Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/utgIkj4t0OsUaxyS29heyI7StfU.roa
File: utgIkj4t0OsUaxyS29heyI7StfU.roa (raw, json)
Hash identifier: SrE6QveODACvlZJPUdnykq9rfRJPuUix1y/6GYsYgCE=
Subject key identifier: BA:D8:08:92:3E:2D:D0:EB:14:6B:1C:92:DB:D8:5E:C8:8E:D2:B5:F5
Certificate issuer: /CN=659375cfe748a9e413894f2e4f85fbd64fd1c776
Certificate serial: 0193B68BE8274C0F813185DB86E6ACC5ED78
Authority key identifier: 65:93:75:CF:E7:48:A9:E4:13:89:4F:2E:4F:85:FB:D6:4F:D1:C7:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/utgIkj4t0OsUaxyS29heyI7StfU.roa
Signing time: Wed 11 Dec 2024 16:27:22 +0000
ROA not before: Wed 11 Dec 2024 16:27:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.22.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b6:8b:e8:27:4c:0f:81:31:85:db:86:e6:ac:c5:ed:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659375cfe748a9e413894f2e4f85fbd64fd1c776
Validity
Not Before: Dec 11 16:27:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bad808923e2dd0eb146b1c92dbd85ec88ed2b5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:1a:b4:ae:03:a6:5f:63:5f:1e:04:7f:2d:
36:6c:33:75:d7:8b:ff:e6:fd:b2:13:43:a7:08:8e:
5c:7a:ae:06:93:7f:a5:77:18:44:19:fc:10:07:da:
43:ed:da:11:e9:72:2a:85:7a:fa:6a:1e:81:60:ed:
09:00:a1:f4:a5:19:20:4b:d0:ed:aa:2d:4a:13:0a:
1f:44:73:47:60:50:41:40:f1:b5:43:4b:26:d2:6a:
c0:40:6a:f5:e7:53:01:19:44:c9:d0:bc:3e:30:ca:
16:c6:7a:3d:28:4e:cc:67:8f:24:a1:86:44:ac:32:
c4:25:e9:44:75:d0:14:84:34:27:49:ac:67:8c:48:
8e:16:4e:33:c1:b9:b1:1c:07:ec:9f:64:8a:0b:05:
1e:2b:fe:e4:fd:ca:b8:58:96:2e:aa:0f:c5:4b:77:
67:e6:ad:99:29:71:56:1b:46:4f:1c:b1:b8:02:42:
42:ef:c2:4b:70:86:7e:40:0c:10:21:95:f7:a9:77:
fd:31:f7:8e:4d:ea:4c:85:f2:60:79:1a:f5:fb:9f:
87:07:da:b6:21:6f:40:22:16:20:8f:f6:20:ee:ad:
d2:d1:0f:39:d3:6e:58:2c:1f:9e:a7:9a:f5:e1:18:
86:24:38:4a:e4:fe:2b:aa:9a:12:08:d7:6b:48:36:
6f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D8:08:92:3E:2D:D0:EB:14:6B:1C:92:DB:D8:5E:C8:8E:D2:B5:F5
X509v3 Authority Key Identifier:
keyid:65:93:75:CF:E7:48:A9:E4:13:89:4F:2E:4F:85:FB:D6:4F:D1:C7:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/utgIkj4t0OsUaxyS29heyI7StfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.110.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:e5:39:f7:27:52:52:28:8b:fd:27:7f:ab:c6:89:66:60:cc:
d8:ed:80:3a:d8:b6:4f:86:b7:99:41:29:d5:a6:19:e7:0f:3e:
6f:19:d7:c3:2c:2d:e4:87:29:f1:8d:46:1a:eb:e3:60:ba:a8:
22:8a:40:2b:b3:02:a0:50:33:30:22:7c:80:b4:ef:70:ae:ca:
37:b7:23:6e:d5:ad:25:25:ef:91:93:79:b1:75:ba:34:cb:8d:
f2:9d:bb:50:a1:a3:01:cf:4a:da:73:28:61:96:0c:67:97:be:
b9:93:43:75:29:5e:fc:f2:b9:b3:70:a4:52:89:f6:8c:a0:d1:
d8:f1:91:83:13:2a:7d:5c:36:ef:b4:32:c5:23:62:ea:fd:7c:
9a:86:cb:b4:7a:47:15:5d:85:d5:71:16:75:04:aa:48:62:66:
4f:eb:f7:93:bf:cb:fb:8b:fe:ac:79:57:ea:d9:3f:41:7f:ef:
1d:0d:c8:b8:fe:d6:fb:f8:db:13:49:5e:bf:9d:c3:7e:f8:91:
7d:69:ca:ce:07:56:72:42:df:58:71:ad:1b:38:af:dd:f4:c6:
ff:02:eb:71:83:f8:67:5b:71:d5:85:2a:e8:7e:91:db:2e:3e:
bc:cb:70:fa:1d:9c:9a:64:87:17:48:43:f0:4d:c3:6f:be:8e:
62:5f:e0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:41 2025 by rpki-client