Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/cyuAyOKvrED1eSLWN-rZXbSTI-I.roa
File: cyuAyOKvrED1eSLWN-rZXbSTI-I.roa (raw, json)
Hash identifier: Lsw8W9RTWG40vomtlMCawhflm71OAMKMu1d8VWgc9Ro=
Subject key identifier: 73:2B:80:C8:E2:AF:AC:40:F5:79:22:D6:37:EA:D9:5D:B4:93:23:E2
Certificate issuer: /CN=9173a7bb8dd405fd01bc2c8dc3c2c13267fa06e5
Certificate serial: 01856C01387E4D9570B499AABDD3328ED23A
Authority key identifier: 91:73:A7:BB:8D:D4:05:FD:01:BC:2C:8D:C3:C2:C1:32:67:FA:06:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXOnu43UBf0BvCyNw8LBMmf6BuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/cyuAyOKvrED1eSLWN-rZXbSTI-I.roa
Signing time: Sun 01 Jan 2023 06:24:57 +0000
ROA not before: Sun 01 Jan 2023 06:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 31.222.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:38:7e:4d:95:70:b4:99:aa:bd:d3:32:8e:d2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9173a7bb8dd405fd01bc2c8dc3c2c13267fa06e5
Validity
Not Before: Jan 1 06:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=732b80c8e2afac40f57922d637ead95db49323e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:8e:43:37:03:e7:c5:ce:62:85:9a:c1:4d:
78:16:de:36:68:ba:23:79:41:63:a0:35:90:51:8b:
87:8a:c5:cf:33:c3:40:31:5d:5f:03:22:d8:81:77:
66:fd:c6:94:08:f1:14:e4:d6:7d:33:f2:7c:dc:2d:
f6:9e:c8:b8:9a:af:28:d3:36:84:59:3a:f2:e1:b9:
83:68:d5:3a:f0:21:12:ba:60:78:f5:89:13:c4:87:
5a:89:f1:a7:21:15:94:87:96:75:12:ed:1e:42:ed:
63:51:d5:67:4a:c2:11:bb:84:df:2b:00:03:79:49:
d6:d7:97:e9:ff:29:3c:6a:ec:d3:b2:68:5a:c8:aa:
7a:76:57:27:63:5d:a1:17:19:de:68:9c:ed:4c:5c:
62:2f:79:8f:b2:39:66:da:4a:b9:96:6b:b5:52:c3:
c3:0a:f5:1a:57:af:f2:a7:df:b4:fb:a3:9d:db:a3:
41:cb:59:7a:a1:b1:cb:be:ee:eb:0b:b0:21:01:17:
b8:2e:3a:c3:b1:5b:ba:68:8c:a7:8a:7e:27:9a:a5:
a2:a7:f9:d9:65:a0:a5:9c:6f:4c:6a:81:b1:7f:4f:
55:76:28:9c:90:30:77:47:f7:1a:78:4c:c0:83:28:
4e:c4:24:8c:5b:bb:37:0c:a2:42:10:62:22:48:d6:
f9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2B:80:C8:E2:AF:AC:40:F5:79:22:D6:37:EA:D9:5D:B4:93:23:E2
X509v3 Authority Key Identifier:
keyid:91:73:A7:BB:8D:D4:05:FD:01:BC:2C:8D:C3:C2:C1:32:67:FA:06:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXOnu43UBf0BvCyNw8LBMmf6BuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/cyuAyOKvrED1eSLWN-rZXbSTI-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/kXOnu43UBf0BvCyNw8LBMmf6BuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.234.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:aa:4d:4b:f8:b9:61:e3:8f:59:79:96:7e:c3:61:60:ea:e5:
46:5f:f2:b6:4c:72:be:05:88:b8:77:e7:24:41:81:c8:56:a3:
eb:02:d8:5e:a2:0d:96:16:aa:40:dd:d2:59:82:60:55:0c:c1:
c2:09:99:2c:d5:92:9a:8a:5d:a0:81:ed:06:18:7c:0a:71:61:
a0:44:e6:d7:ad:b1:71:3e:94:1e:72:8c:65:78:6f:e4:11:0e:
52:b4:da:56:ca:2f:a3:14:94:5d:0f:76:2b:82:4c:f4:10:95:
24:fe:76:54:54:fd:b2:a9:6c:ce:5e:1e:bc:79:d5:76:8e:88:
17:2f:51:22:7d:7f:2d:4f:44:55:c0:d0:87:95:06:30:c2:01:
75:bb:b6:22:5b:12:39:67:a3:a1:27:86:41:22:f0:de:1d:0d:
76:63:03:91:79:ea:9c:1e:3b:6c:89:b8:5d:3b:86:cf:f8:15:
21:a2:a4:0e:cf:57:66:a9:38:9f:ad:c6:88:d4:8b:a9:31:30:
ad:3b:7c:5b:6c:6c:26:64:0a:18:f2:97:47:23:4a:a7:af:29:
62:87:7c:bb:74:28:66:a5:56:28:8e:56:09:82:ba:b8:60:91:
f4:f9:f2:d4:ad:85:e7:24:f4:12:4b:3a:37:b4:fc:86:f9:3a:
fc:22:66:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsATh+TZVwtJmqvdMyjtI6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNzNhN2JiOGRkNDA1ZmQwMWJjMmM4ZGMzYzJjMTMyNjdm
YTA2ZTUwHhcNMjMwMTAxMDYyNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzJiODBjOGUyYWZhYzQwZjU3OTIyZDYzN2VhZDk1ZGI0OTMyM2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryGOQzcD58XOYoWawU14Ft42aLoj
eUFjoDWQUYuHisXPM8NAMV1fAyLYgXdm/caUCPEU5NZ9M/J83C32nsi4mq8o0zaE
WTry4bmDaNU68CESumB49YkTxIdaifGnIRWUh5Z1Eu0eQu1jUdVnSsIRu4TfKwAD
eUnW15fp/yk8auzTsmhayKp6dlcnY12hFxneaJztTFxiL3mPsjlm2kq5lmu1UsPD
CvUaV6/yp9+0+6Od26NBy1l6obHLvu7rC7AhARe4LjrDsVu6aIynin4nmqWip/nZ
ZaClnG9MaoGxf09VdiickDB3R/caeEzAgyhOxCSMW7s3DKJCEGIiSNb5qQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHMrgMjir6xA9Xki1jfq2V20kyPiMB8GA1UdIwQY
MBaAFJFzp7uN1AX9AbwsjcPCwTJn+gblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1hPbnU0M1VCZjBCdkN5Tnc4TEJNbWY2QnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9iZWM2ODEtN2VjZi00ZmQzLWJmOTEt
Y2I3YmY1Y2I1MTM5LzEvY3l1QXlPS3ZyRUQxZVNMV04tclpYYlNUSS1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9iZWM2ODEtN2VjZi00ZmQzLWJmOTEtY2I3YmY1Y2I1MTM5
LzEva1hPbnU0M1VCZjBCdkN5Tnc4TEJNbWY2QnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH97qMA0G
CSqGSIb3DQEBCwUAA4IBAQC6qk1L+Llh449ZeZZ+w2Fg6uVGX/K2THK+BYi4d+ck
QYHIVqPrAtheog2WFqpA3dJZgmBVDMHCCZks1ZKail2gge0GGHwKcWGgRObXrbFx
PpQecoxleG/kEQ5StNpWyi+jFJRdD3Yrgkz0EJUk/nZUVP2yqWzOXh68edV2jogX
L1EifX8tT0RVwNCHlQYwwgF1u7YiWxI5Z6OhJ4ZBIvDeHQ12YwOReeqcHjtsibhd
O4bP+BUhoqQOz1dmqTifrcaI1IupMTCtO3xbbGwmZAoY8pdHI0qnrylih3y7dChm
pVYojlYJgrq4YJH0+fLUrYXnJPQSSzo3tPyG+Tr8ImYF
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:18 2025 by rpki-client