Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/de33ac-bf6a-4c50-97c4-93ab5ab261b2/1/op_om-1Rh64s0KOj96owZktc1xA.roa
File: op_om-1Rh64s0KOj96owZktc1xA.roa (raw, json)
Hash identifier: fWEDujKci2b0OldZU1a4XLCwJ0HJNLTN8Jy3Sosmv4U=
Subject key identifier: A2:9F:E8:9B:ED:51:87:AE:2C:D0:A3:A3:F7:AA:30:66:4B:5C:D7:10
Certificate issuer: /CN=1f44878ce4969120575ef049c9d6b9148c29db5e
Certificate serial: 018481974001D20DD6FB3C6AF5E14565A2A3
Authority key identifier: 1F:44:87:8C:E4:96:91:20:57:5E:F0:49:C9:D6:B9:14:8C:29:DB:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0SHjOSWkSBXXvBJyda5FIwp214.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/de33ac-bf6a-4c50-97c4-93ab5ab261b2/1/op_om-1Rh64s0KOj96owZktc1xA.roa
Signing time: Wed 16 Nov 2022 17:58:04 +0000
ROA not before: Wed 16 Nov 2022 17:58:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44149
IP address blocks: 31.222.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:81:97:40:01:d2:0d:d6:fb:3c:6a:f5:e1:45:65:a2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f44878ce4969120575ef049c9d6b9148c29db5e
Validity
Not Before: Nov 16 17:58:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a29fe89bed5187ae2cd0a3a3f7aa30664b5cd710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6e:35:a9:18:5b:d5:07:18:33:3a:2f:ab:5c:
24:c1:80:56:ee:db:ab:ce:6f:b4:f7:92:f7:e1:97:
a4:3d:63:e0:87:d8:c3:eb:98:3f:6b:26:6a:83:a4:
29:cf:46:8e:59:44:a3:3c:a2:14:49:6f:05:d2:a3:
43:ed:f4:15:d5:f9:22:03:08:b0:89:88:a0:7e:17:
33:fd:46:4f:3f:e8:b2:1a:13:11:9e:f6:b3:bc:d2:
61:09:fc:56:0e:f1:66:33:40:5f:bd:8b:51:67:5a:
c1:9d:d1:63:4e:4d:1f:a3:91:3e:29:0c:ea:fd:42:
e3:b3:c5:a9:14:b2:2e:94:89:d7:1a:5b:98:ed:9f:
0c:b9:0c:72:ff:71:fc:be:20:8c:cd:41:a5:82:d4:
57:f4:b4:bb:8e:db:3f:18:0a:b9:ef:9e:e0:b1:30:
38:fa:9d:f1:52:1f:8d:f0:c4:b6:f2:10:d1:30:7b:
19:c4:dc:84:f1:38:fe:45:a2:40:2f:da:bd:79:b6:
90:be:91:a0:92:4d:9a:9d:69:82:f1:c8:a2:c1:13:
3c:76:e6:a5:79:54:ba:d2:f3:a0:a3:68:9a:1a:77:
eb:b3:92:a4:ed:84:bd:d7:d7:5d:c1:c5:3b:d1:ec:
e1:39:88:4f:b4:24:7c:95:3e:d9:c5:40:91:0f:53:
70:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9F:E8:9B:ED:51:87:AE:2C:D0:A3:A3:F7:AA:30:66:4B:5C:D7:10
X509v3 Authority Key Identifier:
keyid:1F:44:87:8C:E4:96:91:20:57:5E:F0:49:C9:D6:B9:14:8C:29:DB:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0SHjOSWkSBXXvBJyda5FIwp214.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/de33ac-bf6a-4c50-97c4-93ab5ab261b2/1/op_om-1Rh64s0KOj96owZktc1xA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/de33ac-bf6a-4c50-97c4-93ab5ab261b2/1/H0SHjOSWkSBXXvBJyda5FIwp214.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.224.0/24
Signature Algorithm: sha256WithRSAEncryption
76:65:a5:b6:7f:44:20:83:e2:be:af:2e:f5:60:97:6f:20:88:
15:87:d3:84:83:e3:eb:3c:76:42:3a:4f:6f:99:77:c9:d8:3e:
c6:14:cb:3d:1c:a5:f1:16:13:0e:7f:f8:21:f6:92:9a:80:a8:
8e:70:e7:be:c6:d5:ba:f8:37:84:6b:bc:7b:51:64:53:24:d1:
ca:1a:8f:3d:99:00:42:01:6d:df:08:ca:d4:84:09:47:74:9c:
36:9e:99:83:e4:b8:4b:b0:f5:ae:72:a0:d4:9e:19:77:a7:12:
fc:ea:b7:1e:21:ee:a4:09:b6:c0:f7:e3:68:80:56:2f:cf:d5:
62:ce:61:3c:9e:9d:02:9c:c7:56:fc:47:1e:f2:0f:57:7c:5f:
3e:ba:0d:99:43:85:f8:d0:f1:00:76:02:ba:02:09:bc:34:2a:
59:17:75:75:ec:d0:7b:a3:2d:a8:1a:66:d9:1b:79:ca:32:c9:
fd:be:40:2c:c5:d5:c0:cb:9e:43:d7:70:90:05:0b:be:b9:c4:
76:11:b1:05:92:8d:f5:7c:20:47:bb:8f:bf:4c:15:6c:a5:7e:
3c:d6:c7:4f:24:a2:0b:3e:f0:ee:2f:f6:54:c5:cb:5b:04:28:
40:b3:29:53:b6:ac:ac:eb:be:3d:26:b6:e4:0d:a5:2a:60:a2:
21:39:3b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:45 2024 by rpki-client on console-fra.rpki-client.org