Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/sOtm_3DG7ISffowTyYm45uoQH7k.roa
File: sOtm_3DG7ISffowTyYm45uoQH7k.roa (raw, json)
Hash identifier: 7U/HjzB1H7B1fUkaWPGVU2NIesrxUiGj8FgvksJlyeE=
Subject key identifier: B0:EB:66:FF:70:C6:EC:84:9F:7E:8C:13:C9:89:B8:E6:EA:10:1F:B9
Certificate issuer: /CN=f76409e8bc85d7f259326537a9f10c3b1757387f
Certificate serial: 01856FC2689058B1DBE0744E81DC122318D1
Authority key identifier: F7:64:09:E8:BC:85:D7:F2:59:32:65:37:A9:F1:0C:3B:17:57:38:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92QJ6LyF1_JZMmU3qfEMOxdXOH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/sOtm_3DG7ISffowTyYm45uoQH7k.roa
Signing time: Sun 01 Jan 2023 23:54:49 +0000
ROA not before: Sun 01 Jan 2023 23:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16347
IP address blocks: 31.24.240.0/23 maxlen: 23
31.24.246.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:68:90:58:b1:db:e0:74:4e:81:dc:12:23:18:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f76409e8bc85d7f259326537a9f10c3b1757387f
Validity
Not Before: Jan 1 23:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0eb66ff70c6ec849f7e8c13c989b8e6ea101fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0d:60:44:ba:66:bb:d2:16:e1:95:fa:7f:00:
38:79:2a:75:d8:40:4a:60:6d:29:84:f1:e8:d1:5c:
1a:aa:00:e1:99:04:e5:45:27:66:fd:65:ce:54:ba:
e0:ed:9c:b8:29:b2:72:88:c2:23:5f:93:9a:89:74:
c7:f6:44:23:fb:40:9b:57:e1:7d:3b:20:b9:81:e2:
f0:f3:e7:03:e9:04:59:8c:ae:dc:60:7f:55:93:e2:
3e:c3:6c:c5:b0:d6:70:d7:50:90:37:20:01:2e:84:
78:93:ee:19:0c:d2:87:86:1b:92:da:0d:a6:74:96:
ac:26:2c:24:06:c3:17:48:1c:e1:19:b9:cc:89:3c:
58:28:bd:7b:49:b7:85:4e:3a:3c:ab:cc:ca:8b:b3:
a4:b7:fb:cc:cd:9f:1c:26:9a:80:9b:e8:0e:20:b3:
37:6c:4d:01:be:e0:16:38:35:8c:90:07:de:d6:6d:
69:d1:98:26:ef:0b:85:26:41:68:bf:20:25:e9:a6:
3f:cf:98:ef:59:c5:0f:54:47:1c:13:0d:2e:d6:3d:
4a:e5:ed:bb:02:22:83:99:80:bd:dd:ee:12:15:ed:
95:66:00:ac:43:50:1b:1e:6e:68:f8:ef:4b:ec:fa:
da:a5:6d:df:79:5c:64:55:86:94:96:93:95:19:71:
fb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EB:66:FF:70:C6:EC:84:9F:7E:8C:13:C9:89:B8:E6:EA:10:1F:B9
X509v3 Authority Key Identifier:
keyid:F7:64:09:E8:BC:85:D7:F2:59:32:65:37:A9:F1:0C:3B:17:57:38:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92QJ6LyF1_JZMmU3qfEMOxdXOH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/sOtm_3DG7ISffowTyYm45uoQH7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/92QJ6LyF1_JZMmU3qfEMOxdXOH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.240.0/23
31.24.246.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:22:c8:61:85:f5:56:f4:5f:38:75:ba:ab:38:83:15:87:0f:
d2:73:eb:d3:33:f8:1f:e9:bd:93:54:25:33:71:da:09:b2:3b:
e7:c6:b7:f8:5b:69:28:ed:a0:f0:d4:33:a5:60:30:ad:9e:f1:
0e:f2:84:de:b7:8b:bd:82:2c:fc:b1:d5:d6:ec:48:5f:ba:70:
0a:40:01:bd:8e:af:96:f1:24:10:15:57:44:ab:d3:7a:e9:da:
9b:aa:6a:4c:f4:5c:e4:4c:cb:a4:ed:1c:15:d8:8d:1f:81:e3:
35:71:7e:b6:5c:d5:f2:7c:ab:48:d7:97:ac:7d:af:b3:aa:86:
ee:4b:74:b9:50:9c:b3:e5:13:ad:07:3e:70:86:c0:30:23:5b:
de:e7:75:2f:07:dc:81:d8:8c:27:92:35:33:49:fd:31:3b:97:
ca:d7:ab:67:44:c7:12:4e:7a:fb:45:3d:35:df:22:6d:4e:2c:
41:14:08:a8:fb:ca:3c:30:00:a9:fd:23:1f:51:11:53:19:3e:
71:a4:aa:34:e2:d0:bf:f4:bb:ea:c1:8f:6b:d7:29:d9:00:ce:
ac:09:45:20:46:cb:5c:97:78:57:7e:c2:4c:21:4d:d6:f4:5f:
4e:0e:e1:d5:a8:1d:02:b1:4f:70:15:05:2d:3a:47:b8:16:0b:
a1:4f:82:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-fra.rpki-client.org