Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/X4IywtqgB3-4VLrcIoU1ET0Qqtw.roa
File: X4IywtqgB3-4VLrcIoU1ET0Qqtw.roa (raw, json)
Hash identifier: fleAe8E6/pIO83Q7nkJ+GrbHTrdDYswXCePVPu+1gyA=
Subject key identifier: 5F:82:32:C2:DA:A0:07:7F:B8:54:BA:DC:22:85:35:11:3D:10:AA:DC
Certificate issuer: /CN=0550b345d9ce66e312cc294912a2b4160dfe560a
Certificate serial: 018F75F2EDCB48EE2BBF84EF2B206827C599
Authority key identifier: 05:50:B3:45:D9:CE:66:E3:12:CC:29:49:12:A2:B4:16:0D:FE:56:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/X4IywtqgB3-4VLrcIoU1ET0Qqtw.roa
Signing time: Tue 14 May 2024 07:13:25 +0000
ROA not before: Tue 14 May 2024 07:13:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 31.193.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:75:f2:ed:cb:48:ee:2b:bf:84:ef:2b:20:68:27:c5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0550b345d9ce66e312cc294912a2b4160dfe560a
Validity
Not Before: May 14 07:13:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f8232c2daa0077fb854badc228535113d10aadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d9:55:6e:7b:e1:e4:c3:10:05:0a:70:32:7c:
f5:b8:66:b7:45:0f:6c:ad:07:f4:26:81:be:34:79:
9f:4b:91:21:c7:bc:4b:fc:8f:03:0d:4c:6b:76:f0:
2a:2b:21:3c:77:8d:0e:64:c9:cf:ff:b7:6d:f3:e0:
1f:15:97:6b:4a:26:45:a2:79:4c:0d:d8:b9:49:e8:
bd:3e:11:fb:5b:26:84:3d:1e:64:2a:2e:64:25:0d:
bc:f4:e9:71:14:65:b8:f2:75:05:54:86:eb:60:49:
ba:b4:69:4d:32:66:3b:08:23:e2:02:f0:51:5c:8a:
0a:ff:1c:54:9b:0d:d8:a0:15:10:c7:b0:7f:94:ff:
96:d7:19:0a:3f:d9:21:27:40:af:c5:1c:7f:46:9e:
db:32:41:07:78:19:a2:0e:3d:e4:27:62:8f:65:54:
b0:28:55:08:04:4e:73:1d:a3:54:e1:ab:6d:26:12:
7a:d5:ba:2f:8c:70:7e:99:e7:63:13:48:f8:de:26:
82:8b:a4:95:e7:9d:1a:3f:d0:34:09:35:3f:ff:b3:
d0:4e:3a:0d:b5:d5:03:08:17:3b:f6:aa:8f:aa:16:
f7:08:b8:7b:74:a3:45:60:ac:f9:b0:30:f6:3a:03:
61:87:36:59:a6:b2:2d:30:09:f5:55:1e:1f:17:52:
ac:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:82:32:C2:DA:A0:07:7F:B8:54:BA:DC:22:85:35:11:3D:10:AA:DC
X509v3 Authority Key Identifier:
keyid:05:50:B3:45:D9:CE:66:E3:12:CC:29:49:12:A2:B4:16:0D:FE:56:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/X4IywtqgB3-4VLrcIoU1ET0Qqtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.190.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:45:e7:3e:4d:bb:18:97:0e:07:b8:e2:52:e3:95:4d:fb:c4:
b2:c0:83:0f:fb:cb:d4:50:95:84:72:27:18:40:7d:91:e4:c2:
d2:af:c0:f0:d4:e9:17:0d:b6:63:ed:8b:5f:5b:0a:fb:da:85:
09:74:d5:9d:41:9f:9d:15:22:55:ab:b5:a9:6d:11:fa:95:f7:
95:56:9f:ec:89:d9:0b:65:9e:21:92:99:f0:6a:3a:6c:ba:77:
1e:08:3f:96:74:44:6d:fc:e7:9b:93:75:29:2e:46:fb:2c:1d:
55:4a:0f:3d:9c:5f:ec:ba:08:6d:7d:e5:f7:67:bc:cc:d0:e9:
12:8c:3a:0d:b1:03:07:18:42:5f:6b:c5:8d:1a:a9:6d:b2:1e:
87:41:d4:75:99:8d:a1:01:68:ab:bb:50:7f:94:01:3a:e5:d8:
d6:1e:69:4c:a1:e5:f2:62:c2:fc:1e:31:75:6b:81:32:04:c2:
8f:80:b5:b7:b8:62:2f:24:27:03:0f:49:5a:88:78:ed:d7:7f:
04:8d:72:9f:6f:f8:b8:5c:0b:31:d7:02:71:b9:cf:49:47:3a:
da:1c:e6:60:e8:7d:73:d5:9c:5f:9a:73:20:d1:a5:d0:18:a2:
61:d8:ae:7c:e7:06:65:85:c2:36:86:0b:c3:38:af:cc:37:02:
1a:e0:2c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:22 2025 by rpki-client