Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9466cb-b326-4b17-bba4-3c7ec8228099/1/nOJdxEuB1t7PqRB69o9spKswE-I.roa
File: nOJdxEuB1t7PqRB69o9spKswE-I.roa (raw, json)
Hash identifier: 40sOcgoSkVyer9qPFfoSICH0ykY52sjh6KXts2Lps8s=
Subject key identifier: 9C:E2:5D:C4:4B:81:D6:DE:CF:A9:10:7A:F6:8F:6C:A4:AB:30:13:E2
Certificate issuer: /CN=3aed80118022ff10eeea5ecb38050035aee0eac7
Certificate serial: 018BA901E81FD97307CBB16A36898B5C5011
Authority key identifier: 3A:ED:80:11:80:22:FF:10:EE:EA:5E:CB:38:05:00:35:AE:E0:EA:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou2AEYAi_xDu6l7LOAUANa7g6sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9466cb-b326-4b17-bba4-3c7ec8228099/1/nOJdxEuB1t7PqRB69o9spKswE-I.roa
Signing time: Tue 07 Nov 2023 08:59:16 +0000
ROA not before: Tue 07 Nov 2023 08:59:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20454
IP address blocks: 31.24.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a9:01:e8:1f:d9:73:07:cb:b1:6a:36:89:8b:5c:50:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aed80118022ff10eeea5ecb38050035aee0eac7
Validity
Not Before: Nov 7 08:59:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ce25dc44b81d6decfa9107af68f6ca4ab3013e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8c:e3:da:54:07:41:27:45:b4:30:c0:22:5d:
6c:d6:e1:b9:c2:04:c7:80:95:8f:6e:26:69:e6:8e:
f7:c9:e7:4a:87:2d:a5:09:53:95:7f:5c:6e:61:9b:
25:8f:45:89:b1:3d:b0:ed:8f:0b:f6:c8:00:7a:95:
f6:ba:bd:56:e1:29:f9:b5:fc:ad:9d:9d:d1:97:24:
de:45:fe:a0:2d:d2:0b:a5:2e:98:91:bd:0b:96:8a:
18:5b:0e:40:c1:62:77:6f:6f:e4:44:69:d3:ee:c3:
68:35:b5:42:90:34:36:63:27:6a:82:a6:2a:73:f5:
f3:7a:80:3c:98:00:9e:11:74:ac:c1:a6:32:b2:30:
45:d9:0e:ba:16:f4:6e:f7:40:14:35:38:e0:17:ae:
6c:32:bf:a0:74:9b:13:1a:2e:31:fc:fd:55:7e:c6:
20:1c:bf:69:27:74:e3:ab:80:de:49:74:e9:23:d8:
8f:8d:47:e4:38:82:27:c2:96:45:b4:9a:84:02:ea:
1d:cf:f5:d7:47:41:3a:8c:b9:96:16:9b:85:e3:ce:
6d:8e:48:51:d7:5c:ab:ab:20:c7:45:b3:64:af:09:
c6:99:58:1e:3d:67:98:24:22:84:19:96:32:73:6a:
62:81:e4:69:eb:65:66:9b:d7:d9:3c:5a:96:00:f6:
9b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E2:5D:C4:4B:81:D6:DE:CF:A9:10:7A:F6:8F:6C:A4:AB:30:13:E2
X509v3 Authority Key Identifier:
keyid:3A:ED:80:11:80:22:FF:10:EE:EA:5E:CB:38:05:00:35:AE:E0:EA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou2AEYAi_xDu6l7LOAUANa7g6sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9466cb-b326-4b17-bba4-3c7ec8228099/1/nOJdxEuB1t7PqRB69o9spKswE-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9466cb-b326-4b17-bba4-3c7ec8228099/1/Ou2AEYAi_xDu6l7LOAUANa7g6sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.82.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:4e:ae:a3:ec:bd:de:c0:e9:b4:d1:17:b0:f3:a4:4a:9a:63:
1c:cb:b6:50:b1:82:97:bd:04:45:59:07:2f:ec:dc:cc:d6:c0:
7e:f0:38:4f:15:1a:2b:b2:e4:4b:48:c7:56:5f:73:d1:e2:0d:
3e:dc:21:a0:0f:a8:52:52:d5:e1:e5:e7:46:cc:72:5d:d8:5f:
ab:2b:25:f6:5a:34:8d:9d:b7:4d:a5:62:67:90:31:d4:fe:3d:
c9:08:0f:6e:db:80:5c:ee:2e:2a:93:8b:56:6f:45:5a:f5:96:
cd:5d:50:10:e7:c7:ac:2b:ce:d1:2c:65:43:0b:fe:8d:cc:ca:
77:be:4b:47:34:3d:1b:96:60:00:f3:07:a2:1c:22:77:4b:93:
a2:2c:75:a7:ea:0a:cb:62:54:ae:b7:da:60:98:9b:49:56:af:
a2:67:b8:e8:b2:74:b9:df:d8:ae:38:f2:44:4e:5c:5b:60:ae:
6c:af:b6:16:de:ca:04:b3:bf:c0:b9:fd:fb:31:a7:59:7d:f2:
56:64:36:b9:b6:0f:78:2e:a8:de:f2:a9:62:d3:4e:98:37:21:
87:a2:8b:83:4f:f4:6a:57:d3:57:f0:7d:e2:99:27:41:ec:b0:
b8:8d:ff:4d:14:a0:28:10:ac:66:72:37:ff:e1:1b:70:0f:77:
3a:bf:62:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:46:24 2025 by rpki-client