Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/A_DhnpN0T6rZjZzNWI19uQ2xmI8.roa
File: A_DhnpN0T6rZjZzNWI19uQ2xmI8.roa (raw, json)
Hash identifier: FWT5J5qB07LH9lv7k0ldBLS5Vx0/VcCEh8rZT2lD3j8=
Subject key identifier: 03:F0:E1:9E:93:74:4F:AA:D9:8D:9C:CD:58:8D:7D:B9:0D:B1:98:8F
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369B81FDA2BF913537C29A8E6555D8D
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/A_DhnpN0T6rZjZzNWI19uQ2xmI8.roa
Signing time: Wed 01 Jan 2025 19:48:38 +0000
ROA not before: Wed 01 Jan 2025 19:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204156
IP address blocks: 31.14.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:b8:1f:da:2b:f9:13:53:7c:29:a8:e6:55:5d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03f0e19e93744faad98d9ccd588d7db90db1988f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f8:e6:af:69:21:a5:58:c5:67:29:9f:04:4f:
77:28:8b:30:bd:cd:2e:e5:fc:33:31:6e:69:a2:c2:
3e:c8:46:f3:31:84:c5:35:24:b8:85:83:71:1a:43:
8d:f2:0f:41:c2:39:17:87:f5:8d:7e:ec:42:7d:ef:
d8:5f:b5:f8:87:6f:09:a9:c3:dc:56:2b:7e:02:1f:
7d:09:66:b2:a9:0d:3c:52:1c:f3:a8:8b:ec:25:bf:
0f:85:69:69:ea:26:cb:c6:63:ac:65:37:71:3d:41:
88:86:5b:47:b6:58:b0:eb:a7:e7:29:22:92:d9:bf:
45:04:b6:6e:f3:64:44:17:bb:b9:cb:09:54:57:c0:
6b:4f:bd:2b:62:c1:1c:db:1e:ad:31:36:05:2e:da:
a0:46:ba:48:dd:2b:19:8d:b1:0b:68:b5:f8:a7:da:
d7:53:0e:3d:40:8f:a5:72:1b:c2:d7:b3:f6:56:e2:
b9:05:61:44:0b:97:ed:98:1b:6f:7f:f0:7b:aa:d4:
50:3c:ee:a2:e9:81:dd:88:3e:51:fc:a5:4a:5f:b9:
f3:5f:2e:b2:4b:c1:c5:65:07:f9:7e:dc:33:ff:be:
f4:2e:05:c3:fd:eb:79:c7:2b:97:49:3e:9a:c8:54:
1d:69:52:f8:2c:c7:79:52:c4:5b:ac:62:9e:df:1d:
85:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F0:E1:9E:93:74:4F:AA:D9:8D:9C:CD:58:8D:7D:B9:0D:B1:98:8F
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/A_DhnpN0T6rZjZzNWI19uQ2xmI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.34.0/24
Signature Algorithm: sha256WithRSAEncryption
36:24:cb:d2:6c:e1:52:3a:8c:db:5b:1b:22:a9:97:84:79:22:
05:41:0d:04:8b:c6:35:4d:19:76:9c:2b:6f:d0:a2:2e:33:46:
9e:66:7d:ab:33:8d:da:8d:c3:cb:1a:a4:71:c5:1d:42:32:1e:
c9:3d:06:4e:2c:97:79:8a:f1:0f:89:0a:0b:cf:7e:d0:b4:50:
82:ed:91:1a:72:28:e3:ea:49:94:ae:34:96:81:55:b0:bd:4c:
74:1a:c4:ef:c5:58:0e:9e:57:9e:f2:13:d8:92:2f:d5:1d:c9:
27:bf:f4:fd:23:be:c3:f8:ef:9b:a9:ed:bb:4d:64:6a:03:19:
50:fc:67:f7:11:9a:b6:2b:f1:09:5f:d1:31:3e:fa:6b:3d:41:
c3:c1:35:79:82:e1:a6:3c:80:96:fa:f8:f1:7e:9e:81:96:62:
44:39:a0:a6:13:92:c7:a5:f7:c6:bf:41:14:35:29:3f:45:3a:
f0:05:1c:1f:03:4a:9c:b9:cc:d6:2e:d8:99:1e:aa:61:39:28:
7c:a0:99:8a:a9:94:c0:6f:58:5f:10:15:5b:28:ee:9a:aa:2e:
5d:39:b5:d0:ef:d7:55:66:c9:43:d6:29:f2:18:35:57:ba:6f:
76:21:af:06:e9:8b:7e:8c:5f:5d:f9:12:e3:3c:90:a2:d7:d9:
fe:7d:63:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:47 2025 by rpki-client