Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/afFk6r19IXKf522HzHXRirOX3Sg.roa
File: afFk6r19IXKf522HzHXRirOX3Sg.roa (raw, json)
Hash identifier: GEWV18fyTXZ8sgk1viM7wMvjn+KM79RG7TMn8pG4eAA=
Subject key identifier: 69:F1:64:EA:BD:7D:21:72:9F:E7:6D:87:CC:75:D1:8A:B3:97:DD:28
Certificate issuer: /CN=9173a7bb8dd405fd01bc2c8dc3c2c13267fa06e5
Certificate serial: BEB25E
Authority key identifier: 91:73:A7:BB:8D:D4:05:FD:01:BC:2C:8D:C3:C2:C1:32:67:FA:06:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXOnu43UBf0BvCyNw8LBMmf6BuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/afFk6r19IXKf522HzHXRirOX3Sg.roa
Signing time: Sat 01 Jan 2022 02:53:31 +0000
ROA not before: Sat 01 Jan 2022 02:53:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 31.222.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12497502 (0xbeb25e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9173a7bb8dd405fd01bc2c8dc3c2c13267fa06e5
Validity
Not Before: Jan 1 02:53:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69f164eabd7d21729fe76d87cc75d18ab397dd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:7b:f2:da:36:a7:ac:c1:5d:80:02:33:fa:
62:64:53:ae:cc:e7:90:ec:55:aa:81:e4:59:0e:8c:
38:5d:89:48:d9:61:58:04:cf:11:fb:3e:ea:13:c9:
6a:d5:d9:50:fa:35:19:f6:d5:93:f0:fd:9d:ab:53:
e2:65:44:07:19:31:dc:d3:4a:5e:be:84:38:9e:92:
d2:88:4a:9b:84:cf:85:17:ae:93:77:a9:f4:5a:5a:
f1:8f:19:64:fe:09:21:35:e2:a8:e8:00:46:40:e3:
ab:68:66:e8:56:00:6e:3a:82:8d:8a:31:a4:40:6f:
9f:e9:4e:f7:24:54:36:e8:5b:3d:3a:d9:b2:17:19:
f7:54:d7:40:00:21:fa:53:41:ce:ba:36:56:75:94:
f8:0c:40:b0:82:e2:5c:3e:7c:35:3e:82:f3:e7:3b:
34:9a:e4:44:3f:83:69:70:ec:f5:11:64:98:7d:29:
b6:e8:58:e5:58:7c:73:92:fd:2a:88:d7:17:a3:64:
08:30:a3:bf:e3:a1:53:ee:e2:30:15:e4:2d:2d:b7:
44:9e:84:21:97:f3:5f:42:e0:ca:7f:6c:68:99:0d:
56:95:e3:cf:ce:71:38:84:75:0c:fc:8d:bc:a7:47:
7e:d1:10:5a:14:ef:cc:66:0e:05:a8:05:e4:78:f5:
24:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F1:64:EA:BD:7D:21:72:9F:E7:6D:87:CC:75:D1:8A:B3:97:DD:28
X509v3 Authority Key Identifier:
keyid:91:73:A7:BB:8D:D4:05:FD:01:BC:2C:8D:C3:C2:C1:32:67:FA:06:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXOnu43UBf0BvCyNw8LBMmf6BuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/afFk6r19IXKf522HzHXRirOX3Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/kXOnu43UBf0BvCyNw8LBMmf6BuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.234.0/24
Signature Algorithm: sha256WithRSAEncryption
96:ef:0b:8f:60:6e:cd:52:eb:e8:92:5f:bc:cd:93:8b:82:91:
75:8b:19:65:29:95:95:fd:cf:23:4f:a9:bb:9f:7f:33:21:f9:
60:a8:77:fa:dc:34:f1:52:4b:67:00:71:a5:b8:ff:f6:df:61:
cd:ef:d4:d9:45:c9:d6:3c:49:f2:aa:0e:e6:e0:8f:05:b9:78:
e5:53:d4:69:68:ca:5e:2c:81:bf:81:89:34:37:8d:30:fb:9b:
01:70:36:07:f3:22:57:22:e8:61:32:f3:d4:bd:d8:76:14:b7:
05:6d:37:ff:55:78:77:58:90:91:99:a9:44:b3:cc:1f:88:ff:
92:72:45:d0:fc:ef:ae:26:4c:c2:5b:3b:f2:66:b1:ca:53:f5:
12:7d:84:15:b4:c2:92:14:01:da:8a:2b:70:97:4f:cc:c3:c2:
ed:52:9f:12:8f:b8:58:00:14:5e:39:2d:6c:47:5c:f8:78:63:
6a:dc:0c:3f:5d:32:14:88:73:b3:97:21:30:08:5b:1a:23:89:
ee:35:74:fe:fc:c6:33:e1:70:ac:13:5b:8b:59:e9:2e:cd:bd:
c8:61:43:88:6e:5f:9d:da:24:72:65:f6:15:09:32:73:63:c0:
16:6c:87:e4:ce:49:2e:7f:80:45:23:12:21:83:eb:bb:a8:47:
90:8e:a1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:06 2025 by rpki-client