Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9e53a7-8bfc-4c1d-8148-9dcf33f0b2f0/1/qWOcqEQ1MX6JyLvwouypKhZJ5pU.roa
File: qWOcqEQ1MX6JyLvwouypKhZJ5pU.roa (raw, json)
Hash identifier: h9fS7/6v3CVcQ4h/piBlVX1IHxOATlK/eo9i8pQe5SI=
Subject key identifier: A9:63:9C:A8:44:35:31:7E:89:C8:BB:F0:A2:EC:A9:2A:16:49:E6:95
Certificate issuer: /CN=31a4b47402bb88411dc1509fd5c275fca09b1c09
Certificate serial: 018964C050A5EE4CC5195C55195CF9B1950E
Authority key identifier: 31:A4:B4:74:02:BB:88:41:1D:C1:50:9F:D5:C2:75:FC:A0:9B:1C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaS0dAK7iEEdwVCf1cJ1_KCbHAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9e53a7-8bfc-4c1d-8148-9dcf33f0b2f0/1/qWOcqEQ1MX6JyLvwouypKhZJ5pU.roa
Signing time: Mon 17 Jul 2023 16:47:52 +0000
ROA not before: Mon 17 Jul 2023 16:47:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 37.140.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:50:a5:ee:4c:c5:19:5c:55:19:5c:f9:b1:95:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a4b47402bb88411dc1509fd5c275fca09b1c09
Validity
Not Before: Jul 17 16:47:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9639ca84435317e89c8bbf0a2eca92a1649e695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d1:70:55:97:5a:56:e1:81:64:95:37:de:fa:
4a:1e:f9:43:5e:10:2d:85:77:e2:95:c4:0d:11:03:
ec:6c:fa:c0:25:cd:ff:71:64:9c:d3:54:ab:bd:87:
d7:35:fb:e9:2d:3c:b7:31:13:2d:bb:2e:37:1c:b0:
85:57:e0:31:77:40:41:e4:4b:cd:23:cf:54:94:67:
4c:91:c1:8e:9e:9a:ef:74:8e:0b:0c:33:d5:80:b5:
41:43:68:2b:8b:da:e8:eb:ba:8e:ed:4a:c5:ac:63:
af:6e:05:d6:3a:8c:a0:db:bd:4f:67:a9:7a:9b:56:
12:e5:cb:8a:7f:e4:a5:de:64:61:0a:08:e7:8f:6b:
bc:75:2c:43:0d:5f:83:02:b8:80:cb:06:56:4f:3a:
d9:f9:62:b5:e1:86:1d:f3:d5:ee:4e:c1:a3:fd:e1:
e9:56:b1:37:9d:a3:12:d2:ac:d0:8c:33:e3:39:b0:
d4:77:93:53:a0:f0:a8:2a:dc:91:34:cb:84:f1:7a:
f3:fd:77:33:0d:9a:19:8c:63:24:1f:a4:8d:f9:68:
db:a2:db:75:4f:55:f8:5d:51:29:96:e3:cc:2c:60:
98:87:08:69:23:63:8a:37:01:be:54:22:e5:f5:2b:
08:76:d2:81:37:b4:d0:7e:11:1b:6f:e1:17:a5:f8:
9b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:63:9C:A8:44:35:31:7E:89:C8:BB:F0:A2:EC:A9:2A:16:49:E6:95
X509v3 Authority Key Identifier:
keyid:31:A4:B4:74:02:BB:88:41:1D:C1:50:9F:D5:C2:75:FC:A0:9B:1C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaS0dAK7iEEdwVCf1cJ1_KCbHAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9e53a7-8bfc-4c1d-8148-9dcf33f0b2f0/1/qWOcqEQ1MX6JyLvwouypKhZJ5pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9e53a7-8bfc-4c1d-8148-9dcf33f0b2f0/1/MaS0dAK7iEEdwVCf1cJ1_KCbHAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.255.0/24
Signature Algorithm: sha256WithRSAEncryption
41:1f:ce:8e:54:34:b4:96:59:aa:b4:b3:f7:4d:2b:e1:e7:7e:
5f:d9:b8:5d:7a:55:24:00:f5:6b:c7:2d:64:58:5b:2b:03:66:
4c:b7:25:f5:96:c3:f1:0e:ae:72:5d:d9:64:32:d0:1a:95:0b:
26:ea:62:90:17:87:d7:04:71:36:63:64:c4:33:22:d8:b3:c6:
9b:a3:62:04:3b:73:4e:54:fd:c5:61:f6:73:70:e1:aa:bc:c4:
17:c0:9b:fe:4a:c7:f4:d1:37:39:0c:86:60:bf:d7:13:63:dd:
5b:c8:0d:b2:43:7d:22:2c:01:39:13:1e:63:69:b8:62:52:9b:
27:bb:6c:8e:60:c3:b6:56:83:07:9d:32:2b:23:01:06:af:6c:
4b:3d:33:7c:75:23:2e:fe:a3:c2:eb:41:48:f6:b8:e6:53:3d:
6d:cd:4c:5e:ce:28:71:2a:36:d9:fb:71:34:16:3f:1b:16:d8:
56:fa:4b:f7:c4:55:3a:d3:ac:dc:93:59:99:ea:31:0f:58:9b:
4c:38:d6:73:c5:b0:f5:a8:51:04:9b:13:12:d2:aa:3e:a7:53:
20:b3:9c:f0:39:88:c0:70:89:d5:51:5b:f9:89:bb:50:47:a7:
3c:2a:95:75:c6:fa:04:52:99:b9:25:22:27:0e:a7:5a:bf:ec:
a5:a9:da:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:52:22 2025 by rpki-client