Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/fb58b0-7e24-4333-b859-823c654f05d1/1/K8BNFLXjcIvgDvipI94hwBCOwZk.roa
File: K8BNFLXjcIvgDvipI94hwBCOwZk.roa (raw, json)
Hash identifier: atqJ0DCCgfaWDZTT5TMG0i0Ij+QIw4+a4O/IiQW7x/g=
Subject key identifier: 2B:C0:4D:14:B5:E3:70:8B:E0:0E:F8:A9:23:DE:21:C0:10:8E:C1:99
Certificate issuer: /CN=8ee73a0d43ee19d02c5e47f728f7df6f38b2da35
Certificate serial: 0C172C4B
Authority key identifier: 8E:E7:3A:0D:43:EE:19:D0:2C:5E:47:F7:28:F7:DF:6F:38:B2:DA:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/juc6DUPuGdAsXkf3KPffbziy2jU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/fb58b0-7e24-4333-b859-823c654f05d1/1/K8BNFLXjcIvgDvipI94hwBCOwZk.roa
Signing time: Tue 05 Jul 2022 06:22:25 +0000
ROA not before: Tue 05 Jul 2022 06:22:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52011
IP address blocks: 31.132.56.0/24 maxlen: 24
31.132.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202845259 (0xc172c4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ee73a0d43ee19d02c5e47f728f7df6f38b2da35
Validity
Not Before: Jul 5 06:22:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2bc04d14b5e3708be00ef8a923de21c0108ec199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8a:3b:94:f5:ca:85:ec:c3:06:42:c4:4e:2d:
1c:4e:e9:97:03:15:f0:6d:b0:f1:67:dd:ab:41:f8:
47:39:6e:99:29:d4:e7:d0:02:22:4f:ca:ed:3b:4a:
c7:dc:46:b2:61:af:bc:2f:c9:47:6f:44:e9:70:1d:
3d:d8:27:a4:c3:bc:37:23:44:43:66:41:94:87:32:
90:4d:d0:9f:a8:bc:48:81:f8:ae:eb:b6:d8:cb:b4:
a8:89:23:54:79:2d:ab:a8:7b:ca:9e:39:d9:f8:00:
68:44:ca:7a:ea:4f:c7:07:94:c5:e7:f8:2f:ab:cb:
6e:08:0d:eb:90:1e:93:e1:f2:f5:a3:75:b9:ab:ad:
14:29:39:04:63:c9:a8:b0:32:6d:e9:f8:12:1b:9e:
09:72:46:d1:9a:96:1d:dc:cc:15:27:3f:0b:90:95:
2c:f8:87:76:a9:f3:7f:28:66:8d:52:3d:71:47:ab:
94:05:79:c1:f7:20:77:3f:2a:f9:58:9e:d5:ad:08:
95:24:93:44:02:12:74:a3:6d:41:e1:b6:a3:33:e6:
63:9c:54:cd:1b:9b:e8:3f:3b:ac:bf:90:e8:62:e1:
f5:c4:b6:e4:b9:8d:a2:aa:6a:1a:ab:dc:3a:48:95:
49:7c:fb:24:57:0e:d3:91:5f:f8:97:05:04:ca:da:
c7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C0:4D:14:B5:E3:70:8B:E0:0E:F8:A9:23:DE:21:C0:10:8E:C1:99
X509v3 Authority Key Identifier:
keyid:8E:E7:3A:0D:43:EE:19:D0:2C:5E:47:F7:28:F7:DF:6F:38:B2:DA:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/juc6DUPuGdAsXkf3KPffbziy2jU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fb58b0-7e24-4333-b859-823c654f05d1/1/K8BNFLXjcIvgDvipI94hwBCOwZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fb58b0-7e24-4333-b859-823c654f05d1/1/juc6DUPuGdAsXkf3KPffbziy2jU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.132.56.0/23
Signature Algorithm: sha256WithRSAEncryption
55:76:a5:82:7a:1a:cd:40:24:eb:1e:e2:5e:81:29:b7:38:39:
ce:c1:fd:50:2b:ea:b6:95:03:73:1a:68:77:ba:53:a9:29:ea:
a0:d7:2f:c4:2d:23:99:7b:e6:06:45:72:79:db:bd:d4:a6:45:
6f:5b:45:96:32:f5:d0:7c:f3:de:72:28:d0:5a:96:5f:7d:71:
9a:22:78:9e:17:d5:88:6e:5f:09:94:ee:45:57:cf:f4:37:a6:
60:dd:a5:24:d6:fb:7f:91:a4:bd:a1:ea:d3:19:66:33:26:b0:
7d:bf:11:db:f6:e3:ac:0d:40:78:1a:b8:f3:92:2b:1f:b6:4e:
a6:da:10:3a:7a:1d:a0:8a:fb:9a:cc:ab:0b:fe:39:4f:ce:b8:
53:15:74:d5:e1:f1:d8:79:58:9a:e1:c1:3e:0e:b8:f6:56:63:
e2:13:2f:51:e3:92:b9:28:b8:b6:4c:3d:84:96:64:d9:0a:29:
67:3a:d2:84:62:ec:3d:4d:33:3b:38:5f:23:fb:1f:0a:18:d3:
f0:aa:5a:e9:2f:a8:3f:57:ad:6f:33:32:85:3a:4f:a2:e0:37:
dc:1e:02:59:90:c1:4e:0a:ca:a2:a8:16:6b:a3:6f:5e:a9:09:
cb:56:2c:ff:08:c0:ce:41:51:8d:ab:36:10:e9:59:56:ae:b6:
9e:92:b8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:07 2025 by rpki-client