Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/185e80-7339-4cc0-8b7c-4edf4244a9f9/1/ph_abUl8YKxSFol2D9C-cQXyLas.roa
File: ph_abUl8YKxSFol2D9C-cQXyLas.roa (raw, json)
Hash identifier: XzIPEy0KXZIoJIgRslqvx4usYPdIH83RvlSWHCq6sCo=
Subject key identifier: A6:1F:DA:6D:49:7C:60:AC:52:16:89:76:0F:D0:BE:71:05:F2:2D:AB
Certificate issuer: /CN=baa63d3ba6dae4a4493bc14a675b94ad2aa45b69
Certificate serial: 0187033A0797E718F9BAE5EBAC1A3ADE76EE
Authority key identifier: BA:A6:3D:3B:A6:DA:E4:A4:49:3B:C1:4A:67:5B:94:AD:2A:A4:5B:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqY9O6ba5KRJO8FKZ1uUrSqkW2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/185e80-7339-4cc0-8b7c-4edf4244a9f9/1/ph_abUl8YKxSFol2D9C-cQXyLas.roa
Signing time: Tue 21 Mar 2023 08:12:27 +0000
ROA not before: Tue 21 Mar 2023 08:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 31.217.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:3a:07:97:e7:18:f9:ba:e5:eb:ac:1a:3a:de:76:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa63d3ba6dae4a4493bc14a675b94ad2aa45b69
Validity
Not Before: Mar 21 08:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a61fda6d497c60ac521689760fd0be7105f22dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5a:04:06:4b:a7:8f:ef:99:57:00:5e:52:c5:
0b:28:a3:23:36:87:4a:06:49:4b:0e:c5:11:9f:97:
17:88:64:f1:f4:50:15:c6:6a:37:28:cc:40:cb:af:
22:a7:b0:a5:c8:ef:35:59:93:6b:56:66:04:5c:9c:
1e:1a:74:78:f3:2b:43:9e:f7:4d:18:bb:9e:c9:08:
c3:90:be:fd:13:31:e9:9d:3c:f6:4f:eb:6f:9e:8e:
dd:d9:2d:7b:9e:17:13:78:2c:4f:e1:20:5a:9b:97:
f9:17:71:62:23:0c:38:d4:10:51:8f:39:ea:b4:91:
2f:cc:f2:a0:75:02:7e:e1:39:e2:0a:cc:92:a6:f9:
cb:23:17:2d:59:87:5c:ea:69:95:94:25:fb:ff:0b:
66:f4:ce:d6:41:b1:6f:01:d6:43:c2:5d:3e:08:e8:
3f:46:b7:e4:91:3b:5d:ea:0c:a9:40:99:d8:c9:1a:
a5:c7:39:8e:3c:24:18:ff:72:7a:29:d2:8f:58:53:
3d:ab:29:ea:8b:15:a9:c7:12:9b:84:37:fe:fe:4f:
63:ae:a6:3e:64:4a:48:87:b0:1c:ad:e9:ab:c2:75:
01:ad:95:9f:56:85:07:00:e0:48:7b:41:d4:35:93:
59:10:1b:19:67:73:ee:d7:f9:a4:0e:5d:47:6d:1f:
14:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1F:DA:6D:49:7C:60:AC:52:16:89:76:0F:D0:BE:71:05:F2:2D:AB
X509v3 Authority Key Identifier:
keyid:BA:A6:3D:3B:A6:DA:E4:A4:49:3B:C1:4A:67:5B:94:AD:2A:A4:5B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqY9O6ba5KRJO8FKZ1uUrSqkW2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/185e80-7339-4cc0-8b7c-4edf4244a9f9/1/ph_abUl8YKxSFol2D9C-cQXyLas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/185e80-7339-4cc0-8b7c-4edf4244a9f9/1/uqY9O6ba5KRJO8FKZ1uUrSqkW2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.248.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:fa:bc:8f:ea:28:09:91:35:91:3b:c9:35:d1:10:5a:1a:3c:
34:78:80:af:c8:71:77:be:e9:ee:69:9b:58:b9:a1:6b:58:22:
34:9d:b5:a6:33:11:1e:25:b9:ad:0c:fb:f2:4b:09:ec:95:19:
5d:be:17:db:08:28:80:3f:99:90:04:97:3c:c2:0f:85:e2:08:
30:2d:08:de:77:de:a5:61:70:3c:4f:25:11:57:20:a4:d4:56:
7c:3e:19:0e:2b:6e:bd:be:b2:2c:e2:d9:37:da:46:c3:76:da:
83:39:ef:e1:8a:43:40:02:ba:14:3c:e1:d5:33:82:59:eb:90:
0b:eb:50:68:39:57:5c:69:d5:ea:b1:05:3e:29:3f:e9:7a:a8:
6a:29:e2:87:04:c7:bd:b7:d9:65:5d:ff:81:fc:fe:87:9c:57:
78:2a:8b:32:40:ba:e5:06:c7:49:34:e7:f4:26:a2:d3:8b:53:
f2:7a:29:be:07:36:5b:5e:8d:c1:b6:77:21:52:11:24:9f:d8:
98:a1:43:29:a8:4e:20:f4:0a:01:b5:f8:48:6b:56:50:66:2e:
42:e1:21:fe:5b:a7:da:67:d9:c5:1a:25:18:7f:3a:ac:36:6a:
69:71:22:85:7f:cd:d2:02:36:88:33:69:c7:82:0c:75:c9:b1:
ef:44:b8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:49 2025 by rpki-client