Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/95d525-ac33-40bf-a6ca-ae155fd98d47/1/_iFBCY8BYNnMeX6BB8iGyn_DCB8.roa
File: _iFBCY8BYNnMeX6BB8iGyn_DCB8.roa (raw, json)
Hash identifier: B2ZHxPzExYBxl2tcGgFVp8tw0M2wEWL2cPTJPTr7dys=
Subject key identifier: FE:21:41:09:8F:01:60:D9:CC:79:7E:81:07:C8:86:CA:7F:C3:08:1F
Certificate issuer: /CN=683123baf78e3d765e1450f83d94647cebcce233
Certificate serial: 0188303D770FECB45760D25640F07EE3A13F
Authority key identifier: 68:31:23:BA:F7:8E:3D:76:5E:14:50:F8:3D:94:64:7C:EB:CC:E2:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDEjuveOPXZeFFD4PZRkfOvM4jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/95d525-ac33-40bf-a6ca-ae155fd98d47/1/_iFBCY8BYNnMeX6BB8iGyn_DCB8.roa
Signing time: Thu 18 May 2023 19:01:54 +0000
ROA not before: Thu 18 May 2023 19:01:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202656
IP address blocks: 31.41.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:30:3d:77:0f:ec:b4:57:60:d2:56:40:f0:7e:e3:a1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=683123baf78e3d765e1450f83d94647cebcce233
Validity
Not Before: May 18 19:01:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe2141098f0160d9cc797e8107c886ca7fc3081f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:86:3e:c2:fc:65:ee:f0:41:f1:d4:90:5f:4a:
fe:53:60:b1:9d:48:b3:4e:63:59:7c:86:88:2f:d7:
55:59:c3:56:42:60:a6:2d:aa:be:20:6a:54:f4:95:
90:3a:3e:52:f9:21:49:5d:a2:af:e0:23:58:d6:12:
a8:6e:5c:e5:b3:53:46:6e:14:fb:3a:27:f8:b3:0b:
77:4a:95:01:99:38:6f:0d:d7:93:48:2c:3e:6d:a1:
d6:b5:c3:91:2e:f3:d7:2c:c3:7b:9b:e0:d8:50:40:
08:57:2a:60:3c:52:c5:af:4e:cb:5a:a3:9f:d9:80:
17:20:cb:12:33:01:b2:2c:b3:0a:d9:2b:56:63:82:
b2:34:46:bc:bf:44:e3:53:fa:2f:4b:05:6f:2d:e7:
68:d8:ca:85:09:6b:44:48:be:24:8d:15:f1:4a:f2:
49:3c:c8:72:99:3f:bc:2e:20:fb:b4:8b:1a:5e:f8:
cd:0e:b5:a4:ae:50:dc:15:60:ee:40:74:18:cb:b8:
91:de:73:85:e4:58:c9:0d:18:5f:83:25:af:99:3b:
d9:c8:c6:57:de:21:08:75:ff:b7:49:40:a0:b0:09:
0f:18:22:6f:2f:70:45:e8:3a:f5:83:f7:55:c1:8f:
08:bf:03:02:ef:46:de:db:dd:bd:2d:ca:89:0d:b9:
5f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:21:41:09:8F:01:60:D9:CC:79:7E:81:07:C8:86:CA:7F:C3:08:1F
X509v3 Authority Key Identifier:
keyid:68:31:23:BA:F7:8E:3D:76:5E:14:50:F8:3D:94:64:7C:EB:CC:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDEjuveOPXZeFFD4PZRkfOvM4jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/95d525-ac33-40bf-a6ca-ae155fd98d47/1/_iFBCY8BYNnMeX6BB8iGyn_DCB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/95d525-ac33-40bf-a6ca-ae155fd98d47/1/aDEjuveOPXZeFFD4PZRkfOvM4jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.252.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:98:e1:37:f4:3d:54:78:34:cc:00:7b:83:c6:23:03:39:ec:
77:79:10:81:82:20:86:5a:aa:d1:a9:e9:d2:e7:d7:c5:de:6e:
ba:0e:c6:ea:d6:79:2a:e6:df:a0:c5:f7:07:23:10:dd:aa:7a:
84:df:df:09:26:76:1a:9c:1b:ce:5e:da:47:f2:fc:dd:d7:2e:
e8:df:6b:64:ba:cf:1e:d3:ca:e1:62:d6:22:3d:2a:d3:c6:6b:
fb:d9:99:e5:0c:4c:fc:03:20:24:ae:62:e1:fd:e2:e6:a2:de:
78:3a:3d:22:b1:58:1d:ed:a0:93:0a:c4:a4:55:10:ce:3e:f6:
31:7f:af:0c:7c:48:99:92:d4:4e:1e:78:f1:86:81:36:fa:7f:
aa:b3:ea:50:e2:7a:16:f4:68:19:09:0e:e7:08:2f:9e:f1:b4:
aa:d4:7d:92:bc:ac:af:f0:b2:a8:0c:0e:7b:54:88:0e:71:41:
06:f8:3e:18:5f:c8:e3:b9:d6:0c:7e:0d:d6:cc:71:f9:93:3c:
d0:53:cd:75:b4:d9:d0:a5:b3:60:36:86:9d:95:a3:5e:21:47:
88:b1:50:65:86:96:89:89:58:a1:1f:00:63:b7:c9:8f:4b:24:
7e:32:8e:d9:92:0d:aa:c1:03:97:e2:27:d2:22:ed:30:c9:0d:
6c:8d:8a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:51 2025 by rpki-client