Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/fb58b0-7e24-4333-b859-823c654f05d1/1/I_1nemvX0pBi3LijGe8TNl74zUc.roa
File: I_1nemvX0pBi3LijGe8TNl74zUc.roa (raw, json)
Hash identifier: lFTrTck+S3hC03h+gl5Vv9OVs9X3bz9lt7Wt3ak929E=
Subject key identifier: 23:FD:67:7A:6B:D7:D2:90:62:DC:B8:A3:19:EF:13:36:5E:F8:CD:47
Certificate issuer: /CN=8ee73a0d43ee19d02c5e47f728f7df6f38b2da35
Certificate serial: 0A770059
Authority key identifier: 8E:E7:3A:0D:43:EE:19:D0:2C:5E:47:F7:28:F7:DF:6F:38:B2:DA:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/juc6DUPuGdAsXkf3KPffbziy2jU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/fb58b0-7e24-4333-b859-823c654f05d1/1/I_1nemvX0pBi3LijGe8TNl74zUc.roa
Signing time: Sat 01 Jan 2022 04:53:03 +0000
ROA not before: Sat 01 Jan 2022 04:53:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42695
IP address blocks: 31.132.57.0/24 maxlen: 32
31.132.56.0/24 maxlen: 32
31.132.58.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175571033 (0xa770059)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ee73a0d43ee19d02c5e47f728f7df6f38b2da35
Validity
Not Before: Jan 1 04:53:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23fd677a6bd7d29062dcb8a319ef13365ef8cd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6f:92:10:13:e6:36:ce:ac:3d:5e:f5:45:7b:
9b:08:07:ca:cd:4c:7e:0d:c0:1a:8c:d8:4b:85:1d:
87:6d:a1:9f:8a:95:9c:a3:71:f1:9a:35:6c:c3:48:
0f:4d:eb:e9:8a:f1:bd:4b:70:4f:ba:fd:20:be:ca:
03:06:96:50:ef:5d:cb:49:eb:f5:e0:72:96:bf:5f:
d4:ca:b2:2f:07:5e:f8:e2:ea:10:c5:46:66:ee:d2:
0d:fc:ec:75:69:14:4d:cc:cb:bb:87:19:a8:22:de:
9c:8a:8a:c0:f3:d6:76:9a:39:de:4a:cf:20:e6:53:
9b:50:3d:c9:a5:9a:04:23:50:40:32:c3:f4:b7:7d:
f3:27:f2:e9:e9:74:72:1d:1a:0c:7f:46:c1:64:30:
98:aa:5b:ab:e3:b5:76:6a:75:f7:86:97:f0:3f:14:
18:52:6b:f8:b2:82:7f:76:46:d9:22:5c:b0:fc:19:
69:91:eb:ac:79:b9:b9:e1:c2:6d:20:03:66:32:a0:
19:48:c5:90:68:e3:6f:e8:0f:fb:73:d1:fd:d4:0b:
02:c6:d7:76:03:63:49:9b:70:d4:e7:c1:9e:d8:69:
d4:0b:be:0c:66:d2:40:b9:41:38:15:fb:a1:60:20:
13:a8:72:18:c8:a8:4f:9a:8b:bf:aa:2f:89:e5:0e:
a3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FD:67:7A:6B:D7:D2:90:62:DC:B8:A3:19:EF:13:36:5E:F8:CD:47
X509v3 Authority Key Identifier:
keyid:8E:E7:3A:0D:43:EE:19:D0:2C:5E:47:F7:28:F7:DF:6F:38:B2:DA:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/juc6DUPuGdAsXkf3KPffbziy2jU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fb58b0-7e24-4333-b859-823c654f05d1/1/I_1nemvX0pBi3LijGe8TNl74zUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fb58b0-7e24-4333-b859-823c654f05d1/1/juc6DUPuGdAsXkf3KPffbziy2jU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.132.56.0-31.132.58.255
Signature Algorithm: sha256WithRSAEncryption
14:09:e4:3c:47:41:27:8e:1d:3f:ad:dd:67:b8:c6:43:12:56:
fa:dc:cc:17:49:ec:8a:75:bc:9d:7c:50:75:f6:2a:46:e2:a2:
bf:c5:52:b4:d7:d7:20:d5:8e:0e:5d:bf:10:f8:bd:70:6d:7d:
bc:24:33:34:f2:a0:b6:1f:ea:1a:4c:18:ed:75:0d:09:cd:39:
5b:2f:d1:02:10:2b:9b:5a:5b:73:ca:69:38:85:20:93:84:5f:
76:11:51:e0:2c:5f:a8:a2:f7:68:12:6e:d5:de:84:d1:ae:7b:
18:c6:62:a6:7a:99:f2:ca:2f:05:a3:12:ee:15:b9:79:ae:20:
83:e8:b4:3f:ae:88:06:57:f7:00:f7:1a:cb:78:fd:22:b6:06:
6a:cc:13:96:e8:5c:af:62:6c:24:60:7b:dc:9c:e4:c3:74:69:
85:d4:0e:27:9f:0a:01:d1:ee:90:3a:9c:38:3e:51:8f:6a:b5:
10:86:cf:14:76:82:b8:08:e5:89:3e:97:25:75:e5:13:a1:c4:
20:58:77:77:b6:34:51:af:0a:0d:b3:90:8a:43:46:2e:e7:75:
6f:bb:da:77:f1:f6:53:74:3a:c1:20:5a:c5:cc:cd:e0:4f:c2:
f5:b3:05:85:65:7c:42:f8:da:37:72:11:07:f8:11:37:76:88:
eb:50:a1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:22 2025 by rpki-client