Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/NaSROhKcu-Wcdkc6c6_Ly1ym-_Y.roa
File: NaSROhKcu-Wcdkc6c6_Ly1ym-_Y.roa (raw, json)
Hash identifier: lP3mVHGtkft/goXhZFhWdbUhmxaEFalMwJpC4RXHqhs=
Subject key identifier: 35:A4:91:3A:12:9C:BB:E5:9C:76:47:3A:73:AF:CB:CB:5C:A6:FB:F6
Certificate issuer: /CN=659375cfe748a9e413894f2e4f85fbd64fd1c776
Certificate serial: 0193C5DEF3F52522800600496E368C1295B1
Authority key identifier: 65:93:75:CF:E7:48:A9:E4:13:89:4F:2E:4F:85:FB:D6:4F:D1:C7:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/NaSROhKcu-Wcdkc6c6_Ly1ym-_Y.roa
Signing time: Sat 14 Dec 2024 15:52:22 +0000
ROA not before: Sat 14 Dec 2024 15:52:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.22.104.0/24 maxlen: 24
31.22.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c5:de:f3:f5:25:22:80:06:00:49:6e:36:8c:12:95:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659375cfe748a9e413894f2e4f85fbd64fd1c776
Validity
Not Before: Dec 14 15:52:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35a4913a129cbbe59c76473a73afcbcb5ca6fbf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:62:b3:54:96:c8:56:14:bd:65:72:ca:56:7e:
06:f0:3c:37:c7:70:c6:94:c8:f9:9d:cc:ad:21:98:
60:95:a4:12:82:74:d7:e4:b1:94:de:42:ae:5d:86:
4e:d5:ab:7a:db:39:72:84:d5:db:c4:b7:fc:79:40:
a9:da:04:6e:f8:e6:40:d6:03:a9:f2:fa:84:f4:72:
c1:22:dc:06:44:55:1d:48:ae:22:52:5e:fc:53:22:
ee:c4:b2:c5:a9:ca:2e:9b:5d:e9:a4:de:89:73:23:
66:ce:ec:8e:e9:a4:09:91:4d:1d:2d:88:4c:8d:36:
d2:47:e1:9a:d4:11:0f:a0:5b:db:6f:91:ad:06:be:
11:5c:af:c6:ea:6d:f2:c5:b0:ad:83:3c:f0:d8:9d:
48:1c:0c:e4:f0:82:e2:3e:d9:4c:b1:69:01:be:20:
ef:4a:59:54:8f:6e:c5:0b:9f:67:fb:d3:e9:12:ce:
c5:69:f9:e7:9a:5d:92:de:8c:ee:ac:2d:a2:a4:78:
e9:33:b9:6b:bc:2b:da:17:9a:2f:eb:04:a3:d9:7b:
e1:71:ea:b5:d6:54:2a:bf:8d:7a:79:6c:1a:68:99:
83:f3:1b:5a:46:9e:6d:3e:eb:e4:83:eb:db:83:12:
88:82:fe:94:99:26:6d:5e:eb:67:67:d9:96:27:7d:
94:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A4:91:3A:12:9C:BB:E5:9C:76:47:3A:73:AF:CB:CB:5C:A6:FB:F6
X509v3 Authority Key Identifier:
keyid:65:93:75:CF:E7:48:A9:E4:13:89:4F:2E:4F:85:FB:D6:4F:D1:C7:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/NaSROhKcu-Wcdkc6c6_Ly1ym-_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.104.0/24
31.22.110.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:12:a9:df:63:4e:50:5f:55:ef:0b:e2:32:e8:b8:4f:51:11:
34:48:75:d0:2f:c7:b1:47:78:ef:b1:dd:9f:11:5d:13:84:7a:
13:a4:c2:cf:7a:42:00:01:38:4f:b2:3e:a3:c3:d5:e1:06:e4:
a1:a0:18:28:e5:b2:bb:45:5f:a5:b0:d8:9f:d8:9d:06:06:d6:
6d:1c:a3:61:64:99:32:98:0b:b7:02:a9:33:d9:e3:f9:76:f6:
56:e8:ad:7a:77:d0:98:40:9c:fb:ca:de:71:5c:cb:52:d7:2d:
fe:44:49:75:dd:c3:f5:1f:8b:20:57:55:eb:a3:ca:66:1b:e5:
6c:64:14:df:c1:34:83:71:e9:a4:ac:a2:b3:6a:d8:c3:47:2c:
5e:91:67:5f:c6:db:10:78:24:8a:40:4b:92:32:e3:0f:fb:b9:
73:c2:bd:6c:d6:af:a0:3f:ef:41:5d:d5:67:bc:22:c5:a5:63:
81:9d:eb:33:55:dc:01:5c:88:4e:03:c4:60:be:f2:e4:2f:8f:
8c:01:17:61:09:b2:19:fe:e6:1a:79:15:5f:0d:a0:9e:57:80:
20:d6:27:c6:f3:e7:da:6d:00:9e:b4:a9:af:79:2b:19:d7:8b:
85:ee:c0:4a:ed:07:07:33:f8:a4:3c:69:57:45:a3:e6:92:4e:
fc:1a:19:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:55:15 2025 by rpki-client