Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/aRPkkZjlSUt1Uo6AJux_Zi8TKZM.roa
File: aRPkkZjlSUt1Uo6AJux_Zi8TKZM.roa (raw, json)
Hash identifier: LoM2/IlDbM8kjl9GhkeI/Q+gHIJx0se3VX1Wcccnv0k=
Subject key identifier: 69:13:E4:91:98:E5:49:4B:75:52:8E:80:26:EC:7F:66:2F:13:29:93
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0186A68219780C244FFA27E7EEB1D76896B7
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/aRPkkZjlSUt1Uo6AJux_Zi8TKZM.roa
Signing time: Fri 03 Mar 2023 08:06:29 +0000
ROA not before: Fri 03 Mar 2023 08:06:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12302
IP address blocks: 31.14.34.0/24 maxlen: 24
89.45.44.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a6:82:19:78:0c:24:4f:fa:27:e7:ee:b1:d7:68:96:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Mar 3 08:06:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6913e49198e5494b75528e8026ec7f662f132993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1e:7a:dd:b4:0b:c9:04:95:00:06:1e:48:36:
c0:9b:73:31:3b:29:18:fd:1a:4f:6d:4c:9b:ab:90:
94:f7:84:c7:42:ab:0c:3a:27:52:bf:23:4f:e9:f5:
74:c2:72:cd:5f:c5:66:3b:9d:ce:2e:4f:7b:f8:7c:
56:e1:7c:0d:5a:13:fa:93:b9:70:49:cc:02:c0:06:
fd:48:ec:98:60:96:ae:65:ec:df:70:29:fe:81:ec:
32:9d:f7:82:93:ce:52:de:60:be:78:c1:79:74:31:
40:c1:57:78:0c:d7:dc:5a:73:2d:6c:64:15:89:9e:
92:47:71:0b:27:3d:65:42:b3:79:8d:e0:8f:52:6e:
88:df:87:f9:a8:bd:5b:4d:52:90:38:7d:dc:b7:60:
f1:44:db:73:6d:fb:c4:4f:ab:fc:5a:11:59:20:b4:
76:94:0d:1e:fe:94:90:81:3d:cf:38:dc:af:27:ef:
0e:dd:00:73:73:eb:4e:cd:44:49:aa:0d:20:9e:7b:
3d:ee:12:bb:c3:d1:fb:3c:a3:ce:f1:80:84:9c:80:
6d:7f:0d:3c:bc:38:91:7c:58:8a:f8:36:91:60:8d:
92:eb:56:61:f1:c6:f6:48:f4:27:e4:b8:d5:20:c4:
74:ef:af:c2:d7:c0:82:4a:0e:17:7f:bf:4a:b7:b5:
50:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:13:E4:91:98:E5:49:4B:75:52:8E:80:26:EC:7F:66:2F:13:29:93
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/aRPkkZjlSUt1Uo6AJux_Zi8TKZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.34.0/24
89.45.44.0/23
Signature Algorithm: sha256WithRSAEncryption
ed:58:1f:58:db:a2:e1:85:64:00:1c:cc:ba:af:35:fc:f2:ba:
56:17:c7:f8:17:83:b8:11:6c:54:c0:a3:8f:7c:83:94:e4:2d:
b6:4c:74:33:59:b6:a2:0c:6c:ca:9f:8e:70:89:d8:97:4b:22:
73:a7:5b:e7:39:a8:9e:66:57:b0:47:99:bc:e2:78:83:d3:0c:
80:cd:ba:7e:c1:fd:9f:99:dc:f9:08:98:78:b8:59:ba:ea:aa:
c3:ee:37:b2:43:50:d9:fc:59:1a:35:f9:7c:2e:3f:bb:38:62:
4d:1c:a8:79:74:b6:cd:d8:54:1f:de:89:28:ab:ff:82:da:9a:
26:18:b8:10:46:95:12:cc:18:cb:99:d7:8f:06:69:94:5d:5e:
2f:78:0b:e2:4a:05:43:14:db:83:05:40:01:14:ee:ec:d9:d2:
3c:a9:32:c7:ff:a6:6e:76:3a:23:97:4e:dd:11:c9:20:e3:c8:
18:03:7a:c2:fc:60:05:77:4c:ec:98:c4:d5:a0:8c:ea:02:fd:
a9:34:af:da:75:3b:ba:44:ee:8e:9b:f6:ba:b2:a4:80:9d:59:
fe:c2:dd:93:a9:d3:1a:7d:3f:c7:bc:b5:fd:56:1f:ac:24:15:
55:e2:89:08:5f:a5:3d:85:75:d2:5d:03:46:7d:29:1d:d1:1d:
7b:28:6a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:39 2025 by rpki-client