Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/k_L1PFRZ7D8L9_GcoGd9j6LRnJ4.roa
File: k_L1PFRZ7D8L9_GcoGd9j6LRnJ4.roa (raw, json)
Hash identifier: GjZmm3ct688lYh4DVoN9sC9FbkU43Zg0oP5/5DHZnuk=
Subject key identifier: 93:F2:F5:3C:54:59:EC:3F:0B:F7:F1:9C:A0:67:7D:8F:A2:D1:9C:9E
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 01864F01E8DE492D6F279A323256A77E1623
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/k_L1PFRZ7D8L9_GcoGd9j6LRnJ4.roa
Signing time: Tue 14 Feb 2023 08:19:30 +0000
ROA not before: Tue 14 Feb 2023 08:19:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 394896
IP address blocks: 31.40.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4f:01:e8:de:49:2d:6f:27:9a:32:32:56:a7:7e:16:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Feb 14 08:19:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93f2f53c5459ec3f0bf7f19ca0677d8fa2d19c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2f:05:e3:40:d2:b8:24:aa:8b:af:92:8b:78:
89:9e:68:9e:31:42:9d:5c:c9:2d:eb:f8:bf:a3:dd:
1c:7a:35:86:5d:7a:30:ab:d1:52:aa:ef:07:1a:dc:
97:a6:73:1c:4a:37:81:95:81:63:fa:9e:4a:fc:bd:
22:03:14:e4:4b:e9:31:e7:83:ab:94:9f:c5:3d:4c:
d9:1a:40:b3:3d:65:f3:f5:0f:a4:b6:ef:74:c6:4d:
a2:13:7b:6c:27:35:2e:8f:27:bc:d7:56:b9:45:f2:
25:81:91:a2:2f:83:2c:17:30:6d:18:e2:6b:8e:88:
94:60:57:9d:dc:4d:02:e8:fe:39:70:30:78:ac:0e:
10:d5:95:6a:39:17:f7:40:d8:35:a1:f4:a7:93:4b:
38:38:9e:5f:d3:3f:dc:1e:f7:e0:bf:a2:85:bb:cb:
c3:2a:e3:d5:db:6d:e7:b8:5c:87:0a:e4:6e:41:60:
2f:29:73:3c:a3:30:b3:7a:5a:f2:b7:c5:d0:30:0c:
c4:51:18:0d:79:fe:93:b9:af:c3:6b:dd:ab:93:46:
ad:9f:86:92:e6:1a:a0:d3:e3:8d:45:54:6a:ff:67:
36:f4:ee:f3:39:47:4f:85:9b:dc:c6:c1:b8:88:d7:
7f:51:f9:28:49:35:ea:c8:59:b0:58:f7:24:79:63:
4c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F2:F5:3C:54:59:EC:3F:0B:F7:F1:9C:A0:67:7D:8F:A2:D1:9C:9E
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/k_L1PFRZ7D8L9_GcoGd9j6LRnJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.195.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:05:1c:4a:e0:70:c1:b7:09:7a:8d:34:b8:3a:a3:ee:72:c4:
6c:e7:e5:71:80:df:b7:b1:3e:c4:5d:50:ec:d7:d7:cc:f4:3a:
85:04:10:73:22:29:8e:f4:4c:42:e6:69:e6:e3:7d:67:ac:84:
9d:1b:85:32:9c:dd:8c:22:33:30:7f:44:8e:b7:8f:70:2b:6f:
84:a7:fb:33:34:37:9d:89:f3:a7:ce:88:ba:bd:eb:85:ce:07:
a4:28:4d:8d:e7:df:d5:0f:c1:d4:a1:ae:96:6a:1b:51:46:d2:
b3:ac:72:ac:d0:74:5d:a9:10:a6:f4:ad:bc:9a:10:35:84:19:
80:65:65:da:57:19:7c:cb:f4:22:fe:72:53:5f:40:87:b4:e7:
c5:6f:07:4a:9b:53:3b:c8:d6:6a:de:19:ad:80:c7:ce:0c:81:
32:49:ae:7e:17:90:db:20:d2:a0:e0:f2:ae:7b:ba:98:a5:03:
e9:87:93:7e:4b:8a:9d:0e:5d:ad:79:35:c3:2a:98:d3:9b:62:
32:96:70:7e:6f:da:47:64:fd:5b:e7:21:3d:ad:07:66:20:36:
e3:cf:44:cb:e5:52:44:7b:0c:54:8e:43:8c:4b:73:f3:d3:6c:
e3:16:d6:22:ef:f7:e7:4b:8e:d0:60:11:aa:87:33:66:72:23:
1d:96:58:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:42 2025 by rpki-client