Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8a781f-ab6c-4e9b-a057-2e9ed8e74836/1/1-LGnHfgClwWIWr92plp5B_hjFRM.roa
File: 1-LGnHfgClwWIWr92plp5B_hjFRM.roa (raw, json)
Hash identifier: ZVcBb7XEJyRkZvsCcZxrlPXHWXxZ1n4ae35LmwfMDDk=
Subject key identifier: F8:B1:A7:1D:F8:02:97:05:88:5A:BF:76:A6:5A:79:07:F8:63:15:13
Certificate issuer: /CN=13055cde17140400a98d4be05071888d6abb12df
Certificate serial: 01830EE29968CECFC00533A5B9E9E0675A38
Authority key identifier: 13:05:5C:DE:17:14:04:00:A9:8D:4B:E0:50:71:88:8D:6A:BB:12:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EwVc3hcUBACpjUvgUHGIjWq7Et8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8a781f-ab6c-4e9b-a057-2e9ed8e74836/1/1-LGnHfgClwWIWr92plp5B_hjFRM.roa
Signing time: Mon 05 Sep 2022 18:21:14 +0000
ROA not before: Mon 05 Sep 2022 18:21:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 31.24.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0e:e2:99:68:ce:cf:c0:05:33:a5:b9:e9:e0:67:5a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13055cde17140400a98d4be05071888d6abb12df
Validity
Not Before: Sep 5 18:21:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8b1a71df8029705885abf76a65a7907f8631513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:93:93:ae:fe:8a:63:30:2d:0e:4f:a3:00:1f:
c5:96:e4:3b:55:71:dd:3f:8f:35:5b:c6:6f:95:81:
d0:7d:4b:02:45:ab:35:35:4d:df:53:e9:ea:b3:21:
16:2c:7d:a6:e6:91:89:52:75:c5:4d:31:0d:3c:1c:
4e:9c:43:06:0f:13:5e:a1:53:3f:8e:ea:a7:67:96:
d7:ff:15:35:aa:8d:9d:ac:92:5c:9d:3c:d1:f3:b7:
61:f0:ef:13:6d:a5:84:c9:6c:bd:af:2c:28:aa:41:
3d:64:0e:b9:5f:61:e0:f8:5a:ad:34:f6:c7:49:9f:
78:6e:69:51:42:77:41:b0:35:aa:b3:d0:1d:e1:14:
79:f3:c5:d1:2c:c4:e4:b6:50:54:0c:b6:cc:a3:dc:
82:fb:56:f8:57:ca:a1:6e:95:64:77:b3:f0:82:47:
28:f2:ad:cd:1c:15:b9:e6:3b:78:4c:f8:8c:25:6b:
82:e2:c2:a0:13:e6:03:71:27:c4:95:03:c7:1a:7e:
88:ca:b1:b2:31:19:89:ac:ed:cf:66:c2:0b:f0:8f:
6b:c0:24:df:ae:c7:f2:3d:45:36:9e:ea:b6:7e:a8:
d7:5c:02:e8:40:1f:c0:b8:03:fb:dc:df:61:c4:82:
47:dc:9d:b9:bb:a4:a1:f3:8b:68:bd:1e:f1:79:29:
38:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B1:A7:1D:F8:02:97:05:88:5A:BF:76:A6:5A:79:07:F8:63:15:13
X509v3 Authority Key Identifier:
keyid:13:05:5C:DE:17:14:04:00:A9:8D:4B:E0:50:71:88:8D:6A:BB:12:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EwVc3hcUBACpjUvgUHGIjWq7Et8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8a781f-ab6c-4e9b-a057-2e9ed8e74836/1/1-LGnHfgClwWIWr92plp5B_hjFRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8a781f-ab6c-4e9b-a057-2e9ed8e74836/1/EwVc3hcUBACpjUvgUHGIjWq7Et8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.253.0/24
Signature Algorithm: sha256WithRSAEncryption
24:ed:eb:a1:79:98:e0:0f:4b:c7:82:02:b6:1e:fa:6c:fe:43:
44:45:a9:e4:d8:d9:15:b3:89:4d:2d:6a:a8:92:b0:34:00:a7:
7b:db:62:31:af:d3:b3:8c:42:52:93:bf:2a:59:ee:1f:67:cf:
63:84:5e:ea:c6:ad:dc:ce:a0:6b:d1:06:c8:b3:95:62:da:52:
54:b8:08:68:ca:96:e5:64:eb:a7:28:9b:c4:3a:78:ac:f0:38:
a4:ac:16:1a:32:9e:fb:9a:62:89:34:bc:92:01:d5:82:56:7a:
01:de:7c:57:39:c6:6a:00:28:4e:4c:5e:de:10:ef:3c:22:d1:
3d:5d:7d:5f:7c:e1:58:b7:97:d6:e8:e2:a4:ef:34:22:3d:47:
35:31:42:b6:b3:95:16:6a:04:48:75:6a:76:f1:89:5e:3d:92:
70:64:c0:11:65:f0:87:57:eb:46:a0:51:05:fb:dc:18:a7:4e:
b3:01:f3:99:1a:0a:05:fc:89:d1:7f:97:88:51:4d:d6:68:27:
0d:cb:06:37:61:eb:9a:84:6a:f3:2c:12:16:31:08:51:61:16:
e0:2d:aa:23:1c:62:95:e7:41:c4:82:2d:19:50:12:73:f6:bb:
2a:b8:af:69:6f:1a:ef:40:12:15:7a:f7:6d:ff:cf:0a:14:db:
68:9b:4b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:00 2024 by rpki-client on console-fra.rpki-client.org