Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8a781f-ab6c-4e9b-a057-2e9ed8e74836/1/z4bnL-wirOmCqFPZWNlXmv54IW0.roa
File: z4bnL-wirOmCqFPZWNlXmv54IW0.roa (raw, json)
Hash identifier: MOYHs3I19uujA9RkAWzZz/CapAhTt+USTp6jSGC9bYE=
Subject key identifier: CF:86:E7:2F:EC:22:AC:E9:82:A8:53:D9:58:D9:57:9A:FE:78:21:6D
Certificate issuer: /CN=13055cde17140400a98d4be05071888d6abb12df
Certificate serial: 01827C66C0C43E1B9DBCBF47AEB64085EAE7
Authority key identifier: 13:05:5C:DE:17:14:04:00:A9:8D:4B:E0:50:71:88:8D:6A:BB:12:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EwVc3hcUBACpjUvgUHGIjWq7Et8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8a781f-ab6c-4e9b-a057-2e9ed8e74836/1/z4bnL-wirOmCqFPZWNlXmv54IW0.roa
Signing time: Mon 08 Aug 2022 07:41:24 +0000
ROA not before: Mon 08 Aug 2022 07:41:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 31.24.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7c:66:c0:c4:3e:1b:9d:bc:bf:47:ae:b6:40:85:ea:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13055cde17140400a98d4be05071888d6abb12df
Validity
Not Before: Aug 8 07:41:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf86e72fec22ace982a853d958d9579afe78216d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c3:85:55:58:26:c5:18:89:0b:c6:13:86:5d:
4c:17:4e:09:79:95:21:87:16:c9:ee:f2:02:4a:38:
bc:bf:b2:b3:72:f4:5e:a2:78:ea:09:66:83:f7:9f:
74:6e:fd:1b:7f:74:97:05:0c:57:8f:e6:16:95:ff:
50:2c:9e:e4:93:39:61:8d:6d:18:8d:a8:2d:00:72:
c2:d5:72:96:3b:69:3a:61:7c:81:c8:a0:ba:e6:51:
9d:8c:59:e9:92:15:9c:31:68:df:24:80:1d:74:8a:
aa:71:bd:10:4d:61:9f:4e:95:32:77:4e:6a:7c:41:
b2:06:6f:38:0b:59:f5:6e:03:c3:10:df:82:6d:df:
9e:56:89:42:88:03:ab:f5:75:b5:29:01:b6:33:23:
51:ed:58:e9:04:c6:6b:96:c5:de:2c:32:39:a0:16:
88:5e:05:da:bd:63:3f:c8:61:a3:8f:83:4f:31:14:
9e:89:48:b6:3c:ed:2d:a2:ee:d3:92:cb:e3:e6:84:
9a:b1:66:e3:96:b0:23:f9:7a:58:36:58:18:d7:45:
e3:06:40:74:ae:82:ff:22:c2:07:db:d1:a5:8f:f5:
33:a5:17:f5:40:fa:c2:4e:64:0b:19:d9:4f:c5:33:
9b:a2:2e:82:0d:72:c5:2b:88:49:15:74:fc:ca:e8:
f8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:86:E7:2F:EC:22:AC:E9:82:A8:53:D9:58:D9:57:9A:FE:78:21:6D
X509v3 Authority Key Identifier:
keyid:13:05:5C:DE:17:14:04:00:A9:8D:4B:E0:50:71:88:8D:6A:BB:12:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EwVc3hcUBACpjUvgUHGIjWq7Et8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8a781f-ab6c-4e9b-a057-2e9ed8e74836/1/z4bnL-wirOmCqFPZWNlXmv54IW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8a781f-ab6c-4e9b-a057-2e9ed8e74836/1/EwVc3hcUBACpjUvgUHGIjWq7Et8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.253.0/24
Signature Algorithm: sha256WithRSAEncryption
58:f6:3a:cb:97:ff:1a:6e:a7:a0:38:8f:02:46:cd:71:40:e1:
29:e8:9d:a9:8e:9b:64:e4:87:96:ab:ef:49:ab:fa:f2:8b:10:
80:62:13:5e:d1:f3:9c:97:cb:7c:b2:1a:dd:47:a2:fa:56:d5:
97:0d:b4:2b:92:95:70:3e:15:34:64:16:3d:b4:62:11:ee:13:
3d:8a:1c:17:76:f2:01:a6:94:7f:81:9a:2a:2f:d7:40:dc:5f:
72:77:21:76:f8:56:30:3b:83:3c:40:dc:c3:09:bb:3f:0d:82:
e6:9d:6b:84:b8:6c:a1:b6:e5:7b:7b:b4:c2:a3:a4:dd:a1:78:
29:d8:d2:8e:7c:40:9c:ff:8a:f8:d4:da:a6:45:43:bf:ef:60:
b8:60:2f:4f:47:ee:51:00:1e:4a:25:91:c6:a2:12:49:b4:67:
92:c6:35:92:b9:71:d0:ff:95:33:b1:b3:9f:20:56:26:7b:6a:
fc:59:e2:1b:3c:d9:bb:d6:3b:31:56:a9:25:d2:91:a2:8b:e1:
c2:d1:c1:46:58:ac:70:22:77:3f:ba:c0:cd:bd:57:16:99:fe:
34:66:4c:ea:8e:c5:92:81:5b:d3:a8:0b:a2:34:31:a5:6f:10:
fe:af:a4:de:7b:42:b8:cd:c2:77:50:13:76:b5:7c:65:93:49:
f9:7c:28:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:00 2024 by rpki-client on console-fra.rpki-client.org