Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2ff111-326d-42e4-8a99-17c89a764e2b/1/kVUGYpjBMsGzoITFuwQAtQlAoY8.roa
File: kVUGYpjBMsGzoITFuwQAtQlAoY8.roa (raw, json)
Hash identifier: pFGkgywthHpgibRQXweslW0A06RKyhSNU0hBPFFXeGg=
Subject key identifier: 91:55:06:62:98:C1:32:C1:B3:A0:84:C5:BB:04:00:B5:09:40:A1:8F
Certificate issuer: /CN=24fbc87006dbc848cb5cc244b74127714719da04
Certificate serial: 01896472A5FB28DE3C69D9D663AB599996DC
Authority key identifier: 24:FB:C8:70:06:DB:C8:48:CB:5C:C2:44:B7:41:27:71:47:19:DA:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPvIcAbbyEjLXMJEt0EncUcZ2gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/2ff111-326d-42e4-8a99-17c89a764e2b/1/kVUGYpjBMsGzoITFuwQAtQlAoY8.roa
Signing time: Mon 17 Jul 2023 15:23:02 +0000
ROA not before: Mon 17 Jul 2023 15:23:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 31.216.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:72:a5:fb:28:de:3c:69:d9:d6:63:ab:59:99:96:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fbc87006dbc848cb5cc244b74127714719da04
Validity
Not Before: Jul 17 15:23:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9155066298c132c1b3a084c5bb0400b50940a18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a2:93:be:ca:85:87:4a:9f:3f:7d:19:f1:73:
01:f1:86:f5:fe:58:38:0e:8e:a1:31:73:26:d3:d0:
fd:32:18:fe:c0:bc:d4:86:e7:5b:86:5b:fb:1a:c3:
d2:24:58:cd:c4:90:dc:a2:be:b7:18:b2:68:28:af:
9d:6b:27:bf:29:cf:91:d6:79:31:e9:19:4c:13:7e:
66:43:9f:b4:49:3f:7a:2f:c0:c4:df:22:45:56:00:
7b:aa:9e:8a:01:45:89:d3:da:87:9d:8e:b5:b7:5f:
b0:de:f1:68:f5:db:49:37:5c:a3:9a:be:e9:ca:8d:
61:6a:c4:5a:44:83:e3:ae:d5:5f:fd:4d:02:b9:f1:
87:e1:0a:95:5c:71:f2:e5:5d:62:4c:bb:37:e5:36:
ce:95:55:f0:49:0e:ff:d9:ad:88:35:04:3c:6f:4e:
8d:dd:01:18:7c:a9:51:80:a4:94:37:aa:38:08:57:
37:9d:c2:4b:77:97:cc:e4:d2:dc:76:fe:b9:29:a5:
07:7b:d8:d6:9f:0d:de:06:f0:5a:d5:1c:7c:23:22:
a7:db:ef:80:96:94:20:8d:5f:9e:bb:dd:56:74:f2:
5e:88:f5:ae:7b:6a:17:18:a0:d9:b4:66:7d:c5:c8:
04:38:5b:4b:a0:66:46:53:d5:89:e2:d0:f8:7d:17:
e8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:55:06:62:98:C1:32:C1:B3:A0:84:C5:BB:04:00:B5:09:40:A1:8F
X509v3 Authority Key Identifier:
keyid:24:FB:C8:70:06:DB:C8:48:CB:5C:C2:44:B7:41:27:71:47:19:DA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPvIcAbbyEjLXMJEt0EncUcZ2gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2ff111-326d-42e4-8a99-17c89a764e2b/1/kVUGYpjBMsGzoITFuwQAtQlAoY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2ff111-326d-42e4-8a99-17c89a764e2b/1/JPvIcAbbyEjLXMJEt0EncUcZ2gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.63.0/24
Signature Algorithm: sha256WithRSAEncryption
36:36:6a:21:99:b3:ac:aa:c4:fe:da:34:71:3c:bb:9c:f6:02:
42:ab:2d:5d:73:63:72:45:45:ef:f2:46:3c:6d:4e:a1:d7:36:
00:0e:55:e3:32:8c:6b:ac:91:c4:38:c3:7c:1c:81:60:6a:8f:
2e:f3:c2:70:69:f6:71:b4:f6:c8:b3:08:c0:c4:f1:10:1f:ae:
ad:6a:e1:a7:97:f6:4f:37:97:a2:42:46:f5:67:c7:3f:e4:68:
c7:f2:f2:43:c2:16:41:ca:16:52:b5:d4:e8:84:d4:6c:d7:1c:
bb:ee:c2:81:a7:a0:b2:0f:00:a5:f5:7f:44:5b:c2:d7:01:a1:
4a:eb:56:ef:cc:0b:6b:64:43:75:87:a8:26:19:05:d3:b8:a8:
fb:eb:ba:c8:4d:44:db:81:b2:e2:9a:6e:67:44:15:72:1a:5e:
5b:54:6c:a2:4b:57:c7:3a:59:34:62:f9:59:20:93:c4:67:94:
f3:6c:44:3a:32:e6:29:7a:5d:5e:6f:bf:be:43:fa:70:0a:b0:
07:ac:2e:a1:ac:87:1c:c5:6f:2e:15:28:44:d8:1f:37:c0:14:
73:08:57:39:50:21:ad:06:c2:e4:a2:ec:b0:fd:d8:7b:ca:65:
65:5f:19:1d:13:43:cc:21:b3:c0:70:8b:c1:ef:59:a1:1c:23:
4d:cf:f5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:53 2025 by rpki-client