Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/qF9sUnfMTQqk2TpPrz3Z9V5XfZw.roa
File: qF9sUnfMTQqk2TpPrz3Z9V5XfZw.roa (raw, json)
Hash identifier: Nh4V28p4Qj0GdQfMqI7d+A0cs1TCrsPj3gCNFnEa/ho=
Subject key identifier: A8:5F:6C:52:77:CC:4D:0A:A4:D9:3A:4F:AF:3D:D9:F5:5E:57:7D:9C
Certificate issuer: /CN=2437736e6f55900adbfb0456c4164f67b453ac8f
Certificate serial: 018CC49377BEEA99679829FC518D159E5FFF
Authority key identifier: 24:37:73:6E:6F:55:90:0A:DB:FB:04:56:C4:16:4F:67:B4:53:AC:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDdzbm9VkArb-wRWxBZPZ7RTrI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/qF9sUnfMTQqk2TpPrz3Z9V5XfZw.roa
Signing time: Mon 01 Jan 2024 10:30:47 +0000
ROA not before: Mon 01 Jan 2024 10:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48014
IP address blocks: 31.41.33.0/24 maxlen: 24
2a12:4047::/32 maxlen: 32
2a12:4040::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:77:be:ea:99:67:98:29:fc:51:8d:15:9e:5f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2437736e6f55900adbfb0456c4164f67b453ac8f
Validity
Not Before: Jan 1 10:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a85f6c5277cc4d0aa4d93a4faf3dd9f55e577d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fa:81:c5:58:14:d9:61:73:41:30:96:25:7d:
b8:40:87:25:1c:c4:78:1e:a8:71:8e:35:14:d1:3e:
3a:b9:cb:f4:9b:09:05:f4:2b:8f:2b:64:0c:7e:7a:
6f:d9:f1:ad:89:aa:ed:f9:73:b7:c1:37:1e:1f:08:
30:77:de:98:0a:73:ac:fa:b8:a4:fc:f7:62:84:63:
ef:26:50:79:87:fd:62:6e:52:bd:37:6f:40:93:57:
7a:59:62:8d:4a:9a:6d:0a:f3:8b:7b:9e:84:bc:7a:
e1:17:1c:a9:ee:28:d5:47:a7:81:f2:a9:56:1d:0b:
52:7b:b7:3c:e5:67:13:80:0c:27:e9:90:f9:7a:8e:
af:5c:36:3f:15:dd:f2:c4:a9:b3:77:77:83:17:e4:
ec:df:ae:f2:98:93:b7:3d:44:59:59:f6:7d:60:7b:
67:51:8e:90:c7:10:fd:ba:81:24:dd:a5:b1:3d:98:
96:47:a6:a7:32:31:90:71:e6:a0:6f:01:9a:2a:a9:
3d:f0:1b:86:f1:45:7c:84:59:08:97:a7:1e:bf:00:
3b:cc:60:fd:46:77:7b:a8:18:cb:20:40:d5:cf:0d:
5e:8d:93:b6:99:c5:ab:7b:16:63:d2:36:01:bf:c4:
a5:b4:98:1e:44:f7:66:37:0d:00:1f:14:50:05:b8:
9b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5F:6C:52:77:CC:4D:0A:A4:D9:3A:4F:AF:3D:D9:F5:5E:57:7D:9C
X509v3 Authority Key Identifier:
keyid:24:37:73:6E:6F:55:90:0A:DB:FB:04:56:C4:16:4F:67:B4:53:AC:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDdzbm9VkArb-wRWxBZPZ7RTrI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/qF9sUnfMTQqk2TpPrz3Z9V5XfZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/JDdzbm9VkArb-wRWxBZPZ7RTrI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.33.0/24
IPv6:
2a12:4040::/29
Signature Algorithm: sha256WithRSAEncryption
90:8b:06:20:84:87:2a:78:f4:5f:0d:5c:b7:ee:6e:0e:9d:c5:
90:39:4d:91:0a:6c:87:ed:88:48:78:ee:f8:e6:dd:d4:d7:3c:
75:cb:12:e8:9a:e0:5c:d1:ec:52:16:3e:e3:a5:3e:c1:58:59:
33:6a:0b:23:bb:e2:6a:45:e6:2e:c4:54:03:62:af:63:f2:a4:
ba:1c:a3:da:e2:72:83:0a:4b:35:d6:52:32:b5:cb:95:19:9c:
95:26:73:95:bf:bb:09:03:b8:f4:cf:60:d9:41:65:7e:cc:e9:
a8:67:f9:8f:12:f7:cd:07:c8:41:72:41:ce:73:ed:1e:aa:d8:
5a:da:13:44:25:62:63:a9:12:53:0a:78:06:f7:b7:34:17:69:
4b:49:ee:b8:99:fc:56:2c:b4:f1:7d:1a:8f:41:83:58:d8:98:
8c:0c:80:d0:f2:db:e1:af:1d:30:b9:00:d3:b5:86:ac:9c:75:
77:6c:66:f3:2e:1d:c6:49:5d:fd:39:7f:8a:29:0e:c2:1e:c2:
13:33:7b:6d:7e:c6:95:3e:7d:21:bc:36:7c:8b:a7:22:31:f5:
05:a9:50:01:93:5a:24:9a:aa:b0:31:b8:ce:49:4c:48:13:d9:
7f:c1:15:73:4c:70:73:80:b4:8e:9d:69:05:41:26:5e:01:f0:
47:a7:71:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:35 2025 by rpki-client