:d7:dc:
5f:3a:02:c0:ff:5f:c7:bd:c3:a1:bb:81:19:9d:b1:
2f:f0:a7:b9:f3:41:96:e8:0f:d1:4f:fe:be:1a:33:
cd:ab:ac:93:05:b0:88:2a:f1:96:53:ad:2f:ad:fa:
07:40:10:51:71:c7:3e:8c:b9:4b:1c:4e:84:20:d3:
91:96:dc:74:47:3e:b0:da:0b:8e:5c:69:67:56:5e:
01:2e:65:1f:30:18:96:9d:0a:0b:e9:d7:af:57:9e:
63:b2:bf:1e:8c:57:56:57:91:d9:e0:98:02:64:35:
28:0c:0b:76:59:fa:7c:16:24:81:e1:4c:56:bf:10:
fc:d0:d3:44:6e:44:dd:95:66:23:fd:d8:30:97:64:
72:2d:9b:2d:c2:aa:c3:8b:01:d0:fa:6f:0a:d1:41:
0e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7D:45:AE:18:2D:30:07:44:DD:2E:47:82:35:67:40:D1:A5:07:85
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/F31FrhgtMAdE3S5HgjVnQNGlB4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.116.0/22
Signature Algorithm: sha256WithRSAEncryption
26:5b:b7:12:ad:2e:ab:42:7e:01:51:4b:1a:dd:c1:ab:bc:e4:
14:82:b8:1a:b2:dc:ec:4c:6e:46:62:08:6b:48:e0:c3:0f:cb:
16:91:39:17:f9:5c:ab:9f:36:3a:ec:d5:f7:ae:7c:9d:86:48:
1c:3b:d3:7d:3d:03:c2:e8:81:13:da:4e:bc:c5:f1:5a:9d:7c:
f7:8f:9d:33:20:dd:a8:1c:96:cb:33:93:ab:38:a9:fd:d8:3d:
53:83:38:31:54:c5:29:32:6a:3e:e6:ec:16:51:82:c6:d9:59:
02:81:98:aa:84:78:70:fc:c5:3c:5c:08:4b:0b:8e:01:71:fd:
26:00:de:e5:47:74:fc:46:1e:f2:3a:38:7c:a5:1e:c8:41:44:
33:b7:89:d2:cf:a9:4a:a2:27:a4:e5:68:5c:84:ca:e7:fa:a1:
13:0b:ad:a1:80:a9:1e:28:2f:db:65:c5:aa:1d:c6:ac:5f:ad:
86:6c:ca:06:8a:90:df:76:a3:49:36:de:de:7c:54:26:7b:bf:
95:df:e0:0b:e0:22:38:08:98:c9:a7:59:d3:3e:3f:c4:57:18:
0a:8e:ed:60:07:94:46:b1:c5:b4:a3:ac:f1:05:2d:61:7a:88:
b0:67:d1:3f:92:de:94:1d:e6:a0:d7:25:98:53:3e:2a:64:fa:
2b:09:5c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:21 2025 by rpki-client