Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/ooAzUJT_lD0uu4rdga1tAlO3PXY.roa
File: ooAzUJT_lD0uu4rdga1tAlO3PXY.roa (raw, json)
Hash identifier: QlQKlqDRQ6BZIqC3k8XC1Lg98qOBwA+OWTIZ/QxOVP8=
Subject key identifier: A2:80:33:50:94:FF:94:3D:2E:BB:8A:DD:81:AD:6D:02:53:B7:3D:76
Certificate issuer: /CN=659375cfe748a9e413894f2e4f85fbd64fd1c776
Certificate serial: 0193C5DE0653D3CF9E4A65CDFA8DAF55074B
Authority key identifier: 65:93:75:CF:E7:48:A9:E4:13:89:4F:2E:4F:85:FB:D6:4F:D1:C7:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/ooAzUJT_lD0uu4rdga1tAlO3PXY.roa
Signing time: Sat 14 Dec 2024 15:51:22 +0000
ROA not before: Sat 14 Dec 2024 15:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 31.22.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c5:de:06:53:d3:cf:9e:4a:65:cd:fa:8d:af:55:07:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659375cfe748a9e413894f2e4f85fbd64fd1c776
Validity
Not Before: Dec 14 15:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a280335094ff943d2ebb8add81ad6d0253b73d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:0b:bb:77:c6:e6:8e:e6:6b:87:3f:92:12:
df:fd:de:3b:54:a0:6d:a5:84:be:1f:8c:1b:e4:66:
43:4f:4e:d7:94:82:57:8f:62:fa:fa:b9:b9:41:0d:
07:4c:45:98:40:b3:56:ce:3a:a6:58:e6:24:d0:17:
be:40:de:92:b9:f1:f7:0d:15:65:27:93:a0:f9:eb:
f3:52:2d:c0:46:31:51:f9:08:32:98:d7:18:ad:1a:
7b:ed:05:4b:14:0b:c3:f0:dd:a1:d3:8b:c9:b4:da:
a9:c4:55:7c:50:5d:44:4e:7d:b3:83:0e:52:a3:81:
dc:27:a9:98:fa:9b:97:5c:1f:35:a8:bb:b7:b7:8a:
6b:df:7c:0c:45:22:c8:6f:4b:1f:66:d4:b3:91:ce:
b9:d8:3b:e0:fc:63:a8:2d:5e:11:c9:4f:7e:60:37:
89:e5:17:a4:5b:d8:6f:5b:3a:77:7d:8d:b5:cf:0b:
6c:d3:97:71:05:1d:29:3a:b1:c9:fd:8f:0f:fe:09:
c2:b1:53:d1:21:eb:4f:a0:91:5e:b6:c5:0b:82:dc:
2f:e8:5a:53:e8:57:eb:38:24:a9:d3:f3:f3:2e:09:
c5:7d:5c:93:f2:57:0b:99:50:0d:63:a7:81:8c:b0:
ee:07:74:90:ad:5b:09:cf:26:72:95:fd:b1:05:29:
ae:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:80:33:50:94:FF:94:3D:2E:BB:8A:DD:81:AD:6D:02:53:B7:3D:76
X509v3 Authority Key Identifier:
keyid:65:93:75:CF:E7:48:A9:E4:13:89:4F:2E:4F:85:FB:D6:4F:D1:C7:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/ooAzUJT_lD0uu4rdga1tAlO3PXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.105.0/24
Signature Algorithm: sha256WithRSAEncryption
98:98:3c:c4:d2:3a:e5:d0:7e:3c:30:8a:dd:e0:e9:fd:38:c3:
ec:8d:5e:f5:15:8f:03:79:88:56:27:0c:57:a3:db:31:99:c8:
ae:79:a0:64:35:d7:d6:2b:96:de:4b:6d:35:f9:a6:41:63:55:
8e:9f:2f:39:91:11:90:51:8c:42:c1:a1:8a:72:0c:8a:c4:76:
c6:6a:28:2f:36:65:a7:2c:bf:f5:04:4c:bf:fd:23:98:85:6e:
02:bb:a6:39:3f:9a:5c:47:ee:d5:b5:1e:a1:4a:cf:c6:5b:49:
e7:63:6b:b1:c8:96:dc:41:60:f8:b3:78:6a:24:c9:c5:b2:16:
78:57:ab:e8:54:99:31:5a:3a:68:e2:03:7f:5d:04:39:29:82:
a5:6e:4d:28:69:19:6c:97:06:94:b3:d1:2a:aa:04:f9:5d:06:
cc:c3:2c:d9:c6:4d:fd:97:01:93:50:fb:53:4f:55:06:58:25:
10:b7:91:85:d7:40:60:fc:57:01:bc:58:06:c3:5f:30:80:a6:
c8:9e:3a:52:02:ef:9c:fb:7e:17:6e:f7:73:e3:ee:2c:18:bf:
89:0e:fa:fc:49:af:21:b3:4d:29:2b:a5:ec:db:2b:72:9c:d4:
7b:eb:3c:eb:a5:91:af:b5:cc:e3:33:c7:da:9c:e7:15:04:1b:
67:e0:52:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:08:32 2025 by rpki-client