Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b7eb91-1d64-4d74-b092-43bab7ff200a/1/VBas97LJQpgGripOiuUU2Dq7i1I.roa
File: VBas97LJQpgGripOiuUU2Dq7i1I.roa (raw, json)
Hash identifier: i7cT/A8xmYpa7qrsj9qIaX447QMPASo6UeXzuHfdmXA=
Subject key identifier: 54:16:AC:F7:B2:C9:42:98:06:AE:2A:4E:8A:E5:14:D8:3A:BB:8B:52
Certificate issuer: /CN=dd659982fb20ab00fa5a25ca882d638e7e032254
Certificate serial: 018964C089E4F42791E9CFA469FBFB00CB0A
Authority key identifier: DD:65:99:82:FB:20:AB:00:FA:5A:25:CA:88:2D:63:8E:7E:03:22:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WWZgvsgqwD6WiXKiC1jjn4DIlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b7eb91-1d64-4d74-b092-43bab7ff200a/1/VBas97LJQpgGripOiuUU2Dq7i1I.roa
Signing time: Mon 17 Jul 2023 16:48:07 +0000
ROA not before: Mon 17 Jul 2023 16:48:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 31.222.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:89:e4:f4:27:91:e9:cf:a4:69:fb:fb:00:cb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd659982fb20ab00fa5a25ca882d638e7e032254
Validity
Not Before: Jul 17 16:48:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5416acf7b2c9429806ae2a4e8ae514d83abb8b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c9:9b:9f:95:d1:2b:65:d3:1b:32:a5:db:53:
7a:df:c1:1f:14:f9:e9:de:01:a1:58:1a:e1:2d:e4:
fc:1a:8a:76:f9:c8:51:9b:2c:78:e9:72:e7:46:c8:
45:43:05:ec:c3:77:e0:fe:ed:f8:78:5d:83:55:57:
34:70:64:07:a4:a3:5c:89:81:b7:22:20:5b:ad:61:
25:0f:5a:35:6f:63:ab:c3:f2:36:4b:57:0f:03:2b:
8d:b9:6a:47:49:97:46:25:02:e6:8e:79:11:bc:f8:
78:45:82:22:94:f6:12:19:b2:4b:f8:3b:21:58:8b:
bb:b8:ed:81:18:62:30:9a:b5:91:4e:fc:da:1e:a9:
63:83:82:10:57:06:6a:59:be:86:ee:7e:43:c1:0c:
e2:43:2c:63:d8:29:fa:42:bd:aa:8b:a8:3b:66:d4:
96:e1:56:90:af:5e:3c:19:93:18:80:cf:78:22:f7:
c0:74:75:c4:60:d8:9a:7a:96:0d:52:fc:f7:14:ec:
45:a4:c6:eb:b7:56:a1:0c:28:e2:20:4f:cb:6f:b4:
b1:49:f8:3f:9e:ed:bb:7e:ec:b1:32:72:a5:b6:42:
45:bd:b2:8b:59:e2:9c:16:07:65:41:37:67:a5:06:
a7:d4:87:e1:24:9d:cf:db:a7:93:dd:fa:8d:0b:43:
3e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:16:AC:F7:B2:C9:42:98:06:AE:2A:4E:8A:E5:14:D8:3A:BB:8B:52
X509v3 Authority Key Identifier:
keyid:DD:65:99:82:FB:20:AB:00:FA:5A:25:CA:88:2D:63:8E:7E:03:22:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WWZgvsgqwD6WiXKiC1jjn4DIlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b7eb91-1d64-4d74-b092-43bab7ff200a/1/VBas97LJQpgGripOiuUU2Dq7i1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b7eb91-1d64-4d74-b092-43bab7ff200a/1/3WWZgvsgqwD6WiXKiC1jjn4DIlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.245.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:6f:8a:dd:f4:cc:33:30:c0:f1:a6:b5:4e:7e:7a:46:99:53:
d9:32:24:7a:f2:6e:31:f1:b1:61:ba:ee:b6:82:10:68:81:d6:
77:75:47:a1:c3:dc:48:4c:27:37:8a:07:52:2f:9d:cd:a2:45:
d8:c1:8d:a8:22:a3:3b:6f:ce:c6:c9:35:79:44:87:df:8a:4e:
d6:f2:16:04:4c:34:4e:2d:c7:2a:5b:d3:19:9f:d0:e3:c1:94:
97:8b:3b:34:e2:37:b6:d6:29:3c:72:2a:59:a9:0a:94:f4:d5:
d9:7c:56:bc:14:bf:4a:0d:30:f5:3c:e2:bc:fd:75:e1:b5:da:
b8:17:bc:c7:73:7e:46:d4:a3:7d:13:82:89:d9:f3:5d:e7:81:
43:63:5a:9b:63:20:69:d6:b7:df:c5:8e:f3:71:ab:5d:c4:73:
da:52:69:7e:0b:bc:d7:fb:ca:5e:e7:d7:18:26:56:02:1e:e6:
44:96:d3:6c:a7:de:4b:97:3b:32:68:ab:8f:e4:fb:16:48:0b:
03:22:8e:ef:4e:ad:87:77:ca:b9:f0:98:00:78:ef:81:30:c7:
57:17:57:53:ba:c6:ee:fb:32:9e:87:27:c2:81:ca:fe:da:f1:
32:82:14:b1:5e:49:c3:cc:d7:f9:5f:d5:6b:20:01:fe:cb:53:
da:87:1a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:03:49 2025 by rpki-client