Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/30f39a-b95f-47e2-9cdb-e819dca2b09b/1/9PVtbJjOWAWM9Zh41_M4vXyeRTM.roa
File: 9PVtbJjOWAWM9Zh41_M4vXyeRTM.roa (raw, json)
Hash identifier: outNx9yO85WtjctXziVBc9SKE50nhC1bywseEkEUqGc=
Subject key identifier: F4:F5:6D:6C:98:CE:58:05:8C:F5:98:78:D7:F3:38:BD:7C:9E:45:33
Certificate issuer: /CN=39076109a47e196e2572917ed0a2562018e2b5ff
Certificate serial: 01896471BE970930CBF4E0856A347A6BAE55
Authority key identifier: 39:07:61:09:A4:7E:19:6E:25:72:91:7E:D0:A2:56:20:18:E2:B5:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQdhCaR-GW4lcpF-0KJWIBjitf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/30f39a-b95f-47e2-9cdb-e819dca2b09b/1/9PVtbJjOWAWM9Zh41_M4vXyeRTM.roa
Signing time: Mon 17 Jul 2023 15:22:03 +0000
ROA not before: Mon 17 Jul 2023 15:22:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 31.216.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:71:be:97:09:30:cb:f4:e0:85:6a:34:7a:6b:ae:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39076109a47e196e2572917ed0a2562018e2b5ff
Validity
Not Before: Jul 17 15:22:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4f56d6c98ce58058cf59878d7f338bd7c9e4533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b4:37:c1:d0:77:2b:73:95:43:6f:90:15:e5:
cf:d2:ad:0d:47:dc:f5:1e:a6:17:a9:f5:b1:0f:99:
b0:bf:89:f0:ca:b9:e4:b9:c2:50:30:8b:d4:34:55:
11:98:bc:19:77:67:92:66:21:7f:cb:5a:d4:e4:2b:
cc:49:d0:aa:d4:c7:20:fd:73:1e:56:50:80:5c:48:
4e:71:2d:36:8f:82:78:a2:98:59:a2:83:9d:1d:60:
35:7b:50:96:19:43:9c:9c:9a:39:e8:63:bc:32:ab:
28:49:d2:eb:5f:2d:c0:af:48:5f:0a:63:a4:0f:2e:
48:79:7a:4c:fb:6d:da:f0:17:ce:07:b3:af:b3:4b:
9b:e6:83:72:97:4b:24:ee:8b:d8:e4:a2:e3:d0:42:
78:aa:93:2e:7e:2e:dd:1c:d3:67:e4:d3:ab:5f:3c:
8f:13:d2:9c:86:10:e4:9b:94:47:c3:f2:59:11:48:
fb:cd:3b:51:14:0e:30:74:cc:d3:9e:c3:1b:63:9f:
17:af:86:5e:58:92:b3:90:9c:86:18:a0:a0:d3:21:
c9:e2:ff:6b:fc:38:d1:bb:cf:e5:94:1c:49:27:92:
a8:89:62:79:5f:f1:ad:1f:c9:5f:bf:e9:48:9d:c3:
a7:1e:d5:ad:e9:2d:fa:35:81:61:d3:1d:be:70:3d:
95:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F5:6D:6C:98:CE:58:05:8C:F5:98:78:D7:F3:38:BD:7C:9E:45:33
X509v3 Authority Key Identifier:
keyid:39:07:61:09:A4:7E:19:6E:25:72:91:7E:D0:A2:56:20:18:E2:B5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQdhCaR-GW4lcpF-0KJWIBjitf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/30f39a-b95f-47e2-9cdb-e819dca2b09b/1/9PVtbJjOWAWM9Zh41_M4vXyeRTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/30f39a-b95f-47e2-9cdb-e819dca2b09b/1/OQdhCaR-GW4lcpF-0KJWIBjitf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.57.0/24
Signature Algorithm: sha256WithRSAEncryption
08:24:a3:f6:b8:cd:86:10:d3:2d:79:03:50:0a:02:37:2f:ec:
18:7f:a1:c6:9f:cd:0e:6f:73:c5:a4:0b:ea:6f:e5:11:8f:17:
14:b3:f9:ee:7f:1c:6f:9b:6b:34:97:b7:62:25:8a:e5:72:42:
6c:57:ba:a6:85:9a:6b:0a:60:97:2f:c9:da:22:ae:bc:93:a9:
dd:f2:cc:2e:0b:40:a4:af:29:70:3c:90:2a:e6:13:4e:d4:20:
15:f0:70:d1:ec:bf:a6:9f:8e:8a:29:9d:6e:aa:58:58:dc:d1:
3c:78:fa:4d:70:6e:5d:0b:0c:cd:b7:a0:c9:1b:4d:b1:1b:d2:
09:ea:e2:b0:b6:c5:e2:d3:2e:17:a3:fc:ae:d2:7e:91:f4:7b:
1f:e7:2d:11:0f:2e:2b:f6:c4:ac:b5:c2:66:d5:a1:7b:94:0f:
8b:e6:1b:19:4c:81:db:df:49:4b:1a:2c:e1:61:da:f9:6b:c2:
ae:a1:5a:b9:99:ed:b3:e6:7e:9b:10:51:8b:44:2e:43:9a:46:
7f:62:e5:bc:30:ec:8e:0b:3f:6a:05:7b:a8:33:31:8d:50:99:
80:e4:be:62:43:cd:db:c2:96:d9:e5:05:10:c5:de:a9:f9:eb:
6d:1c:df:d5:8b:5e:7f:b2:4c:b3:61:7d:5b:60:8b:78:3d:d1:
77:d1:d5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:00 2025 by rpki-client