Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8a781f-ab6c-4e9b-a057-2e9ed8e74836/1/yGQ-KAn3ePAkazWE5LAYHFyCHCc.roa
File: yGQ-KAn3ePAkazWE5LAYHFyCHCc.roa (raw, json)
Hash identifier: lwZO/hhGe3tLRgHNDe4ZmFUUHSui8s6Bnl1X3vlgbro=
Subject key identifier: C8:64:3E:28:09:F7:78:F0:24:6B:35:84:E4:B0:18:1C:5C:82:1C:27
Certificate issuer: /CN=13055cde17140400a98d4be05071888d6abb12df
Certificate serial: 01857295A1CB695B9CFE9002EA6D12B5F3C0
Authority key identifier: 13:05:5C:DE:17:14:04:00:A9:8D:4B:E0:50:71:88:8D:6A:BB:12:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EwVc3hcUBACpjUvgUHGIjWq7Et8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8a781f-ab6c-4e9b-a057-2e9ed8e74836/1/yGQ-KAn3ePAkazWE5LAYHFyCHCc.roa
Signing time: Mon 02 Jan 2023 13:04:46 +0000
ROA not before: Mon 02 Jan 2023 13:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205361
IP address blocks: 31.24.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:a1:cb:69:5b:9c:fe:90:02:ea:6d:12:b5:f3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13055cde17140400a98d4be05071888d6abb12df
Validity
Not Before: Jan 2 13:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8643e2809f778f0246b3584e4b0181c5c821c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e8:1e:89:0f:61:b5:08:ea:f3:b8:5e:5b:bb:
c2:84:41:51:d5:ac:d3:73:5e:37:0a:b1:69:fa:3e:
8d:04:56:e2:cf:4f:35:b8:35:42:a4:9e:7f:c3:68:
de:3f:28:c1:92:f0:4b:44:03:0e:0d:7c:08:fe:32:
6e:72:a5:3b:54:92:d3:87:17:c1:3b:78:82:28:7e:
b2:d8:92:5b:cd:83:84:d8:4e:4c:02:65:63:e3:18:
9a:8d:5d:bc:0e:94:c6:73:70:ed:8b:5b:df:4a:d6:
d2:25:f4:80:16:04:b5:5d:3a:ae:d8:eb:89:bc:19:
a6:a9:0c:9b:85:46:07:44:90:f7:07:2a:27:63:56:
21:81:54:de:7a:50:1c:a4:5d:ca:52:e3:66:a5:a8:
75:4f:d9:fd:70:68:9d:cb:2d:29:ad:e1:88:87:d8:
cf:38:75:81:08:b4:5b:72:18:3f:dd:fc:d7:d4:38:
eb:ae:9f:58:e0:77:4a:1e:12:29:25:f3:96:58:90:
27:f1:4e:fd:aa:b8:c3:fe:b9:f7:8e:53:73:34:1f:
98:34:54:3f:98:83:ec:e2:67:88:24:51:97:37:01:
65:6e:f3:28:e9:47:d0:7c:b2:bb:7b:3f:48:79:95:
97:95:01:21:57:8a:d2:94:c4:82:4a:c9:0c:dc:29:
7b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:64:3E:28:09:F7:78:F0:24:6B:35:84:E4:B0:18:1C:5C:82:1C:27
X509v3 Authority Key Identifier:
keyid:13:05:5C:DE:17:14:04:00:A9:8D:4B:E0:50:71:88:8D:6A:BB:12:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EwVc3hcUBACpjUvgUHGIjWq7Et8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8a781f-ab6c-4e9b-a057-2e9ed8e74836/1/yGQ-KAn3ePAkazWE5LAYHFyCHCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8a781f-ab6c-4e9b-a057-2e9ed8e74836/1/EwVc3hcUBACpjUvgUHGIjWq7Et8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.253.0/24
Signature Algorithm: sha256WithRSAEncryption
68:9d:46:24:96:f8:ce:5b:ba:30:b2:22:37:c9:0a:7d:46:9f:
17:f8:f4:6c:ac:30:3c:c7:bb:11:b3:35:ed:a9:66:a2:65:cd:
31:e9:9f:37:05:0d:d6:ab:f7:f5:af:2a:25:5c:9c:cf:81:48:
52:83:8d:ac:b8:66:c0:ee:2a:cb:ed:8e:cf:45:a3:dd:fe:de:
70:db:fe:62:09:ae:46:fb:8a:e2:f1:81:8b:14:30:89:b9:85:
fa:04:1e:87:10:9e:79:cc:03:a1:c5:2c:f5:15:12:08:e7:cc:
6a:77:13:55:e9:ed:38:f6:4a:73:91:35:cc:6c:e9:5e:d2:dc:
b5:87:80:b7:4e:32:da:32:7f:8a:c0:d5:5b:4b:34:a0:8e:7e:
1c:37:9f:6e:f2:18:d0:0d:94:c1:2a:02:b4:10:54:8c:7c:52:
b6:16:ca:07:48:2e:fa:6d:0d:ba:ff:50:e1:37:5e:84:c5:b2:
4e:7f:51:95:9f:ce:f7:8e:0b:f7:15:e8:cc:f8:0d:1e:66:40:
d7:2d:a7:7d:b5:91:b3:ce:d6:41:ee:57:ad:81:99:04:77:28:
2c:e9:83:4c:62:bb:cd:4a:5a:39:c7:a9:26:66:55:9f:3d:c0:
ec:33:a6:7c:db:b5:fb:71:c2:10:97:03:ca:60:7f:a1:a5:f9:
25:06:02:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:23 2024 by rpki-client on console-ams.rpki-client.org