Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9466cb-b326-4b17-bba4-3c7ec8228099/1/HIzqZU7S43ESxEfhOtq6AQBe-uw.roa
File: HIzqZU7S43ESxEfhOtq6AQBe-uw.roa (raw, json)
Hash identifier: GE6D5+EOH+ZCOs1qxXhSZEhdVJbX24Zuyy7pqDB8uPk=
Subject key identifier: 1C:8C:EA:65:4E:D2:E3:71:12:C4:47:E1:3A:DA:BA:01:00:5E:FA:EC
Certificate issuer: /CN=3aed80118022ff10eeea5ecb38050035aee0eac7
Certificate serial: 018CC6B83E5F6CD64F5BA64CC0D1093FFCEC
Authority key identifier: 3A:ED:80:11:80:22:FF:10:EE:EA:5E:CB:38:05:00:35:AE:E0:EA:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou2AEYAi_xDu6l7LOAUANa7g6sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9466cb-b326-4b17-bba4-3c7ec8228099/1/HIzqZU7S43ESxEfhOtq6AQBe-uw.roa
Signing time: Mon 01 Jan 2024 20:30:12 +0000
ROA not before: Mon 01 Jan 2024 20:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20454
IP address blocks: 31.24.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:3e:5f:6c:d6:4f:5b:a6:4c:c0:d1:09:3f:fc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aed80118022ff10eeea5ecb38050035aee0eac7
Validity
Not Before: Jan 1 20:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c8cea654ed2e37112c447e13adaba01005efaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:25:35:6a:b9:82:ae:2b:87:ba:cc:9a:84:ac:
c5:18:ce:ac:7e:40:69:3c:6d:d2:7e:61:53:b0:ab:
a2:67:09:f6:b9:c6:df:e0:2b:ee:e2:55:b4:b3:4a:
7a:92:53:88:c3:23:bf:6a:11:1b:43:86:23:50:23:
c0:37:a3:c1:02:86:51:82:43:8c:43:4d:ad:4c:2c:
33:8f:ae:57:87:98:d9:f2:22:8b:cb:ae:60:2d:6c:
44:22:14:43:7c:e6:2f:76:e4:47:98:32:59:fb:f8:
d5:41:bb:e5:00:18:2a:a4:4b:8a:2c:8b:57:3b:b2:
e3:82:20:ed:29:13:c9:0d:c8:fb:86:a8:a0:df:a0:
0b:8f:52:b4:0c:c0:60:2c:f7:49:6e:c0:f7:4a:ad:
6e:41:07:2c:d3:f8:90:63:4c:16:d4:1a:ce:db:06:
cc:91:53:41:62:c1:7e:38:e2:5f:df:a0:84:b0:12:
fb:97:b0:96:8c:52:8c:dc:63:33:80:24:49:b7:90:
82:47:d2:ca:f6:0e:c0:b4:ea:ac:4a:be:f8:7b:83:
95:16:0b:a9:51:91:e7:1e:9e:5a:1b:97:34:85:65:
fc:9d:9b:17:8d:25:06:28:46:ea:1c:6b:7c:75:52:
13:18:d7:ae:59:2c:25:b1:8e:b9:2a:30:39:9c:b2:
e6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8C:EA:65:4E:D2:E3:71:12:C4:47:E1:3A:DA:BA:01:00:5E:FA:EC
X509v3 Authority Key Identifier:
keyid:3A:ED:80:11:80:22:FF:10:EE:EA:5E:CB:38:05:00:35:AE:E0:EA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou2AEYAi_xDu6l7LOAUANa7g6sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9466cb-b326-4b17-bba4-3c7ec8228099/1/HIzqZU7S43ESxEfhOtq6AQBe-uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9466cb-b326-4b17-bba4-3c7ec8228099/1/Ou2AEYAi_xDu6l7LOAUANa7g6sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.82.0/24
Signature Algorithm: sha256WithRSAEncryption
80:20:d1:96:ef:40:16:37:7a:11:a0:c0:95:ba:4a:1e:3b:63:
e4:56:64:77:94:cd:16:23:37:78:a0:c3:01:36:53:26:05:c7:
bd:7c:23:04:e9:95:f1:1d:f9:43:b5:62:81:c1:f7:ed:26:f2:
d8:dd:b0:44:e6:7c:8a:ce:8a:56:9c:42:62:09:89:ba:a0:94:
cb:b2:20:f0:32:5d:50:5c:f7:aa:c1:4c:38:d9:f9:39:ac:ec:
71:81:a4:cb:ed:17:63:ce:51:54:46:b9:ae:a4:c4:93:8d:82:
d7:93:7e:3c:9e:76:66:c8:79:5f:81:d1:ce:ba:c7:e3:3b:68:
16:a1:bc:f3:ee:1c:4e:ed:87:55:42:85:d3:62:2b:37:da:4b:
3f:c6:19:c6:d3:03:7c:75:9c:26:a7:41:3f:17:18:77:27:1e:
06:21:29:c8:dc:40:b4:d3:05:15:16:f0:66:0d:3d:72:b6:94:
97:23:b2:1f:36:1d:a1:0a:b0:f5:0e:fa:59:fa:1c:d3:e0:3a:
c3:65:7c:e7:56:dd:82:83:46:c3:94:37:1d:c1:73:2c:6d:be:
45:4c:80:f9:32:d7:55:58:ca:4f:8f:5d:8c:5f:e7:c4:9c:cb:
b1:c5:e4:35:27:92:9e:ae:f7:3c:6f:43:9e:24:c4:60:f2:bb:
a1:45:ed:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:54:09 2025 by rpki-client