Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e70035-b69a-446a-8de4-270e72af21a9/1/3czROm_h3MfZLryPx4knXldoufw.roa
File: 3czROm_h3MfZLryPx4knXldoufw.roa (raw, json)
Hash identifier: XD+VTwjfdeLVgdNpSUKSexYHD/baETA08epS9zKx5BU=
Subject key identifier: DD:CC:D1:3A:6F:E1:DC:C7:D9:2E:BC:8F:C7:89:27:5E:57:68:B9:FC
Certificate issuer: /CN=140ecb72ff00398d3642ec23f212ada0ea72066d
Certificate serial: 018CC5DCE14E13A321A91964A31F5089CAC9
Authority key identifier: 14:0E:CB:72:FF:00:39:8D:36:42:EC:23:F2:12:AD:A0:EA:72:06:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FA7Lcv8AOY02Quwj8hKtoOpyBm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e70035-b69a-446a-8de4-270e72af21a9/1/3czROm_h3MfZLryPx4knXldoufw.roa
Signing time: Mon 01 Jan 2024 16:30:36 +0000
ROA not before: Mon 01 Jan 2024 16:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 931
IP address blocks: 31.216.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:e1:4e:13:a3:21:a9:19:64:a3:1f:50:89:ca:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=140ecb72ff00398d3642ec23f212ada0ea72066d
Validity
Not Before: Jan 1 16:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ddccd13a6fe1dcc7d92ebc8fc789275e5768b9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ba:9d:0c:d5:2f:fc:74:75:e6:90:92:7e:b4:
ee:67:bc:53:a2:d2:62:13:54:5d:b5:38:61:8c:2b:
1b:3c:63:94:8b:63:28:04:a2:7b:bd:62:28:ea:7e:
71:0e:3a:65:88:df:fb:c2:33:b2:90:06:d8:d2:98:
88:af:5d:40:1f:ea:ce:71:59:79:da:8e:10:98:3f:
99:29:6d:99:f1:49:c3:58:07:c2:a6:75:a3:34:a6:
2f:49:b3:68:1d:9e:90:af:13:4a:4a:09:08:2f:c7:
71:c2:cf:21:4a:e5:73:1a:7c:4d:40:15:8d:4d:8f:
e3:89:85:8e:46:c4:11:11:43:c4:fd:f3:fa:24:3d:
be:c0:f7:62:7d:81:60:c8:a9:c4:ac:6d:7e:49:cf:
35:79:df:bb:1c:67:fb:de:38:0a:c6:ff:1a:47:01:
39:87:66:ca:6e:fb:72:44:38:a1:d6:5c:73:84:00:
d2:c9:97:86:36:b2:3e:08:49:85:50:62:c6:3b:fc:
a4:f7:c3:f2:2a:af:c1:69:af:87:6a:eb:67:ca:1e:
5d:59:62:35:e7:be:68:e7:f8:d1:96:87:1b:00:1c:
19:5e:7e:aa:c6:41:a7:ed:40:d3:bd:ac:03:84:ff:
96:b6:fb:22:ff:b8:a2:1b:bd:51:e2:5d:f4:8a:bb:
3f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CC:D1:3A:6F:E1:DC:C7:D9:2E:BC:8F:C7:89:27:5E:57:68:B9:FC
X509v3 Authority Key Identifier:
keyid:14:0E:CB:72:FF:00:39:8D:36:42:EC:23:F2:12:AD:A0:EA:72:06:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FA7Lcv8AOY02Quwj8hKtoOpyBm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e70035-b69a-446a-8de4-270e72af21a9/1/3czROm_h3MfZLryPx4knXldoufw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e70035-b69a-446a-8de4-270e72af21a9/1/FA7Lcv8AOY02Quwj8hKtoOpyBm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.59.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:69:35:ec:e5:00:fd:e0:97:47:1a:0a:63:24:87:80:e1:cb:
34:b1:39:1c:3d:03:34:af:e7:98:30:b5:37:52:41:f7:be:0e:
17:16:2a:6d:b5:3b:21:75:18:55:30:d1:1f:0e:5a:b6:9e:f3:
dc:12:a3:dc:e3:bc:89:57:b0:67:43:c4:8a:83:94:02:51:d7:
98:0c:2e:01:bf:54:95:27:01:04:c9:b2:ec:c3:0d:e5:dd:26:
6a:59:d8:a0:11:63:b0:a4:7a:4d:8b:bc:94:d6:0d:b5:10:8f:
9b:fb:e9:23:23:9c:09:04:b9:f0:d8:1c:a1:bd:4f:dc:f4:df:
dd:70:d6:33:1f:11:65:4f:dc:71:15:57:6c:11:4d:f5:35:33:
66:24:05:5b:07:ec:df:78:22:66:43:66:32:38:93:4d:4a:75:
de:8c:dd:7e:51:d0:59:dc:54:1e:72:69:3c:cd:44:ab:48:b0:
24:53:34:64:e2:69:72:86:c7:3d:98:df:3a:13:70:6e:cb:f3:
ce:92:aa:6c:05:c3:1b:d2:14:6f:d1:aa:49:5a:39:e7:ef:ec:
45:75:ce:1d:d7:ea:a8:b0:02:96:e1:0f:41:ae:75:5c:27:6d:
06:bd:15:37:fc:78:94:18:e2:f8:12:ac:5a:c8:c3:92:3d:cb:
8b:68:20:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3OFOE6MhqRlkox9QicrJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0MGVjYjcyZmYwMDM5OGQzNjQyZWMyM2YyMTJhZGEwZWE3
MjA2NmQwHhcNMjQwMTAxMTYzMDM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGNjZDEzYTZmZTFkY2M3ZDkyZWJjOGZjNzg5Mjc1ZTU3NjhiOWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7qdDNUv/HR15pCSfrTuZ7xTotJi
E1RdtThhjCsbPGOUi2MoBKJ7vWIo6n5xDjpliN/7wjOykAbY0piIr11AH+rOcVl5
2o4QmD+ZKW2Z8UnDWAfCpnWjNKYvSbNoHZ6QrxNKSgkIL8dxws8hSuVzGnxNQBWN
TY/jiYWORsQREUPE/fP6JD2+wPdifYFgyKnErG1+Sc81ed+7HGf73jgKxv8aRwE5
h2bKbvtyRDih1lxzhADSyZeGNrI+CEmFUGLGO/yk98PyKq/Baa+Hautnyh5dWWI1
575o5/jRlocbABwZXn6qxkGn7UDTvawDhP+Wtvsi/7iiG71R4l30irs/qQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN3M0Tpv4dzH2S68j8eJJ15XaLn8MB8GA1UdIwQY
MBaAFBQOy3L/ADmNNkLsI/ISraDqcgZtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkE3TGN2OEFPWTAyUXV3ajhoS3RvT3B5Qm0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNzAwMzUtYjY5YS00NDZhLThkZTQt
MjcwZTcyYWYyMWE5LzEvM2N6Uk9tX2gzTWZaTHJ5UHg0a25YbGRvdWZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9lNzAwMzUtYjY5YS00NDZhLThkZTQtMjcwZTcyYWYyMWE5
LzEvRkE3TGN2OEFPWTAyUXV3ajhoS3RvT3B5Qm0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH9g7MA0G
CSqGSIb3DQEBCwUAA4IBAQB8aTXs5QD94JdHGgpjJIeA4cs0sTkcPQM0r+eYMLU3
UkH3vg4XFipttTshdRhVMNEfDlq2nvPcEqPc47yJV7BnQ8SKg5QCUdeYDC4Bv1SV
JwEEybLsww3l3SZqWdigEWOwpHpNi7yU1g21EI+b++kjI5wJBLnw2ByhvU/c9N/d
cNYzHxFlT9xxFVdsEU31NTNmJAVbB+zfeCJmQ2YyOJNNSnXejN1+UdBZ3FQecmk8
zUSrSLAkUzRk4mlyhsc9mN86E3Buy/POkqpsBcMb0hRv0apJWjnn7+xFdc4d1+qo
sAKW4Q9BrnVcJ20GvRU3/HiUGOL4EqxayMOSPcuLaCCc
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:38 2025 by rpki-client