Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/17a206-876e-42e9-bfc6-17ff1d8d737d/1/UHuxEbxFKpON0cPmz4PZ0LEzwg4.roa
File: UHuxEbxFKpON0cPmz4PZ0LEzwg4.roa (raw, json)
Hash identifier: Dmxd6dBwjL8UdmpiJMFG/3wcoFBxBr/HRzJaaBjG+Wo=
Subject key identifier: 50:7B:B1:11:BC:45:2A:93:8D:D1:C3:E6:CF:83:D9:D0:B1:33:C2:0E
Certificate issuer: /CN=420e4a9cb0195d436f78ed4a93831354abad50a9
Certificate serial: 0192E89BDBE3D0D2927D01D75FB3829824ED
Authority key identifier: 42:0E:4A:9C:B0:19:5D:43:6F:78:ED:4A:93:83:13:54:AB:AD:50:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qg5KnLAZXUNveO1Kk4MTVKutUKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/17a206-876e-42e9-bfc6-17ff1d8d737d/1/UHuxEbxFKpON0cPmz4PZ0LEzwg4.roa
Signing time: Fri 01 Nov 2024 16:43:01 +0000
ROA not before: Fri 01 Nov 2024 16:43:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.22.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e8:9b:db:e3:d0:d2:92:7d:01:d7:5f:b3:82:98:24:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420e4a9cb0195d436f78ed4a93831354abad50a9
Validity
Not Before: Nov 1 16:43:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=507bb111bc452a938dd1c3e6cf83d9d0b133c20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8d:af:3d:d9:c5:76:bd:13:38:22:55:70:c6:
93:2c:a6:47:b8:c5:f5:0f:0c:e1:60:15:55:f7:28:
9f:6d:86:b4:a2:3c:29:8b:d4:7d:83:6f:4e:5a:24:
a0:d8:01:9c:4d:47:21:82:b1:0a:91:31:7f:2d:94:
40:b3:a1:35:b9:6d:7e:48:aa:8b:f8:af:61:0f:0a:
5a:40:d5:fb:31:e1:24:c0:ef:ec:5f:8b:0d:13:01:
bf:fc:e6:93:ed:40:b5:1f:39:af:cf:97:37:15:38:
d9:69:17:7d:ac:0c:30:c2:a7:81:d8:60:76:83:8f:
3f:eb:82:c6:54:29:6a:a2:2f:22:d9:91:94:81:34:
1d:f0:50:21:70:0c:39:61:3e:ce:e4:3d:37:e7:e3:
79:d3:9e:b9:97:f5:3c:75:1c:0e:8e:b9:d5:06:dc:
c4:32:e3:b5:3f:5f:67:bf:f2:c1:f0:67:7c:b2:d3:
2c:64:c5:7c:4e:68:fb:fd:f7:de:67:cd:8b:cb:a8:
29:a9:08:53:54:54:16:0a:fe:51:35:71:81:2b:47:
53:c1:b9:32:d8:75:d7:34:a6:22:9f:21:3d:dd:76:
40:54:62:ba:1a:b2:84:fa:f7:b9:9c:a9:7c:98:f6:
a9:a4:e5:fe:fa:12:31:5c:f7:ac:6d:7a:d4:16:b9:
6f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7B:B1:11:BC:45:2A:93:8D:D1:C3:E6:CF:83:D9:D0:B1:33:C2:0E
X509v3 Authority Key Identifier:
keyid:42:0E:4A:9C:B0:19:5D:43:6F:78:ED:4A:93:83:13:54:AB:AD:50:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qg5KnLAZXUNveO1Kk4MTVKutUKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/17a206-876e-42e9-bfc6-17ff1d8d737d/1/UHuxEbxFKpON0cPmz4PZ0LEzwg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/17a206-876e-42e9-bfc6-17ff1d8d737d/1/Qg5KnLAZXUNveO1Kk4MTVKutUKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.104.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:19:c2:32:0f:2e:81:fe:23:f1:43:be:3a:23:e2:d1:f0:28:
9a:55:3c:6b:b3:4a:fa:60:e7:ca:48:87:7b:5c:ea:d4:56:d0:
bc:f1:9e:30:e8:74:1c:e1:d8:10:04:5b:23:bf:6b:b8:0d:51:
7b:16:af:19:ad:eb:25:9f:a4:ef:78:1e:10:6f:bf:21:d8:c6:
dc:9d:a5:52:87:f1:d3:98:9c:72:91:68:23:77:c9:98:28:ba:
60:f7:db:2b:cc:17:8b:23:bc:0d:94:e9:f4:6a:9d:88:89:36:
53:d9:f2:0f:46:06:e1:2b:7b:8f:e3:10:c5:20:51:27:0c:97:
19:63:14:11:68:ce:22:56:17:4e:2a:32:41:da:68:bc:14:ff:
c6:cf:fa:58:25:df:d1:ce:39:1b:5b:cc:1c:69:0b:ae:c5:9e:
2d:f3:8e:d6:6d:6d:5b:f8:d3:71:d5:34:00:e3:62:9a:de:48:
f0:e2:88:91:81:7c:75:8c:ed:6e:3b:7f:a1:c9:5a:5b:4b:ae:
ec:7f:fb:90:b1:a4:d9:bd:c4:ec:74:98:68:83:a3:44:eb:a7:
0b:21:73:b0:29:c0:71:dd:ef:8a:1e:3a:a1:b7:ed:cd:87:1a:
e1:63:5f:35:0a:e4:bc:cb:e0:09:7a:58:44:34:1c:2f:94:78:
17:6a:30:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 00:08:28 2024 by rpki-client on console-ams.rpki-client.org