Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/OAr_CFrxyupr1rFXSeOHjDhl0AY.roa
File: OAr_CFrxyupr1rFXSeOHjDhl0AY.roa (raw, json)
Hash identifier: X0AMZ77fwYSlUx3e3usQ4nZuUHL9Eg7l+d63qxAodbM=
Subject key identifier: 38:0A:FF:08:5A:F1:CA:EA:6B:D6:B1:57:49:E3:87:8C:38:65:D0:06
Certificate issuer: /CN=f76409e8bc85d7f259326537a9f10c3b1757387f
Certificate serial: 02B3DEF8
Authority key identifier: F7:64:09:E8:BC:85:D7:F2:59:32:65:37:A9:F1:0C:3B:17:57:38:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92QJ6LyF1_JZMmU3qfEMOxdXOH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/OAr_CFrxyupr1rFXSeOHjDhl0AY.roa
Signing time: Sat 01 Jan 2022 04:58:13 +0000
ROA not before: Sat 01 Jan 2022 04:58:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12727
IP address blocks: 31.24.242.0/23 maxlen: 23
31.24.244.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45342456 (0x2b3def8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f76409e8bc85d7f259326537a9f10c3b1757387f
Validity
Not Before: Jan 1 04:58:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=380aff085af1caea6bd6b15749e3878c3865d006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e4:42:d2:fe:5b:73:87:b5:33:17:ed:c7:87:
a2:a5:1c:f7:55:de:11:92:7a:10:be:c8:72:0e:08:
e2:9e:b3:95:c8:86:e0:62:c8:a7:dc:48:f4:8d:4b:
c3:88:24:24:d4:29:bd:62:91:85:f9:67:4c:41:70:
b7:fe:32:fb:da:df:53:61:46:32:74:f1:3e:9c:21:
47:98:2a:30:a8:11:65:5a:0f:81:4d:24:f6:9b:7b:
de:25:77:6e:a5:3e:48:88:f2:db:1c:7d:98:e4:fc:
92:5b:f2:e9:1d:37:51:d1:89:d9:c1:e0:e7:b0:0d:
6d:05:9c:49:c8:97:6f:09:1b:13:1e:ff:76:fd:d0:
ff:5d:48:21:db:9f:42:1d:6a:96:82:14:80:e6:93:
ff:35:bc:77:a9:f1:5e:e7:29:06:ca:f4:b7:9d:aa:
b0:c2:5b:9a:76:65:2d:dc:22:9e:53:8c:3e:51:7d:
87:8c:c1:06:08:d0:62:d1:03:71:54:8c:c6:04:7c:
58:3d:33:4a:92:11:33:06:7c:73:70:46:b3:43:c9:
5d:60:e0:99:66:72:c2:1f:fd:27:d5:55:bc:2d:00:
a0:ac:10:80:39:25:f4:0c:93:69:2a:9b:a5:da:4e:
e6:ac:15:20:71:9e:22:89:be:7e:de:6a:57:6b:3a:
93:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0A:FF:08:5A:F1:CA:EA:6B:D6:B1:57:49:E3:87:8C:38:65:D0:06
X509v3 Authority Key Identifier:
keyid:F7:64:09:E8:BC:85:D7:F2:59:32:65:37:A9:F1:0C:3B:17:57:38:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92QJ6LyF1_JZMmU3qfEMOxdXOH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/OAr_CFrxyupr1rFXSeOHjDhl0AY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/92QJ6LyF1_JZMmU3qfEMOxdXOH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.242.0-31.24.245.255
Signature Algorithm: sha256WithRSAEncryption
b1:8e:c5:9b:b7:e8:35:b9:f7:79:10:f4:56:37:4f:74:5b:73:
62:37:8c:e8:8e:27:9b:63:49:e0:f2:b7:22:21:25:af:83:2a:
ae:c5:b6:26:bf:d4:ca:f3:c1:2e:5a:5b:af:6d:5b:89:8f:da:
c0:e4:a5:cc:e4:84:70:d9:3e:d0:33:11:b2:bb:92:7a:53:1c:
82:21:77:8b:82:7b:31:34:f2:db:76:a3:91:de:92:16:d9:56:
af:79:16:bd:79:70:6f:70:2c:e0:c4:17:36:a2:84:c8:0a:07:
ab:37:83:02:62:ef:b3:5a:e5:7d:a4:2e:5f:b7:6e:f8:7d:b4:
ce:aa:88:86:fe:38:38:0b:0c:d0:78:8f:d6:e3:98:4d:ca:34:
09:d2:07:25:75:1a:4a:9a:8f:0a:86:9b:d7:66:2e:0b:4c:21:
1c:06:d8:45:33:9f:47:8a:e1:27:73:33:9d:94:a9:32:98:57:
fd:c3:35:eb:d3:6c:33:a4:ff:a0:4a:83:fb:39:13:ea:a6:ae:
37:85:12:09:82:c1:2a:c7:8f:4c:fa:52:b4:86:97:26:4f:df:
fd:6e:8b:28:d9:56:62:ab:d8:1f:f2:19:e8:53:28:2b:f9:84:
c4:00:4b:13:7f:56:41:74:c3:f8:79:ae:6a:b3:c7:41:51:86:
09:b9:85:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:42 2025 by rpki-client