Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/cd9945-b467-466b-b83e-9aa75fb6bb04/1/1-RfruXybn75diFqH2jBXjyVTZAs.roa
File: 1-RfruXybn75diFqH2jBXjyVTZAs.roa (raw, json)
Hash identifier: WJPeGzcSj5hfCRfdidG+zlr2Yrk/kxlL8AvE0kZfQA8=
Subject key identifier: F9:17:EB:B9:7C:9B:9F:BE:5D:88:5A:87:DA:30:57:8F:25:53:64:0B
Certificate issuer: /CN=952341439355a1f69e3ae065c43726d1eff4796d
Certificate serial: 02392820
Authority key identifier: 95:23:41:43:93:55:A1:F6:9E:3A:E0:65:C4:37:26:D1:EF:F4:79:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSNBQ5NVofaeOuBlxDcm0e_0eW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/cd9945-b467-466b-b83e-9aa75fb6bb04/1/1-RfruXybn75diFqH2jBXjyVTZAs.roa
Signing time: Sat 01 Jan 2022 14:57:31 +0000
ROA not before: Sat 01 Jan 2022 14:57:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 31.40.204.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37300256 (0x2392820)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952341439355a1f69e3ae065c43726d1eff4796d
Validity
Not Before: Jan 1 14:57:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f917ebb97c9b9fbe5d885a87da30578f2553640b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:10:a1:ab:8a:fb:06:20:b2:d9:eb:81:80:ce:
78:78:02:74:a4:a0:fc:6a:dd:a1:24:74:19:b6:ae:
65:c7:d6:77:94:a2:31:13:cd:f5:07:53:b4:d1:07:
14:18:7d:bf:4a:3d:1a:0f:1e:d1:44:f7:87:ab:5e:
c3:cc:8d:33:f9:3b:ae:09:53:50:d8:63:05:f4:20:
22:cc:9e:e5:50:87:e5:94:20:3f:20:06:7b:cc:49:
44:42:60:27:c6:03:5e:58:af:e9:ce:59:9e:cf:34:
90:c9:00:00:27:df:f5:50:81:f8:f3:af:96:8e:3e:
de:a7:09:a5:21:5b:ca:d8:b2:f5:8e:19:8e:45:f7:
76:64:d8:5f:29:d8:68:7d:25:8a:f9:58:79:f7:36:
7c:8a:2a:79:f2:dd:0c:77:1b:12:14:10:52:db:19:
a8:5e:8c:b1:1a:18:33:1a:4d:6e:0c:fb:1b:e7:ac:
bf:6b:3c:c5:19:02:be:97:bd:6f:cc:84:98:40:42:
e6:54:8d:77:22:77:3c:85:ec:10:51:23:76:23:9d:
60:4e:24:86:b2:e4:c6:1a:b9:ab:3e:87:98:b2:7e:
1a:58:e2:d5:d5:c8:86:74:f5:40:0f:e5:a4:9a:87:
dd:4e:d7:a8:bc:17:1d:8b:0d:75:19:6f:2a:65:a9:
8d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:17:EB:B9:7C:9B:9F:BE:5D:88:5A:87:DA:30:57:8F:25:53:64:0B
X509v3 Authority Key Identifier:
keyid:95:23:41:43:93:55:A1:F6:9E:3A:E0:65:C4:37:26:D1:EF:F4:79:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSNBQ5NVofaeOuBlxDcm0e_0eW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cd9945-b467-466b-b83e-9aa75fb6bb04/1/1-RfruXybn75diFqH2jBXjyVTZAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cd9945-b467-466b-b83e-9aa75fb6bb04/1/lSNBQ5NVofaeOuBlxDcm0e_0eW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.204.0/22
Signature Algorithm: sha256WithRSAEncryption
05:d1:91:e1:4f:b5:e4:e6:d0:80:36:92:7e:f4:37:b7:c2:66:
18:a0:97:74:7b:ca:69:f2:da:20:ad:9a:c3:62:64:70:42:9c:
43:4b:55:70:83:c9:64:04:d6:3d:58:03:1f:5b:4a:f1:a2:cb:
d4:f2:0a:ef:0f:a4:42:b6:3c:cd:11:09:85:ef:67:22:7e:9e:
2f:1d:a5:79:57:b4:a3:0d:7d:ca:b4:9b:8c:6e:09:09:5d:56:
f5:56:dd:83:31:dc:c2:a4:38:2f:d4:75:e8:f5:fe:aa:0d:31:
21:a9:cc:a9:3c:97:2e:3c:e1:b8:de:a9:49:3d:cf:36:89:f5:
c2:d3:04:94:75:7f:c3:9e:be:4a:81:4e:31:b8:f9:a1:84:3a:
a4:a9:01:dc:47:6d:bc:53:ed:d7:ef:85:f9:9d:d6:9e:0f:68:
10:d2:cc:46:ea:ce:d1:f5:6a:47:a9:3d:b7:cc:03:1b:0d:b8:
22:a7:fa:04:24:10:18:8b:09:c1:41:d6:f2:49:fe:27:f4:23:
c7:b8:09:47:59:53:d1:40:a8:a8:0c:6f:8b:41:b0:11:d6:45:
36:34:4d:74:fc:79:28:cc:39:d6:e2:2c:15:0f:0e:cc:0a:60:
e2:37:8a:6f:fa:28:a6:3d:42:ea:9a:e8:42:02:48:61:4b:87:
2b:c2:46:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:00 2025 by rpki-client