Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/HY7em0cPVS6w_Z_P3VV_dZoj1Qc.roa
File: HY7em0cPVS6w_Z_P3VV_dZoj1Qc.roa (raw, json)
Hash identifier: /YlHnCSPmosaZv6fHR+ou7Sy3VkIMY3ClGKH70dIcfo=
Subject key identifier: 1D:8E:DE:9B:47:0F:55:2E:B0:FD:9F:CF:DD:55:7F:75:9A:23:D5:07
Certificate issuer: /CN=f76409e8bc85d7f259326537a9f10c3b1757387f
Certificate serial: 02B4F10C
Authority key identifier: F7:64:09:E8:BC:85:D7:F2:59:32:65:37:A9:F1:0C:3B:17:57:38:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92QJ6LyF1_JZMmU3qfEMOxdXOH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/HY7em0cPVS6w_Z_P3VV_dZoj1Qc.roa
Signing time: Sat 01 Jan 2022 04:58:13 +0000
ROA not before: Sat 01 Jan 2022 04:58:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16347
IP address blocks: 31.24.240.0/23 maxlen: 23
31.24.246.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45412620 (0x2b4f10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f76409e8bc85d7f259326537a9f10c3b1757387f
Validity
Not Before: Jan 1 04:58:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d8ede9b470f552eb0fd9fcfdd557f759a23d507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7d:da:dc:83:88:87:81:a2:8a:1d:35:35:b9:
43:94:41:b7:e8:e9:45:1d:8b:5c:b1:ff:24:57:c3:
e0:42:e5:0e:1f:2b:5e:e0:14:c9:f3:7a:4e:c1:6a:
d9:0f:89:07:d3:a0:71:87:21:8f:e6:64:ed:b3:e1:
d9:ff:12:3d:14:b3:1c:81:29:e4:6a:0d:c8:01:f1:
52:82:8a:34:0c:12:01:03:67:16:89:72:cd:bd:38:
60:3b:32:70:b4:97:a9:ec:d6:cc:af:c1:b5:ce:d0:
0e:00:14:66:21:24:66:38:1b:69:76:5c:15:1e:77:
80:8b:7d:06:8a:80:11:3b:99:46:fc:9b:07:2c:7a:
27:45:2a:3e:12:a7:04:d3:be:d5:56:e4:f0:f7:a0:
da:10:71:03:92:0c:5d:9f:79:f0:65:2d:12:6e:c5:
50:4e:a2:49:4f:50:d7:b2:51:7d:d1:a4:22:ef:d8:
45:68:59:c1:2e:0f:36:77:2c:42:95:8e:06:f0:41:
18:e8:86:83:37:df:00:e4:fa:c3:ac:31:63:c1:b2:
04:0c:63:6d:0e:84:b8:8b:6b:13:1d:17:cf:9b:7d:
36:9c:62:79:7d:cb:a9:59:99:9a:66:4a:9d:88:12:
14:55:1b:6d:f7:f5:83:4c:d1:66:5a:2c:74:1c:a4:
8c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8E:DE:9B:47:0F:55:2E:B0:FD:9F:CF:DD:55:7F:75:9A:23:D5:07
X509v3 Authority Key Identifier:
keyid:F7:64:09:E8:BC:85:D7:F2:59:32:65:37:A9:F1:0C:3B:17:57:38:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92QJ6LyF1_JZMmU3qfEMOxdXOH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/HY7em0cPVS6w_Z_P3VV_dZoj1Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/92QJ6LyF1_JZMmU3qfEMOxdXOH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.240.0/23
31.24.246.0/23
Signature Algorithm: sha256WithRSAEncryption
83:13:0a:31:fd:88:76:fd:c5:0f:7a:78:a5:51:11:6d:0b:d7:
4d:13:49:a7:3a:16:9c:16:70:89:fe:32:75:1b:32:65:4f:70:
9c:da:01:d5:02:68:a9:5a:48:58:27:66:82:1f:7d:f5:a6:0b:
93:27:b9:7c:0c:5d:7c:a9:aa:c6:8f:bb:8d:b5:30:99:83:e4:
f0:d8:f4:be:c7:ed:e3:b4:ae:de:97:60:8e:75:5a:1a:fb:8b:
0a:12:64:9d:d5:4f:b1:62:be:75:f4:7d:50:c1:6e:a9:dc:74:
f3:af:3e:37:88:ba:a3:59:ff:88:58:e7:ef:f1:a8:17:9a:16:
80:90:b3:29:36:c5:2e:ac:13:e1:f5:b9:00:90:5a:ac:66:fa:
20:47:e7:0a:e3:bb:9d:7f:93:56:b4:d4:13:21:df:37:6d:f0:
45:37:55:8a:1d:91:6b:15:22:0a:cd:1c:15:f0:5d:e1:d0:1a:
76:35:30:27:dd:3f:90:1c:1e:37:9c:ce:78:04:7b:63:1e:c5:
73:b3:a2:15:ba:56:98:23:53:92:67:11:dc:98:2d:4e:25:3b:
57:98:47:40:13:ba:d9:70:c0:fd:d8:69:b7:80:1b:8b:22:a1:
aa:3c:f7:7d:a9:1c:d4:9b:27:6d:47:43:4f:6b:04:17:29:39:
f7:9d:5d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:33 2024 by rpki-client on console-fra.rpki-client.org