Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9466cb-b326-4b17-bba4-3c7ec8228099/1/oQinM-cQHNwTCvk44r42_T71kAg.roa
File: oQinM-cQHNwTCvk44r42_T71kAg.roa (raw, json)
Hash identifier: 6O3Or6naVg9DZrCW5Dj1rovNOoxk0yC7M8PvAnRAGKU=
Subject key identifier: A1:08:A7:33:E7:10:1C:DC:13:0A:F9:38:E2:BE:36:FD:3E:F5:90:08
Certificate issuer: /CN=3aed80118022ff10eeea5ecb38050035aee0eac7
Certificate serial: 01856D786D0236A2F8BC8A39700B3DB530BD
Authority key identifier: 3A:ED:80:11:80:22:FF:10:EE:EA:5E:CB:38:05:00:35:AE:E0:EA:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou2AEYAi_xDu6l7LOAUANa7g6sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9466cb-b326-4b17-bba4-3c7ec8228099/1/oQinM-cQHNwTCvk44r42_T71kAg.roa
Signing time: Sun 01 Jan 2023 13:14:46 +0000
ROA not before: Sun 01 Jan 2023 13:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59447
IP address blocks: 31.24.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:6d:02:36:a2:f8:bc:8a:39:70:0b:3d:b5:30:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aed80118022ff10eeea5ecb38050035aee0eac7
Validity
Not Before: Jan 1 13:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a108a733e7101cdc130af938e2be36fd3ef59008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:1e:2b:cf:d3:f5:4b:08:b9:43:38:74:c3:
95:17:8b:66:f0:25:ef:62:4f:0e:2b:2e:8e:93:e5:
26:d3:22:d0:05:11:90:5c:fb:7c:73:35:08:de:31:
2b:9a:cf:a6:14:19:ce:61:b9:f0:c4:79:e1:de:73:
c1:17:bb:9e:36:60:e2:03:13:1a:db:21:45:8a:29:
9f:bd:79:68:4c:84:af:4a:cd:55:ef:2e:02:21:4b:
1f:31:4b:53:20:47:c0:0b:4b:4c:1c:df:0d:d4:02:
1e:3b:1e:8a:b8:a4:30:a4:ac:4c:43:a7:ef:a1:76:
f5:51:a3:d2:15:7a:b3:8a:84:c6:3e:2b:37:24:ce:
fb:26:e0:e6:89:d0:42:13:4f:91:a8:35:16:a9:54:
35:89:f2:77:8c:da:49:e9:45:79:77:3b:bb:86:39:
b5:ce:6e:38:14:71:da:fb:d4:84:7e:7f:2c:81:1c:
fc:bc:d5:76:a7:90:1e:70:8d:c1:47:d0:42:33:e7:
df:56:3f:2d:e3:86:50:5f:d6:f6:c7:6c:3e:1d:2c:
7f:ab:6c:dd:4e:6c:e7:30:43:a1:fb:86:83:d4:5d:
9f:e8:19:bf:b7:dc:d5:4b:1f:c6:8a:0d:f8:ba:a3:
c0:57:8a:61:3d:63:bf:00:23:e0:fe:51:0c:e2:b5:
c4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:08:A7:33:E7:10:1C:DC:13:0A:F9:38:E2:BE:36:FD:3E:F5:90:08
X509v3 Authority Key Identifier:
keyid:3A:ED:80:11:80:22:FF:10:EE:EA:5E:CB:38:05:00:35:AE:E0:EA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou2AEYAi_xDu6l7LOAUANa7g6sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9466cb-b326-4b17-bba4-3c7ec8228099/1/oQinM-cQHNwTCvk44r42_T71kAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9466cb-b326-4b17-bba4-3c7ec8228099/1/Ou2AEYAi_xDu6l7LOAUANa7g6sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.82.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:61:90:40:bc:76:3e:4d:15:b6:74:05:6a:16:76:c8:03:60:
40:68:cf:e2:31:02:c1:4b:61:79:82:bd:4f:33:e7:00:5e:0f:
7c:5c:45:ab:df:a6:20:9d:ee:ae:94:dd:81:1d:87:97:0d:ca:
01:8f:37:23:de:16:96:b2:49:96:88:12:37:82:57:8e:57:51:
e7:c7:1e:a6:b6:0f:0b:57:60:c4:51:ac:0c:9a:11:b9:97:a6:
86:a9:63:a3:aa:90:00:22:cb:0c:a6:82:b6:0a:da:c6:5d:89:
ae:7b:58:a8:bb:c6:35:b5:46:3f:08:6a:8b:14:db:27:c2:3f:
95:9e:b4:de:f7:f8:5a:11:93:5d:cb:4e:a8:2f:5e:27:69:20:
d7:53:58:a7:7c:52:80:0b:10:5f:91:96:98:25:34:74:63:bc:
55:cb:e1:d7:55:09:a6:ed:17:93:b6:be:12:02:65:e8:8a:8d:
ab:59:26:26:ed:3a:9e:be:f6:b2:e1:82:e0:b8:6e:a6:03:6e:
d9:5d:a6:62:3e:d4:b9:fd:03:6b:b0:b0:f5:00:40:9f:b5:a6:
c7:f9:c4:e3:2b:c2:1b:e1:51:c8:58:7e:f7:af:86:5a:70:17:
ac:7b:6f:71:58:84:7b:d9:89:e7:9d:b4:b3:9b:5a:53:22:24:
be:19:24:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:46:21 2025 by rpki-client