Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/97XCMoH7Bymy3RwEm4QE1cbd5lM.roa
File: 97XCMoH7Bymy3RwEm4QE1cbd5lM.roa (raw, json)
Hash identifier: +iulh5yz1xejXakk43ABrxL96mi0tQF+aPyUarHaf2c=
Subject key identifier: F7:B5:C2:32:81:FB:07:29:B2:DD:1C:04:9B:84:04:D5:C6:DD:E6:53
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01856C1CA1258CAA5B17C32BDE7920733FFF
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/97XCMoH7Bymy3RwEm4QE1cbd5lM.roa
Signing time: Sun 01 Jan 2023 06:54:53 +0000
ROA not before: Sun 01 Jan 2023 06:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35384
IP address blocks: 31.41.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:a1:25:8c:aa:5b:17:c3:2b:de:79:20:73:3f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 06:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7b5c23281fb0729b2dd1c049b8404d5c6dde653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:95:20:03:9a:48:60:b3:6e:61:bd:3b:4e:
b0:4a:4c:50:ff:84:14:46:1c:38:3e:f6:7a:7c:9d:
f5:7d:d7:5d:7c:c0:06:2e:07:bd:aa:ef:d7:d1:1a:
b1:3b:e6:a4:78:59:82:a3:89:82:fa:b0:b5:9d:1c:
2a:b9:c9:f9:34:b2:ab:3a:eb:b8:0d:ff:85:bb:a9:
6e:97:83:f8:4e:7c:91:ff:5f:a5:d9:a9:7b:ee:72:
1f:7b:c6:dc:13:52:7b:8c:e9:79:25:a6:c7:3d:8e:
0a:6f:17:a4:cc:d2:81:3f:c8:cd:55:a6:4d:d7:c7:
06:0e:a8:54:f8:66:3e:e7:46:e8:eb:9c:0a:d8:db:
9e:76:c7:be:99:e5:71:2b:0d:15:d4:e7:08:94:4c:
e9:68:f8:a1:12:3f:70:84:3b:20:4a:75:74:de:c0:
a1:69:b7:67:aa:25:85:a5:03:14:57:15:18:ab:b8:
c9:0e:ff:50:23:ab:63:36:8b:63:d7:fb:bd:f7:97:
cc:07:15:74:78:99:db:e3:64:f5:23:e7:50:ca:0e:
19:fd:49:34:87:22:2e:1d:16:07:a3:17:7a:0b:54:
f8:0c:3d:b6:d8:60:15:e6:ad:6c:73:32:69:23:66:
36:0a:58:43:f3:9d:b2:1d:c7:7e:e9:9d:40:e0:18:
5d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B5:C2:32:81:FB:07:29:B2:DD:1C:04:9B:84:04:D5:C6:DD:E6:53
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/97XCMoH7Bymy3RwEm4QE1cbd5lM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.34.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:80:d0:09:92:df:b0:bf:12:b5:ec:da:db:23:ad:6d:c4:99:
49:1d:76:ba:a9:a6:69:5b:b4:a6:37:6e:48:1e:1e:ff:8e:30:
82:e8:d4:07:1e:b4:79:7a:cb:d0:e5:ce:3f:98:da:27:32:8b:
33:c6:57:6f:94:bb:7a:9b:16:3c:89:df:35:b7:af:b9:0e:f6:
09:5a:9b:32:11:2a:d2:00:0e:8a:5e:94:33:88:e3:39:fa:00:
6f:47:37:f3:78:cd:ca:06:11:8a:60:34:01:c9:d9:dc:11:8f:
70:a5:e6:b4:5f:f1:3e:b4:3e:ac:b1:ae:fd:a5:40:3c:11:16:
69:d4:f2:db:f4:53:aa:a8:ae:d9:ea:0e:89:2e:3c:34:10:f1:
10:7b:f9:b5:d3:f4:f8:4b:42:70:34:64:62:67:4a:71:4a:43:
79:ee:ae:db:8d:e5:03:d9:a4:1a:54:c8:d4:73:a0:71:6d:fc:
7d:d1:6d:bd:cb:2b:3d:af:b3:79:0a:7d:31:dc:41:2f:eb:6e:
a4:34:33:81:72:69:f6:af:99:66:05:41:5c:7a:1b:b1:1c:31:
99:b9:36:22:96:e8:45:02:02:3e:f1:07:f3:0c:77:5e:70:33:
96:b7:66:db:74:99:5b:43:a1:9d:8c:d1:dc:3a:0c:9d:ef:c7:
ae:83:26:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:54 2025 by rpki-client