Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/97484a-f001-46f2-b64b-b67abd87a24a/1/Iz2m9HSoebo-oLy4b4T1R-sgaso.roa
File: Iz2m9HSoebo-oLy4b4T1R-sgaso.roa (raw, json)
Hash identifier: Mlk+kxdLTPD+Toal5zEyvitKjMdyBe4yjmk1uCBRvQs=
Subject key identifier: 23:3D:A6:F4:74:A8:79:BA:3E:A0:BC:B8:6F:84:F5:47:EB:20:6A:CA
Certificate issuer: /CN=928ae806317c4c8224ed42f9bef04cee9f88c0e0
Certificate serial: 0186E4D5E3025943235A4CC5B0C0F1617370
Authority key identifier: 92:8A:E8:06:31:7C:4C:82:24:ED:42:F9:BE:F0:4C:EE:9F:88:C0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koroBjF8TIIk7UL5vvBM7p-IwOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/97484a-f001-46f2-b64b-b67abd87a24a/1/Iz2m9HSoebo-oLy4b4T1R-sgaso.roa
Signing time: Wed 15 Mar 2023 10:34:27 +0000
ROA not before: Wed 15 Mar 2023 10:34:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57030
IP address blocks: 46.31.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e4:d5:e3:02:59:43:23:5a:4c:c5:b0:c0:f1:61:73:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928ae806317c4c8224ed42f9bef04cee9f88c0e0
Validity
Not Before: Mar 15 10:34:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=233da6f474a879ba3ea0bcb86f84f547eb206aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4d:1d:2f:ff:99:74:18:19:ae:fd:d5:18:66:
c4:25:c1:85:6f:de:8a:5a:33:d7:82:89:de:84:85:
b7:30:67:69:e8:1b:09:d0:73:68:28:88:18:57:6a:
76:21:a2:18:b2:0a:af:7f:57:44:88:56:be:19:12:
d7:83:29:41:ca:3e:c0:8c:18:c1:17:24:2c:98:8c:
b3:5e:ef:b8:9d:1a:91:e0:4e:34:87:9e:2a:a1:7d:
64:bc:83:9b:60:dc:11:76:c6:6a:77:21:a8:79:7c:
f4:e8:a2:59:5a:69:8d:82:2b:3a:34:4b:f4:b7:a6:
a0:98:98:ca:d3:22:6e:83:4e:91:ec:aa:e7:f5:0b:
b5:f8:b3:e0:12:c2:cc:f4:02:fa:e2:92:61:94:8b:
2a:d6:a6:85:d6:64:b9:c6:3a:a2:dd:7d:9c:b6:8a:
92:b3:1a:de:cf:11:96:e0:5f:7e:28:f1:50:3b:d5:
23:e1:38:07:40:82:fc:5f:02:2f:19:76:84:d0:34:
84:1b:47:66:b0:29:15:53:00:e3:81:19:09:8d:b6:
1b:d1:85:f3:a9:22:b1:9d:d5:66:30:0a:f2:e2:d4:
56:16:c7:1e:83:5e:2e:44:fc:50:a0:af:7b:22:83:
93:49:dc:e3:83:bb:3a:32:ea:47:ec:03:18:59:d3:
ed:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3D:A6:F4:74:A8:79:BA:3E:A0:BC:B8:6F:84:F5:47:EB:20:6A:CA
X509v3 Authority Key Identifier:
keyid:92:8A:E8:06:31:7C:4C:82:24:ED:42:F9:BE:F0:4C:EE:9F:88:C0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koroBjF8TIIk7UL5vvBM7p-IwOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/97484a-f001-46f2-b64b-b67abd87a24a/1/Iz2m9HSoebo-oLy4b4T1R-sgaso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/97484a-f001-46f2-b64b-b67abd87a24a/1/koroBjF8TIIk7UL5vvBM7p-IwOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.23.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:0d:37:8b:9e:2f:97:49:0b:20:d1:1a:e8:d6:73:d6:12:35:
ad:1e:db:11:81:af:28:9c:63:13:c7:48:b6:72:31:29:c4:c3:
f3:00:a1:91:d6:93:34:e5:1c:35:03:58:1c:33:7d:35:81:93:
07:18:98:ad:51:6b:8a:11:96:9a:dd:b2:13:10:02:c8:9c:1a:
44:96:a8:69:55:60:9d:60:64:aa:5a:33:9a:16:22:3d:05:7d:
1a:59:3f:d9:3e:b4:1b:6a:9d:cb:6f:c7:64:f6:05:44:44:0b:
08:52:3b:f9:10:1f:c6:ea:65:45:84:ee:b3:1c:1b:03:d9:76:
69:39:7c:b6:1b:e5:11:cc:73:85:af:e3:f9:b3:d8:84:67:77:
c3:e8:0b:0e:26:c1:c7:14:4c:6f:a2:63:52:ea:9a:89:f6:1e:
b6:f4:e4:63:f8:7c:53:d9:32:07:28:7f:69:f9:64:5d:8d:ac:
f5:dc:b2:cd:46:5c:fe:94:42:fc:9d:50:de:e7:55:8d:cd:d5:
38:1c:10:04:4b:93:ca:58:89:f6:2d:3d:90:73:64:1b:e2:bf:
db:50:17:26:f0:7f:97:4f:65:51:8e:8c:54:02:36:9e:6f:87:
1c:6b:8d:8f:09:5b:5d:9d:fb:b7:f5:18:6c:68:f4:82:5e:58:
fd:87:54:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:11:16 2025 by rpki-client