Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1b6bd9-2aa3-473c-a033-38f918a515bd/1/V7CDG6Ndc1I_yf0-eNSsbxAkzVE.roa
File: V7CDG6Ndc1I_yf0-eNSsbxAkzVE.roa (raw, json)
Hash identifier: ucDiLxlGrN4qSel0cuKZXiO+AynriR+QWR0ztYVC+Xg=
Subject key identifier: 57:B0:83:1B:A3:5D:73:52:3F:C9:FD:3E:78:D4:AC:6F:10:24:CD:51
Certificate issuer: /CN=3778d86d81485ea44210b9e054137fd935cfeea8
Certificate serial: 018964C0624CD26F74A8E07EB8A3F6D99399
Authority key identifier: 37:78:D8:6D:81:48:5E:A4:42:10:B9:E0:54:13:7F:D9:35:CF:EE:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3jYbYFIXqRCELngVBN_2TXP7qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1b6bd9-2aa3-473c-a033-38f918a515bd/1/V7CDG6Ndc1I_yf0-eNSsbxAkzVE.roa
Signing time: Mon 17 Jul 2023 16:47:56 +0000
ROA not before: Mon 17 Jul 2023 16:47:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 31.222.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:62:4c:d2:6f:74:a8:e0:7e:b8:a3:f6:d9:93:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3778d86d81485ea44210b9e054137fd935cfeea8
Validity
Not Before: Jul 17 16:47:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57b0831ba35d73523fc9fd3e78d4ac6f1024cd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:aa:19:13:d8:1c:0a:5a:bc:fe:f2:cb:e4:c5:
bf:0f:f3:35:cc:c0:a0:f0:cc:0d:4e:aa:84:e8:96:
c9:55:31:27:3e:05:f0:6b:bb:f8:d3:3b:e9:71:e6:
56:49:c4:14:4a:63:39:4a:58:e7:19:62:b8:66:fc:
2b:aa:8f:6f:3e:a9:9f:a5:5a:a6:fd:14:28:8f:ac:
7f:18:3f:fa:15:73:77:fd:9e:81:75:99:21:36:0a:
2a:3e:dc:58:b8:b8:77:c6:28:30:41:f0:7d:d4:0f:
2a:08:eb:62:a2:6f:94:a1:7c:79:ae:09:4b:51:aa:
ac:88:8d:44:a7:10:bc:8b:8d:8b:13:9d:20:83:cb:
b2:f0:0d:be:4b:10:85:86:03:b6:ca:1d:d2:8b:24:
8c:9f:cc:1f:a8:6d:5e:d0:8c:7d:df:6d:f1:9e:27:
57:bf:94:7a:c3:8d:2e:4e:ba:a4:6a:e0:78:b1:02:
c0:f0:69:93:ab:38:13:7e:aa:59:dd:89:53:ad:5d:
c2:93:40:12:8a:d5:65:6d:15:98:2f:78:f4:e7:9a:
ac:4a:d6:ad:9d:67:54:96:06:2a:cf:82:f3:66:36:
1e:ec:54:d7:fa:27:5a:de:cd:a5:74:dd:cc:5f:3a:
b7:af:b6:a7:ef:a4:af:a2:fc:bc:6b:d4:6d:ee:13:
ec:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B0:83:1B:A3:5D:73:52:3F:C9:FD:3E:78:D4:AC:6F:10:24:CD:51
X509v3 Authority Key Identifier:
keyid:37:78:D8:6D:81:48:5E:A4:42:10:B9:E0:54:13:7F:D9:35:CF:EE:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3jYbYFIXqRCELngVBN_2TXP7qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1b6bd9-2aa3-473c-a033-38f918a515bd/1/V7CDG6Ndc1I_yf0-eNSsbxAkzVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1b6bd9-2aa3-473c-a033-38f918a515bd/1/N3jYbYFIXqRCELngVBN_2TXP7qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.244.0/24
Signature Algorithm: sha256WithRSAEncryption
01:22:bf:43:ea:38:a7:86:f1:a5:ac:0e:ae:4a:17:ca:33:2c:
78:2e:cf:70:4d:03:92:e9:e9:65:79:8d:dd:47:34:e6:aa:a4:
d2:2d:cc:fd:84:97:b8:65:aa:9d:9f:57:80:ef:e5:0b:40:e8:
c0:46:fc:8f:62:a4:c2:5c:e9:b0:cc:14:70:d8:5e:e3:fc:e8:
1e:ea:12:8a:c2:25:df:cb:78:23:99:7f:03:72:43:63:0f:77:
7c:39:d7:e8:28:30:5f:32:6e:f9:af:48:7c:3a:93:09:3e:09:
5b:42:0d:d7:58:40:e2:ec:35:ff:04:c0:3e:b5:9e:de:6e:48:
31:74:41:b8:05:22:65:fb:9c:29:ee:30:68:c5:8d:ef:10:a7:
2b:21:3b:b0:9b:92:8d:84:92:1d:32:50:76:dd:ac:e6:82:dd:
67:e9:0a:f6:a6:bf:dd:3c:a0:03:62:ab:6a:14:4c:ed:88:f5:
74:79:3c:93:96:9b:c3:e9:60:c5:0b:74:44:09:37:0c:92:7a:
30:dc:7c:89:71:ef:f9:8d:da:50:f8:c2:3f:66:14:c2:ff:28:
6a:88:ea:2b:96:d1:6b:eb:c9:2d:d0:af:2b:49:f8:d8:e3:d8:
2a:d4:44:f8:79:70:f9:2d:46:ee:c6:d0:99:3a:c7:99:f5:02:
b0:d3:fd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:01 2025 by rpki-client