Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2b95ed-9882-42fa-a9f5-ad80e756d256/1/56u-Y27gqZZWKHMBfCXt8ROeo3Q.roa
File: 56u-Y27gqZZWKHMBfCXt8ROeo3Q.roa (raw, json)
Hash identifier: X9/sPgOmMkAgqgcWKnzZFNaNEkjl/bznx/cNNXrI9V8=
Subject key identifier: E7:AB:BE:63:6E:E0:A9:96:56:28:73:01:7C:25:ED:F1:13:9E:A3:74
Certificate issuer: /CN=2b3840b5d3c3525981c8616166679de920e350f5
Certificate serial: 018C53EB54048DFEE48ED67DA92B202E4480
Authority key identifier: 2B:38:40:B5:D3:C3:52:59:81:C8:61:61:66:67:9D:E9:20:E3:50:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KzhAtdPDUlmByGFhZmed6SDjUPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2b95ed-9882-42fa-a9f5-ad80e756d256/1/56u-Y27gqZZWKHMBfCXt8ROeo3Q.roa
Signing time: Sun 10 Dec 2023 13:29:40 +0000
ROA not before: Sun 10 Dec 2023 13:29:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199052
IP address blocks: 31.25.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:53:eb:54:04:8d:fe:e4:8e:d6:7d:a9:2b:20:2e:44:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3840b5d3c3525981c8616166679de920e350f5
Validity
Not Before: Dec 10 13:29:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7abbe636ee0a996562873017c25edf1139ea374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b5:d0:bc:a8:d2:4f:1b:9b:0c:8d:9d:86:d0:
d4:0b:95:d2:88:e2:c7:3d:f3:6b:56:25:73:8c:3f:
6a:46:5b:de:10:ef:b4:27:81:7f:db:59:1a:18:cc:
b9:65:5a:d5:1e:48:6a:9b:43:5e:57:50:24:0e:0d:
b7:c9:e6:60:e3:85:2c:d5:a6:0c:d1:cf:97:98:06:
a0:78:ac:65:66:bb:92:61:93:e2:58:4f:5e:14:9c:
f5:59:69:7f:da:a3:e1:5c:4c:c3:39:f2:53:1a:cb:
3c:30:23:c2:6e:50:e7:b2:fd:4f:ed:c6:8c:40:71:
b7:ef:13:29:f6:b8:2c:9d:9b:0d:01:ba:2b:cf:fa:
a5:6e:7e:73:3d:50:75:3e:e0:32:77:85:27:82:e6:
35:df:d1:3a:e5:df:49:bc:7e:4c:dc:77:80:2e:65:
b1:ec:81:ad:2c:89:b3:94:12:d6:41:ae:98:60:ea:
c4:9f:5a:4d:0e:4d:04:8e:3a:01:ef:10:6c:e1:dc:
fa:ae:02:74:6d:3a:2b:32:0a:c4:b5:0b:22:d5:58:
4b:f0:f7:b9:3c:68:74:61:dc:63:c9:12:24:a5:f4:
a5:2f:58:6e:9f:53:f2:05:8e:a3:87:0b:d0:fe:b1:
25:b2:8a:6e:3e:a5:a0:5f:ba:67:6e:ec:0e:61:af:
dc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AB:BE:63:6E:E0:A9:96:56:28:73:01:7C:25:ED:F1:13:9E:A3:74
X509v3 Authority Key Identifier:
keyid:2B:38:40:B5:D3:C3:52:59:81:C8:61:61:66:67:9D:E9:20:E3:50:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KzhAtdPDUlmByGFhZmed6SDjUPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2b95ed-9882-42fa-a9f5-ad80e756d256/1/56u-Y27gqZZWKHMBfCXt8ROeo3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2b95ed-9882-42fa-a9f5-ad80e756d256/1/KzhAtdPDUlmByGFhZmed6SDjUPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.138.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:b5:d1:f5:29:b5:e7:cd:91:9d:ce:d7:41:8d:7f:90:ff:76:
2d:18:33:f7:37:74:f5:f2:5c:a5:be:cc:8c:31:fd:50:9d:97:
aa:91:5d:59:f2:bd:0a:d8:10:f6:4b:ed:6d:21:98:ec:2f:83:
2e:25:f3:db:ea:30:3c:cd:39:17:0f:a8:c4:1c:52:d0:bb:8b:
85:36:4d:f9:83:66:ca:2f:d7:6c:91:58:7a:1f:84:3f:72:7a:
e3:11:08:b4:15:d7:11:65:20:89:bb:b6:81:6f:c4:2c:01:d1:
29:8f:8c:e3:00:4d:fa:bd:5b:f0:e7:86:2b:44:af:6a:99:b7:
ee:33:83:59:04:98:19:c0:3f:6d:6a:08:0c:5c:60:c6:54:d7:
08:ac:e0:b8:be:6d:c8:3d:ba:0a:d1:8a:29:86:bd:4f:c1:05:
8d:9d:bf:d2:31:c3:53:3a:e0:ac:7f:70:62:62:de:7b:08:5b:
3c:6c:ed:3e:af:0f:c5:9c:d9:aa:f7:2a:7a:18:89:47:e5:00:
bd:4e:8e:62:ce:f3:91:c1:4d:60:97:88:9d:d1:86:69:f8:d6:
b7:1b:f4:7d:84:a9:b8:5e:ce:6e:e8:61:35:3c:98:19:dd:b2:
80:68:dc:99:dd:b6:08:de:e9:21:db:83:c8:36:f3:bc:c1:a8:
8f:aa:00:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:54 2024 by rpki-client on console-fra.rpki-client.org