Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/c6cdcc-5d3a-4126-859a-b1d8cd06fc17/1/0xKHZTp51vGN6BhhArjDhaB72MI.roa
File: 0xKHZTp51vGN6BhhArjDhaB72MI.roa (raw, json)
Hash identifier: 1Ah/4hwRz6KZ8sAZlC2SsjWkQiJ9NR+m7Kah5qdL/cU=
Subject key identifier: D3:12:87:65:3A:79:D6:F1:8D:E8:18:61:02:B8:C3:85:A0:7B:D8:C2
Certificate issuer: /CN=f68c28e95b54be5c052bb35b41ddf1efb1370363
Certificate serial: 0181F4565FFB9E7FD17CEA2AE2232CDB2170
Authority key identifier: F6:8C:28:E9:5B:54:BE:5C:05:2B:B3:5B:41:DD:F1:EF:B1:37:03:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9owo6VtUvlwFK7NbQd3x77E3A2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/c6cdcc-5d3a-4126-859a-b1d8cd06fc17/1/0xKHZTp51vGN6BhhArjDhaB72MI.roa
Signing time: Tue 12 Jul 2022 21:35:10 +0000
ROA not before: Tue 12 Jul 2022 21:35:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 31.222.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f4:56:5f:fb:9e:7f:d1:7c:ea:2a:e2:23:2c:db:21:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68c28e95b54be5c052bb35b41ddf1efb1370363
Validity
Not Before: Jul 12 21:35:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d31287653a79d6f18de8186102b8c385a07bd8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:74:5e:29:c6:dc:73:be:11:e2:41:ea:eb:16:
f1:f2:fa:5c:34:fb:7e:49:cc:70:68:f8:d3:5f:f7:
32:89:54:0d:09:e7:96:3c:c1:e8:d4:46:99:9e:09:
13:33:8e:09:f1:2f:22:2e:0c:e1:ba:42:40:b5:40:
9d:a8:1c:f8:44:04:d0:fc:b3:c7:fa:ea:25:d5:47:
53:68:e2:10:01:fb:94:ec:2c:96:ae:19:5d:42:5a:
1f:7d:5b:b3:0f:35:d9:3f:7a:28:74:c4:52:c8:c7:
b2:38:13:31:c6:f0:27:8e:4b:ff:b7:09:6a:81:6a:
e8:72:e1:a3:b0:17:f4:39:f0:6b:61:3f:e4:ee:38:
66:ba:07:ad:64:e4:98:bc:b6:72:d4:8f:ea:79:69:
12:81:6b:b6:8e:5d:4b:2f:05:bf:c8:16:8b:99:23:
ec:1b:b0:71:da:c3:8f:f4:29:b2:32:3a:56:dc:49:
ec:a4:be:c4:5c:c2:28:0a:e1:fe:0c:9a:6b:d4:27:
56:86:d3:31:f5:8a:58:ce:4a:51:5e:de:46:b3:f9:
88:ff:83:f7:0a:a7:e1:f4:c9:65:fa:1a:63:be:cc:
cf:e7:37:ce:3d:d6:b4:16:f5:6d:c5:18:6f:88:dc:
2e:30:c9:15:32:f4:57:45:52:80:2c:3b:d2:ba:ce:
bf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:12:87:65:3A:79:D6:F1:8D:E8:18:61:02:B8:C3:85:A0:7B:D8:C2
X509v3 Authority Key Identifier:
keyid:F6:8C:28:E9:5B:54:BE:5C:05:2B:B3:5B:41:DD:F1:EF:B1:37:03:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9owo6VtUvlwFK7NbQd3x77E3A2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/c6cdcc-5d3a-4126-859a-b1d8cd06fc17/1/0xKHZTp51vGN6BhhArjDhaB72MI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/c6cdcc-5d3a-4126-859a-b1d8cd06fc17/1/9owo6VtUvlwFK7NbQd3x77E3A2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.248.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:45:85:67:0e:4a:32:ca:4b:29:e2:8d:f3:40:82:38:94:71:
8f:d8:49:42:25:b9:fe:fd:cb:42:ab:29:e8:79:0f:6e:9c:3a:
bc:a7:dd:aa:60:6e:7a:a4:16:1e:88:46:12:16:b8:b1:75:25:
1a:ed:c5:3e:c4:f0:fc:f4:45:4c:93:54:c8:38:11:f9:ed:99:
8b:1f:4e:ff:ce:a9:f8:0e:3a:ec:bc:4f:a3:ad:94:a6:f8:63:
a4:3d:14:21:df:d1:47:d1:cb:7b:99:22:80:bd:5d:e5:a1:13:
d8:96:4d:b3:15:42:47:0b:3f:95:c8:b6:f1:a7:28:a1:11:e5:
d1:c3:8c:28:63:e1:59:a3:dd:fe:52:fd:3b:c8:42:91:6a:84:
72:33:e2:41:2b:35:fd:5c:ec:5c:75:e5:09:fe:9e:d1:51:8a:
23:14:de:45:8a:bb:48:9d:98:63:f7:ad:ee:7d:e0:86:4b:06:
51:d4:51:0b:f2:a0:59:8e:44:87:da:b1:6c:20:d2:9e:56:fe:
62:1c:0e:76:70:06:e1:b9:b5:43:ba:09:0c:cd:4c:e2:84:72:
b1:9e:78:89:a6:15:9b:15:6d:f1:b2:46:e4:b9:5e:68:a3:58:
fe:8c:b2:b6:83:4e:f8:1d:8f:42:0e:18:a3:50:0f:5c:4e:67:
02:1f:6f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:30 2025 by rpki-client