Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/POCkGjUigRgU4HtHHjr-P5hWYnM.roa
File: POCkGjUigRgU4HtHHjr-P5hWYnM.roa (raw, json)
Hash identifier: 3CXtZYnqLldZsre6CV+ZUjC/6kb2UWf5+wNpJVw/ZLE=
Subject key identifier: 3C:E0:A4:1A:35:22:81:18:14:E0:7B:47:1E:3A:FE:3F:98:56:62:73
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 01856BAEA532E5869E01EEAE1AB607821386
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/POCkGjUigRgU4HtHHjr-P5hWYnM.roa
Signing time: Sun 01 Jan 2023 04:54:45 +0000
ROA not before: Sun 01 Jan 2023 04:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62579
IP address blocks: 31.6.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:a5:32:e5:86:9e:01:ee:ae:1a:b6:07:82:13:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Jan 1 04:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ce0a41a3522811814e07b471e3afe3f98566273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:28:a3:34:f2:f7:1b:21:c3:08:de:e6:cf:a9:
4f:79:cc:21:e0:f7:8a:ec:ec:43:f9:78:ea:55:25:
48:b0:74:eb:7e:9b:2e:c3:fc:5a:68:91:b1:95:e6:
d5:87:c4:71:2a:e5:c7:5c:fb:ff:32:05:e4:77:17:
c8:2c:d0:57:28:fe:55:aa:48:0e:25:c4:c9:26:6a:
f8:9d:02:08:9f:65:33:1c:6b:fa:89:d3:12:6a:94:
eb:09:8e:f8:c4:66:83:6c:d7:4f:44:5a:4e:fa:2c:
df:ee:41:09:2b:49:b4:99:c8:80:bb:0d:70:18:ae:
54:b9:2a:ce:fa:1e:47:16:e7:a7:57:d9:5f:7e:71:
53:02:bd:c7:08:30:24:5a:df:c5:fd:84:1a:c9:1b:
55:90:d3:33:b0:da:93:1a:39:1a:ad:f8:19:e2:41:
92:b1:4c:d2:b5:c5:2b:5a:bb:8a:de:53:d2:d5:4a:
ca:dd:16:74:ef:54:f6:01:2a:17:0d:75:f3:e8:f1:
ce:e3:d3:0c:1b:5a:84:85:82:7e:e7:cd:ff:bb:ca:
8f:c3:08:ff:a6:7c:08:a4:1a:28:92:30:51:76:51:
11:b3:df:c8:c8:20:e2:fc:70:36:26:ff:7f:1c:57:
fc:60:13:b6:e7:09:5b:c2:ee:ef:eb:a1:82:65:12:
7b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E0:A4:1A:35:22:81:18:14:E0:7B:47:1E:3A:FE:3F:98:56:62:73
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/POCkGjUigRgU4HtHHjr-P5hWYnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.34.0/24
Signature Algorithm: sha256WithRSAEncryption
57:89:cc:35:b4:45:15:59:e0:98:e6:56:3b:8c:f5:56:da:9c:
b1:24:79:52:5c:53:25:45:6d:42:21:d6:0d:2d:27:62:97:af:
aa:ba:2f:d1:4b:84:37:3e:80:2b:bb:34:74:c0:41:92:c7:85:
32:40:e7:a4:86:df:dd:d1:d0:b2:a4:39:89:4b:f8:55:54:6f:
12:51:bc:5a:54:64:d1:e4:c0:8a:de:6f:41:06:e9:56:ba:17:
1a:02:0d:94:fc:f2:a9:d9:92:4c:fc:72:78:17:23:8d:f2:ac:
4e:43:2e:c9:8d:5c:bf:b0:7d:f5:20:c3:05:22:08:11:a1:f4:
de:4d:fc:be:62:cb:97:8e:e1:99:57:58:9d:91:fb:cc:db:56:
eb:53:63:f9:80:38:93:fa:ca:1e:57:18:96:01:03:92:8c:cc:
36:ad:79:d5:e6:fe:c4:63:28:53:b3:0d:c1:d4:82:4d:83:fa:
43:45:c2:73:8b:cc:d8:a5:78:e1:af:c7:73:be:8f:55:a0:d2:
70:dc:f5:86:37:84:8b:de:c7:bf:1f:30:4d:a0:20:af:f9:bf:
70:f2:6f:08:13:ff:4b:f8:92:63:8d:b1:36:0d:53:14:c2:81:
3f:85:43:ef:de:bc:75:a7:c3:2a:70:f7:7d:29:0a:c8:d0:26:
62:d2:f2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:59 2025 by rpki-client