Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6d5355-3f65-4584-b6cf-84cf238084fc/1/1-anG84_e8rX2ZY64PjZ24Ea9bvc.roa
File: 1-anG84_e8rX2ZY64PjZ24Ea9bvc.roa (raw, json)
Hash identifier: TekUWE8gpWVtmYb0tltNGZKfRMXXL0BCXzivNXYSaA8=
Subject key identifier: F9:A9:C6:F3:8F:DE:F2:B5:F6:65:8E:B8:3E:36:76:E0:46:BD:6E:F7
Certificate issuer: /CN=7dcf341f51a88ce92457cca1e68b66ccb631fe02
Certificate serial: 018761445843362AB3083268C1C10670A3F5
Authority key identifier: 7D:CF:34:1F:51:A8:8C:E9:24:57:CC:A1:E6:8B:66:CC:B6:31:FE:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fc80H1GojOkkV8yh5otmzLYx_gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6d5355-3f65-4584-b6cf-84cf238084fc/1/1-anG84_e8rX2ZY64PjZ24Ea9bvc.roa
Signing time: Sat 08 Apr 2023 14:28:01 +0000
ROA not before: Sat 08 Apr 2023 14:28:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48108
IP address blocks: 31.222.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:61:44:58:43:36:2a:b3:08:32:68:c1:c1:06:70:a3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcf341f51a88ce92457cca1e68b66ccb631fe02
Validity
Not Before: Apr 8 14:28:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9a9c6f38fdef2b5f6658eb83e3676e046bd6ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:19:7c:35:a7:62:ec:ee:2a:0a:1c:ed:b8:95:
89:7d:26:19:72:7f:43:c0:70:c7:5e:4e:2b:79:af:
bd:94:ca:3e:c8:f1:d5:92:30:51:a9:9d:5a:93:7c:
a5:28:7c:9c:0c:67:bb:cc:32:f1:ee:fd:98:9f:1a:
c4:57:37:35:8d:9b:ed:b5:ae:57:05:02:c4:ab:ae:
5c:f3:10:b8:49:cf:73:5d:1e:50:64:dd:05:7c:b8:
d6:a4:d1:2d:ee:a6:e4:af:dc:7a:59:c1:2f:b6:a6:
cd:22:81:e2:c0:51:81:6f:10:3f:72:1b:51:fd:aa:
e1:7b:d0:52:37:2e:5f:df:71:cd:62:ad:8b:ea:e2:
18:f0:0d:31:5b:fa:fa:55:ba:53:4b:77:44:cc:1d:
49:81:d4:08:4f:b8:0e:e6:22:18:a3:19:09:d4:a9:
2e:c6:36:9e:0a:98:20:19:d4:0a:c8:31:3f:8b:6a:
09:ec:a1:78:ee:ec:29:62:1e:6f:60:8f:7b:50:30:
5d:1f:6b:46:9d:cf:94:2a:12:3a:a5:12:b5:29:f4:
06:51:da:d6:5f:16:71:e7:ac:d7:59:96:d2:fd:93:
2b:84:6b:40:b2:5a:3f:2f:17:70:48:6c:37:c9:4a:
93:06:0c:f3:db:ec:58:b9:9b:e0:c6:86:fe:1d:0d:
7d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A9:C6:F3:8F:DE:F2:B5:F6:65:8E:B8:3E:36:76:E0:46:BD:6E:F7
X509v3 Authority Key Identifier:
keyid:7D:CF:34:1F:51:A8:8C:E9:24:57:CC:A1:E6:8B:66:CC:B6:31:FE:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc80H1GojOkkV8yh5otmzLYx_gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6d5355-3f65-4584-b6cf-84cf238084fc/1/1-anG84_e8rX2ZY64PjZ24Ea9bvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6d5355-3f65-4584-b6cf-84cf238084fc/1/fc80H1GojOkkV8yh5otmzLYx_gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.227.0/24
Signature Algorithm: sha256WithRSAEncryption
19:c6:47:cf:7a:91:df:be:8d:1f:b9:af:2d:22:98:f8:8b:ed:
98:b5:e5:95:42:68:d3:0f:72:fb:df:15:b6:e2:13:ad:cd:9b:
52:64:3a:58:8a:bb:63:1b:b7:a1:cc:9d:a0:17:99:57:aa:03:
84:c0:b8:d4:1b:12:55:48:34:b5:ba:0b:6f:f5:73:59:04:81:
80:c4:18:43:c5:2d:d6:0f:d0:2c:c0:ab:8e:a8:c4:03:18:5a:
45:98:68:07:68:03:94:9d:97:84:46:3a:4e:84:c2:cf:c7:87:
83:d0:33:d9:e5:8b:10:51:ae:dd:2b:1e:15:40:4e:f3:96:72:
29:fb:14:d8:1a:cf:ca:ca:fa:74:fb:77:a2:ce:55:09:a8:e6:
12:9f:db:8b:00:04:1d:f6:46:1e:e1:ad:ab:bb:64:df:57:4e:
95:51:51:d8:27:a3:a1:22:d4:ae:ba:86:74:b9:05:89:06:3a:
ba:b8:61:c7:21:6f:bd:aa:33:41:f2:34:b8:ae:9c:ce:4b:5d:
74:42:14:c6:8e:12:83:c3:c4:f1:20:b8:38:5c:0d:92:37:88:
fd:0c:96:c9:3d:81:91:9d:d4:ca:83:fe:6d:18:7e:0c:0e:0b:
6c:c3:74:af:e4:17:25:63:04:6c:cf:95:5e:9e:e3:54:16:07:
78:80:dc:21
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYdhRFhDNiqzCDJowcEGcKP1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkY2YzNDFmNTFhODhjZTkyNDU3Y2NhMWU2OGI2NmNjYjYz
MWZlMDIwHhcNMjMwNDA4MTQyODAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWE5YzZmMzhmZGVmMmI1ZjY2NThlYjgzZTM2NzZlMDQ2YmQ2ZWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBl8Nadi7O4qChztuJWJfSYZcn9D
wHDHXk4rea+9lMo+yPHVkjBRqZ1ak3ylKHycDGe7zDLx7v2YnxrEVzc1jZvtta5X
BQLEq65c8xC4Sc9zXR5QZN0FfLjWpNEt7qbkr9x6WcEvtqbNIoHiwFGBbxA/chtR
/arhe9BSNy5f33HNYq2L6uIY8A0xW/r6VbpTS3dEzB1JgdQIT7gO5iIYoxkJ1Kku
xjaeCpggGdQKyDE/i2oJ7KF47uwpYh5vYI97UDBdH2tGnc+UKhI6pRK1KfQGUdrW
XxZx56zXWZbS/ZMrhGtAslo/LxdwSGw3yUqTBgzz2+xYuZvgxob+HQ191wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPmpxvOP3vK19mWOuD42duBGvW73MB8GA1UdIwQY
MBaAFH3PNB9RqIzpJFfMoeaLZsy2Mf4CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmM4MEgxR29qT2trVjh5aDVvdG16TFl4X2dJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82ZDUzNTUtM2Y2NS00NTg0LWI2Y2Yt
ODRjZjIzODA4NGZjLzEvMS1hbkc4NF9lOHJYMlpZNjRQaloyNEVhOWJ2Yy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGEvNmQ1MzU1LTNmNjUtNDU4NC1iNmNmLTg0Y2YyMzgwODRm
Yy8xL2ZjODBIMUdvak9ra1Y4eWg1b3RtekxZeF9nSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB/e4zAN
BgkqhkiG9w0BAQsFAAOCAQEAGcZHz3qR376NH7mvLSKY+IvtmLXllUJo0w9y+98V
tuITrc2bUmQ6WIq7Yxu3ocydoBeZV6oDhMC41BsSVUg0tboLb/VzWQSBgMQYQ8Ut
1g/QLMCrjqjEAxhaRZhoB2gDlJ2XhEY6ToTCz8eHg9Az2eWLEFGu3SseFUBO85Zy
KfsU2BrPysr6dPt3os5VCajmEp/biwAEHfZGHuGtq7tk31dOlVFR2CejoSLUrrqG
dLkFiQY6urhhxyFvvaozQfI0uK6czktddEIUxo4Sg8PE8SC4OFwNkjeI/QyWyT2B
kZ3UyoP+bRh+DA4LbMN0r+QXJWMEbM+VXp7jVBYHeIDcIQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:17 2025 by rpki-client