Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/oth93J-bnaEmM94FkM1P39Ic6gY.roa
File: oth93J-bnaEmM94FkM1P39Ic6gY.roa (raw, json)
Hash identifier: zYPcemefDEWugwU6F0K5Uk6GGXuxEr2bzGvXiyG3bpY=
Subject key identifier: A2:D8:7D:DC:9F:9B:9D:A1:26:33:DE:05:90:CD:4F:DF:D2:1C:EA:06
Certificate issuer: /CN=2437736e6f55900adbfb0456c4164f67b453ac8f
Certificate serial: 018ABC0D37976A8662A636309FD7B3DDA114
Authority key identifier: 24:37:73:6E:6F:55:90:0A:DB:FB:04:56:C4:16:4F:67:B4:53:AC:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDdzbm9VkArb-wRWxBZPZ7RTrI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/oth93J-bnaEmM94FkM1P39Ic6gY.roa
Signing time: Fri 22 Sep 2023 08:41:37 +0000
ROA not before: Fri 22 Sep 2023 08:41:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212744
IP address blocks: 31.41.33.0/24 maxlen: 24
2a12:4040::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bc:0d:37:97:6a:86:62:a6:36:30:9f:d7:b3:dd:a1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2437736e6f55900adbfb0456c4164f67b453ac8f
Validity
Not Before: Sep 22 08:41:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2d87ddc9f9b9da12633de0590cd4fdfd21cea06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fc:72:1e:89:bd:fd:be:87:5d:9b:67:3c:df:
b9:ed:60:13:f5:fa:c5:14:5c:00:29:2c:4a:c7:d4:
2f:3f:40:65:8a:8e:05:de:66:87:84:37:ec:56:70:
d9:af:94:3e:c2:0d:22:fb:01:bc:47:95:3e:bc:61:
b6:28:0d:83:4a:a0:77:dd:09:7f:b9:3c:0f:56:38:
f9:7a:f9:9c:8d:5d:42:0d:c0:f6:8a:5b:61:74:b5:
cb:1d:98:dd:0a:7f:9e:dd:54:76:51:35:d4:c3:77:
0b:59:62:16:bb:5e:5e:2a:c7:3b:2a:e6:24:4f:f7:
41:ed:bf:cd:f7:63:5f:d8:2c:50:70:e2:25:cd:3a:
89:1b:4f:e2:ca:ef:0b:59:3a:43:fb:aa:1b:29:3d:
ae:72:b7:e4:a4:28:c2:85:d7:6f:51:ec:4a:84:23:
d9:79:e8:c4:2c:a4:2e:1b:ec:da:53:3d:93:5a:86:
1e:bd:11:1b:61:72:2e:22:f7:bb:2e:45:5f:13:6b:
8c:a8:3b:e4:f4:cf:5c:78:4c:de:32:96:ea:a0:16:
dd:41:7a:de:fb:29:0e:c6:1f:b6:0b:c6:85:0a:9d:
df:fa:07:b4:07:7a:f5:cb:2d:b5:b9:9f:44:ca:06:
20:30:a7:b7:e8:e2:f4:33:da:d1:d9:23:75:48:f2:
99:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D8:7D:DC:9F:9B:9D:A1:26:33:DE:05:90:CD:4F:DF:D2:1C:EA:06
X509v3 Authority Key Identifier:
keyid:24:37:73:6E:6F:55:90:0A:DB:FB:04:56:C4:16:4F:67:B4:53:AC:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDdzbm9VkArb-wRWxBZPZ7RTrI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/oth93J-bnaEmM94FkM1P39Ic6gY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/JDdzbm9VkArb-wRWxBZPZ7RTrI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.33.0/24
IPv6:
2a12:4040::/29
Signature Algorithm: sha256WithRSAEncryption
79:73:e8:78:31:c7:a2:e1:8c:b8:60:c1:ff:87:19:43:56:82:
e0:6f:67:88:1d:9e:f1:d2:f0:b0:7a:5f:81:72:af:f1:23:35:
7b:07:64:ea:ff:65:4c:f8:51:5d:83:f8:3e:df:5e:8b:02:5c:
7f:1c:36:46:b9:d8:91:0d:69:3d:e7:15:87:c4:92:db:09:40:
c1:92:30:74:52:a7:14:a8:8f:bd:48:a9:d4:b3:6b:9d:c8:6d:
82:7f:6f:1f:d4:44:04:8e:dc:d0:68:92:d5:1e:46:be:51:1b:
f8:df:53:df:20:3f:31:19:73:55:7c:d7:61:33:e9:35:c4:23:
b5:a6:3b:f8:97:21:63:b3:05:d6:61:2b:ea:48:78:f1:8d:a4:
b2:bd:63:f2:c7:fe:0d:9a:e4:a3:5d:6a:1c:20:2c:73:98:ba:
18:28:8b:1f:37:ac:d0:4a:27:73:2f:3b:8b:d2:6b:89:68:97:
a3:92:61:0d:22:11:9b:92:c0:1a:82:f3:d1:1d:1e:d8:ef:4a:
2e:8a:cf:e0:36:7a:1e:fe:70:f6:6f:f6:ab:b8:a7:d7:f5:34:
92:6e:dc:ce:55:64:b5:76:a8:f7:16:de:3b:f4:ac:10:65:40:
51:18:47:f0:ab:21:f3:4e:70:c1:0b:cb:af:a3:06:5f:40:82:
31:a7:3a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:16 2025 by rpki-client