Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/08111e-4a14-4835-aa3e-054a81fec4c8/1/O_EL4vgUqTR-uNf2WmzM7iEQu9o.roa
File: O_EL4vgUqTR-uNf2WmzM7iEQu9o.roa (raw, json)
Hash identifier: E3QrP2xdTSdtZFIn4HYXrfdWHcNIwFAbmpVNx/w+z/U=
Subject key identifier: 3B:F1:0B:E2:F8:14:A9:34:7E:B8:D7:F6:5A:6C:CC:EE:21:10:BB:DA
Certificate issuer: /CN=947d4e429078e59dd4183fedc15d6e3ce9eee6f6
Certificate serial: 0184C83FE304D704C82746A66A75EF7ED57C
Authority key identifier: 94:7D:4E:42:90:78:E5:9D:D4:18:3F:ED:C1:5D:6E:3C:E9:EE:E6:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH1OQpB45Z3UGD_twV1uPOnu5vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/08111e-4a14-4835-aa3e-054a81fec4c8/1/O_EL4vgUqTR-uNf2WmzM7iEQu9o.roa
Signing time: Wed 30 Nov 2022 11:15:40 +0000
ROA not before: Wed 30 Nov 2022 11:15:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42375
IP address blocks: 31.222.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c8:3f:e3:04:d7:04:c8:27:46:a6:6a:75:ef:7e:d5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947d4e429078e59dd4183fedc15d6e3ce9eee6f6
Validity
Not Before: Nov 30 11:15:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3bf10be2f814a9347eb8d7f65a6cccee2110bbda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:71:b9:4b:4b:6a:88:68:c7:98:25:c2:bb:7a:
5a:5d:a5:88:d0:d4:99:76:43:b9:9c:df:86:0d:32:
49:27:1b:84:8f:a3:d3:df:77:4d:71:35:41:3c:06:
85:d5:56:90:5a:91:cd:66:ac:94:a9:18:30:56:24:
a3:e6:89:08:70:13:7b:ab:46:78:15:2b:ee:10:19:
d0:07:42:ee:bc:c6:df:bc:50:4b:d8:a9:42:5b:6c:
e4:10:85:8e:25:b1:b2:b0:fe:e4:4f:db:95:c7:96:
1a:2d:26:ac:6c:51:4d:04:e6:4d:7f:9c:65:70:04:
75:2c:dd:2a:17:45:59:d5:26:8f:7e:89:b8:a0:06:
f7:8e:de:17:c7:36:12:d3:e4:31:98:06:d6:95:9c:
69:59:7a:19:d9:4a:5e:e8:e1:77:a7:b3:18:32:26:
ea:65:89:f2:09:fa:96:e9:aa:e9:95:eb:86:3a:dd:
70:94:1f:d8:55:27:37:eb:b4:10:7a:58:8c:9b:6f:
14:ae:53:a0:70:eb:64:e1:43:29:e5:3f:0f:f9:24:
b2:62:9f:4f:20:28:be:83:69:0e:fe:57:4e:ed:90:
3f:59:55:7c:94:84:40:36:20:d4:d2:8d:bc:b0:c5:
2b:0c:c7:b7:f1:fc:0d:4f:59:24:d2:f0:bd:a1:c0:
56:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F1:0B:E2:F8:14:A9:34:7E:B8:D7:F6:5A:6C:CC:EE:21:10:BB:DA
X509v3 Authority Key Identifier:
keyid:94:7D:4E:42:90:78:E5:9D:D4:18:3F:ED:C1:5D:6E:3C:E9:EE:E6:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH1OQpB45Z3UGD_twV1uPOnu5vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/08111e-4a14-4835-aa3e-054a81fec4c8/1/O_EL4vgUqTR-uNf2WmzM7iEQu9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/08111e-4a14-4835-aa3e-054a81fec4c8/1/lH1OQpB45Z3UGD_twV1uPOnu5vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.251.0/24
Signature Algorithm: sha256WithRSAEncryption
32:2a:ef:3f:fd:62:3d:ce:46:7c:77:ad:e4:c7:f9:94:9e:d5:
d1:da:e6:2f:9a:fd:84:3e:bb:dd:b5:79:a5:a5:18:02:f0:00:
47:86:3d:bd:16:23:a4:e8:83:f7:e5:67:91:d8:eb:1a:0b:0a:
a4:89:6b:cd:ce:ff:40:cd:6c:ec:4a:63:b5:c6:7a:a0:fc:bf:
b6:7e:ae:7e:5f:2a:b5:76:47:5b:b5:5a:75:30:ab:f1:8c:1c:
f0:ea:af:83:5b:84:5a:1e:61:8e:83:5d:46:6e:8e:e5:48:83:
90:16:55:7b:53:26:4f:3b:73:c9:97:f9:3d:4d:81:fc:9d:16:
f4:65:da:17:2d:dd:3c:e1:84:d8:dd:21:e9:4d:0d:3b:b0:9a:
fd:5b:1a:25:7e:60:ae:c7:bd:50:a5:ae:42:16:60:83:05:dd:
10:9d:96:b1:74:40:cd:bf:ff:1a:73:0c:0a:61:ed:7d:8e:2b:
ce:a2:f3:09:0b:e7:e2:2c:e2:f0:05:f5:c7:f8:64:5d:f1:10:
96:b7:87:bc:e8:7d:ff:8b:b0:d5:a8:2d:a8:fa:73:c6:8d:12:
54:6b:50:93:67:a2:df:7e:f2:7e:9f:f3:24:fc:02:8f:5b:dc:
bc:00:2b:ad:40:56:d0:f2:96:80:fc:a2:3d:de:06:8b:3d:c8:
ba:54:60:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:34 2024 by rpki-client on console-ams.rpki-client.org