Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c5635b-3c1c-43e0-9006-5a1a7006c306/1/AARxtQCctF17qUNNK7RpuEvL9XE.roa
File: AARxtQCctF17qUNNK7RpuEvL9XE.roa (raw, json)
Hash identifier: qGqp5V5PGWFiR0Ta2ZszTWDICcWgyav8MpuAP1VIGoA=
Subject key identifier: 00:04:71:B5:00:9C:B4:5D:7B:A9:43:4D:2B:B4:69:B8:4B:CB:F5:71
Certificate issuer: /CN=25fabb58330a68f1121af2bef43dc45417251020
Certificate serial: 0188303D78275D2C94370AF7EE199EFD73BC
Authority key identifier: 25:FA:BB:58:33:0A:68:F1:12:1A:F2:BE:F4:3D:C4:54:17:25:10:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jfq7WDMKaPESGvK-9D3EVBclECA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c5635b-3c1c-43e0-9006-5a1a7006c306/1/AARxtQCctF17qUNNK7RpuEvL9XE.roa
Signing time: Thu 18 May 2023 19:01:54 +0000
ROA not before: Thu 18 May 2023 19:01:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202656
IP address blocks: 31.41.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:30:3d:78:27:5d:2c:94:37:0a:f7:ee:19:9e:fd:73:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fabb58330a68f1121af2bef43dc45417251020
Validity
Not Before: May 18 19:01:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=000471b5009cb45d7ba9434d2bb469b84bcbf571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8f:4f:1c:cd:6f:33:c0:ad:ac:eb:e9:23:24:
df:95:ef:2e:b6:a0:4a:da:20:5b:1d:b0:e7:fa:20:
4f:bf:d3:27:22:60:21:41:4a:e8:55:18:e6:54:c9:
e5:9a:72:b6:d4:7b:a6:26:f5:55:fe:87:db:a1:7d:
c6:b5:06:ce:ca:c2:73:d1:f7:53:fb:7d:01:99:d2:
b9:8e:a2:2f:84:36:5f:e9:6b:5e:49:2d:44:41:f3:
0b:26:fe:2a:10:a4:5c:69:2b:3a:4e:6e:8a:5b:94:
a1:f9:c1:2f:ac:fd:b1:fd:53:48:83:85:47:87:c1:
e5:d6:db:13:50:af:4b:68:f3:97:25:7d:80:fb:e2:
3d:14:c6:3c:d4:73:c5:90:21:c1:96:85:16:1e:f1:
39:d1:21:3f:9e:17:15:f9:f7:c7:48:e8:0b:32:82:
a5:3a:b0:de:22:9a:98:5f:b0:2a:13:17:76:ff:08:
01:5d:5e:dc:4d:f7:37:b3:94:23:a8:f6:a4:c5:78:
e3:4e:f5:f4:3a:c3:6a:6d:d6:e1:8d:45:c3:02:8c:
03:d2:92:11:3b:a0:9a:4b:ff:c3:be:70:a8:17:f9:
cb:09:d8:1e:2f:3e:94:03:5b:f2:c2:e5:19:81:50:
63:1f:fa:9b:3c:0d:11:a5:78:e9:53:be:94:6f:d4:
39:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:04:71:B5:00:9C:B4:5D:7B:A9:43:4D:2B:B4:69:B8:4B:CB:F5:71
X509v3 Authority Key Identifier:
keyid:25:FA:BB:58:33:0A:68:F1:12:1A:F2:BE:F4:3D:C4:54:17:25:10:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jfq7WDMKaPESGvK-9D3EVBclECA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c5635b-3c1c-43e0-9006-5a1a7006c306/1/AARxtQCctF17qUNNK7RpuEvL9XE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c5635b-3c1c-43e0-9006-5a1a7006c306/1/Jfq7WDMKaPESGvK-9D3EVBclECA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.251.0/24
Signature Algorithm: sha256WithRSAEncryption
79:2c:da:90:ba:5b:d7:5e:aa:70:41:53:3c:7e:be:23:f7:af:
4b:43:d9:40:34:ed:01:f9:9f:05:d5:70:b1:20:41:e8:2e:6c:
b7:42:db:02:21:2b:7b:a7:bb:25:fe:68:ed:70:1f:29:5c:61:
e2:3a:86:53:d2:f9:4b:6a:e1:3e:9c:61:66:ad:ea:a6:4d:63:
c6:86:4b:e3:1a:c4:3f:25:ff:33:be:69:2d:62:e4:a5:bb:4a:
24:92:ff:ea:49:bd:7c:83:71:13:21:21:75:ab:85:b8:ae:21:
97:24:8b:2d:af:20:70:f3:d1:f1:53:fa:57:4b:e8:08:42:c7:
28:68:58:4b:da:53:62:85:54:d9:1b:9d:d4:5b:42:b2:1f:ce:
a7:90:6b:ca:b6:18:fb:21:45:29:0a:ce:53:80:22:2e:17:e7:
45:be:97:4c:66:7b:e1:2d:1d:23:64:1f:68:50:12:ba:f1:81:
70:7c:a1:eb:4a:d2:54:1d:0b:64:ab:ee:ac:20:e5:bf:8b:4b:
47:17:d5:65:71:c4:86:19:bb:b5:1d:7e:b1:8d:99:d9:e0:e6:
3e:d6:ec:a3:1e:fe:3a:53:d7:54:78:50:e6:fa:ed:f2:0e:c4:
c3:40:ba:45:4e:68:51:f2:e6:34:a5:5f:63:1d:91:26:75:44:
39:5c:13:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:26 2025 by rpki-client