Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/hLie8jGJGQ6WcF1-TOqE8DirgqM.roa
File: hLie8jGJGQ6WcF1-TOqE8DirgqM.roa (raw, json)
Hash identifier: QtlRffcnnlv1kw2qjwWF9yNzYpRJFJJw4URcDaTXxNQ=
Subject key identifier: 84:B8:9E:F2:31:89:19:0E:96:70:5D:7E:4C:EA:84:F0:38:AB:82:A3
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 01856BAEABF67C86B562AB669AD019236FF1
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/hLie8jGJGQ6WcF1-TOqE8DirgqM.roa
Signing time: Sun 01 Jan 2023 04:54:47 +0000
ROA not before: Sun 01 Jan 2023 04:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212335
IP address blocks: 31.6.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:ab:f6:7c:86:b5:62:ab:66:9a:d0:19:23:6f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Jan 1 04:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84b89ef23189190e96705d7e4cea84f038ab82a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e2:aa:0f:dc:96:e5:19:c5:58:fe:11:0e:91:
28:51:d3:5f:8d:0c:cd:7e:97:80:9d:be:b2:18:5d:
c4:45:fe:da:46:7c:28:74:44:5f:28:6a:39:23:25:
d4:88:09:c6:c8:3f:72:72:4c:63:b7:e0:c0:96:12:
3b:2e:99:6c:22:ff:a8:15:56:6f:b3:b7:88:e2:84:
87:35:68:87:89:2e:1d:d6:61:79:04:bb:e9:bc:d7:
ac:fb:7c:3c:4a:c9:34:95:d7:e3:0c:af:df:22:c2:
48:45:25:64:90:e7:7c:93:2d:b4:d8:e3:fb:97:79:
08:db:e3:75:09:52:d1:28:f3:fb:07:03:b2:ef:55:
d6:29:f7:04:c2:e5:03:00:dc:5d:5e:dc:79:f2:09:
0d:55:4d:ba:4e:05:92:d9:e1:94:d0:dd:44:05:e0:
f4:61:e1:5f:23:2c:94:37:e8:d1:c7:3c:d2:42:fc:
e9:d0:0f:be:27:a9:e1:21:e5:7b:99:a2:db:39:47:
86:71:fd:25:3f:49:01:25:d4:05:f8:5a:75:c2:68:
5a:53:ea:92:cd:83:4d:6f:73:7e:bd:39:b5:ef:c7:
5a:18:07:5e:22:c2:c4:9d:f5:87:66:ac:d6:a8:85:
59:07:6f:9a:08:02:f4:25:fa:ed:e1:33:8a:b7:aa:
c3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B8:9E:F2:31:89:19:0E:96:70:5D:7E:4C:EA:84:F0:38:AB:82:A3
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/hLie8jGJGQ6WcF1-TOqE8DirgqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.43.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:97:67:7a:dd:64:67:1e:d6:fe:06:7e:a5:7c:93:6a:91:8b:
ba:0a:b7:82:a3:78:e3:a5:76:ee:30:c5:55:52:8d:d6:31:de:
29:1d:12:b9:cb:00:76:54:58:f3:2a:e3:3d:ff:c1:ed:0a:50:
35:10:72:aa:31:6e:c2:3a:9f:8d:b8:53:b2:a2:b9:90:bb:b6:
13:73:c1:ef:74:a5:d0:f1:fc:c5:83:78:e2:1b:a3:0d:9b:ee:
7e:66:93:3f:c6:41:91:ca:8c:e7:9e:c3:0c:d6:c3:47:17:b5:
35:8c:5e:49:dc:20:a1:e7:90:d2:92:0b:fc:e7:de:b0:cf:5c:
83:d2:e6:64:51:90:5e:ce:4b:da:7d:6a:af:f7:fa:ce:ce:dd:
50:f2:a4:a5:81:1d:82:a1:fb:b6:f6:25:78:6a:9e:a8:8c:16:
17:43:94:e1:1b:d6:47:0e:8e:38:95:c8:7e:f7:2b:17:13:cf:
ef:06:0d:13:97:cd:39:03:12:f5:bf:da:3f:0b:04:01:4f:21:
ac:34:b0:31:35:9a:75:f4:99:1b:27:2e:86:cb:eb:bf:b4:80:
67:dc:a4:92:af:5e:54:d8:a8:b6:2a:be:12:63:8e:48:fd:1c:
ac:05:05:32:0a:86:10:31:d4:a3:c9:8b:8a:52:1d:81:63:03:
af:08:44:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:53 2025 by rpki-client