Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5de147-7282-4c61-a7f1-a19a091bb82e/1/1-Cmlh2uhK0D7pJFleX1MkY9SSNY.roa
File: 1-Cmlh2uhK0D7pJFleX1MkY9SSNY.roa (raw, json)
Hash identifier: gV2hB/B0YcynqGwMbwJNPuz5eheMcWgJZRa5tUXAUsM=
Subject key identifier: F8:29:A5:87:6B:A1:2B:40:FB:A4:91:65:79:7D:4C:91:8F:52:48:D6
Certificate issuer: /CN=977a2994cdd32d9accfad211c32ea930b57d45f4
Certificate serial: 0189654AC3E4F234D71C0AD66F8F51E3408E
Authority key identifier: 97:7A:29:94:CD:D3:2D:9A:CC:FA:D2:11:C3:2E:A9:30:B5:7D:45:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3oplM3TLZrM-tIRwy6pMLV9RfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5de147-7282-4c61-a7f1-a19a091bb82e/1/1-Cmlh2uhK0D7pJFleX1MkY9SSNY.roa
Signing time: Mon 17 Jul 2023 19:19:05 +0000
ROA not before: Mon 17 Jul 2023 19:19:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 31.216.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:c3:e4:f2:34:d7:1c:0a:d6:6f:8f:51:e3:40:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977a2994cdd32d9accfad211c32ea930b57d45f4
Validity
Not Before: Jul 17 19:19:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f829a5876ba12b40fba49165797d4c918f5248d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:69:70:90:1c:66:4d:63:d7:22:e8:e6:55:3b:
79:8e:6e:a0:6b:9b:b1:f9:d8:da:f8:bf:53:02:a5:
d9:ed:90:88:48:29:6a:9c:ec:91:34:64:4e:e8:f7:
f3:46:79:91:6e:98:99:06:10:53:6f:db:49:47:d6:
af:68:c4:71:27:bd:71:ac:64:7d:2b:55:85:74:cd:
1b:0d:10:8b:9c:77:6f:92:bc:05:3b:c7:6d:4b:53:
12:42:81:2a:e1:b6:a9:9f:af:a3:9f:21:da:db:aa:
8c:28:09:16:af:cc:f2:83:18:d8:bc:16:e4:2f:7b:
b8:a4:08:04:9c:dd:37:1b:14:7c:28:b7:83:cb:98:
59:b6:de:19:5f:31:5f:91:c9:c3:5f:8e:b2:9e:2b:
8d:a1:bc:64:e9:6c:83:73:71:a6:8c:83:65:aa:c3:
90:c1:f0:d4:b2:1a:69:f6:c7:e5:2c:4b:2d:c0:92:
d9:49:d8:0c:24:5c:bf:94:c1:c0:a7:65:54:ff:33:
87:13:b1:3f:56:f8:b4:53:5a:31:77:e8:73:9a:68:
84:ae:54:e3:55:9f:2b:71:59:e3:c9:52:0f:b9:61:
9d:a4:84:75:e7:95:18:61:ae:3d:6b:58:6d:c6:89:
be:60:9a:38:f7:32:1b:3f:27:32:e3:7c:43:d0:c6:
a2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:29:A5:87:6B:A1:2B:40:FB:A4:91:65:79:7D:4C:91:8F:52:48:D6
X509v3 Authority Key Identifier:
keyid:97:7A:29:94:CD:D3:2D:9A:CC:FA:D2:11:C3:2E:A9:30:B5:7D:45:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3oplM3TLZrM-tIRwy6pMLV9RfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5de147-7282-4c61-a7f1-a19a091bb82e/1/1-Cmlh2uhK0D7pJFleX1MkY9SSNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5de147-7282-4c61-a7f1-a19a091bb82e/1/l3oplM3TLZrM-tIRwy6pMLV9RfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.60.0/24
Signature Algorithm: sha256WithRSAEncryption
68:30:fa:be:b4:99:73:16:40:8d:d3:dd:0e:eb:24:16:72:1a:
4a:98:5d:10:21:75:aa:47:c4:f4:21:d6:9d:34:e8:d9:99:70:
21:84:41:76:00:cb:1a:6b:e7:f1:61:d6:90:ff:31:52:79:23:
83:3f:00:39:7a:9e:3d:48:b2:c5:04:53:03:4c:95:ef:a8:6a:
38:1f:cc:64:f3:60:07:25:f8:ef:3e:a2:6b:dc:5f:c0:36:a4:
71:45:ed:42:76:dd:49:fd:22:2f:42:67:31:b1:0c:2a:ca:ba:
63:23:05:02:7e:43:ec:75:12:1f:4e:93:69:ea:27:81:e8:85:
cc:1a:2b:48:41:75:99:ac:3a:0a:76:21:d2:74:9b:0a:0f:f2:
43:d6:77:ed:98:48:91:6a:2e:83:a3:bb:23:56:61:41:f8:11:
1d:60:e8:ce:a3:e8:0b:28:dc:6c:f9:4b:c3:44:59:7e:df:65:
9e:4b:c5:82:4c:3f:71:05:bc:af:a1:b1:4e:21:17:a7:53:9e:
50:a6:59:ab:6a:5f:9c:8b:42:30:9e:fd:a8:20:19:ef:76:ed:
21:fa:36:d9:19:da:1f:05:93:a5:7f:e6:eb:cf:22:08:29:fb:
f3:8b:77:b2:fb:50:cc:85:98:70:5a:d5:6c:b7:36:24:73:de:
87:d3:50:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:27 2024 by rpki-client on console-ams.rpki-client.org