Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/213e7c-7491-4843-8cb7-cec03f034816/1/4YXJtjq2fc-lgvnUfpC4678U7KE.roa
File: 4YXJtjq2fc-lgvnUfpC4678U7KE.roa (raw, json)
Hash identifier: ORiFzAnr1gbrIHfrGzFksS4DUweB7KLfeaN0k/TGm2w=
Subject key identifier: E1:85:C9:B6:3A:B6:7D:CF:A5:82:F9:D4:7E:90:B8:EB:BF:14:EC:A1
Certificate issuer: /CN=a525016c37e739326f4e95e4c5eb8855e12ed8b0
Certificate serial: CA3D23
Authority key identifier: A5:25:01:6C:37:E7:39:32:6F:4E:95:E4:C5:EB:88:55:E1:2E:D8:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSUBbDfnOTJvTpXkxeuIVeEu2LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/213e7c-7491-4843-8cb7-cec03f034816/1/4YXJtjq2fc-lgvnUfpC4678U7KE.roa
Signing time: Sat 01 Jan 2022 09:06:39 +0000
ROA not before: Sat 01 Jan 2022 09:06:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 31.222.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13253923 (0xca3d23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a525016c37e739326f4e95e4c5eb8855e12ed8b0
Validity
Not Before: Jan 1 09:06:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e185c9b63ab67dcfa582f9d47e90b8ebbf14eca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:e6:5b:64:85:8d:63:6d:c8:cb:d4:d2:8c:
29:ab:3d:cc:f8:44:6a:9b:f1:8a:49:91:2a:2a:21:
87:85:f1:18:a4:7a:e1:c0:bd:7d:d2:45:31:4b:f1:
29:c1:64:54:19:58:42:46:06:a7:85:47:6e:86:10:
9c:2d:0e:a6:db:2f:52:f6:4b:5a:f8:db:52:52:91:
9e:49:dc:8e:d0:ee:2c:4b:6f:b4:a7:4a:2e:38:75:
6d:e8:5e:68:0c:2b:ff:02:24:52:a4:72:0a:9e:09:
ef:2a:77:0e:0d:32:da:b7:12:ec:91:4a:9a:0c:7a:
ca:a6:d3:04:a7:68:98:11:58:a6:ae:03:81:59:ed:
86:94:bb:52:11:00:42:e8:8f:de:10:b3:6e:e9:e8:
a0:23:be:56:34:7f:c5:cf:a9:e2:9a:9d:4c:da:18:
06:f5:1d:fa:73:bf:04:a8:5c:52:dd:ec:02:e8:b9:
d8:7b:c8:8e:a7:fd:59:6a:3d:c6:e5:db:b9:64:d0:
76:d3:69:59:81:96:e0:9f:13:ef:8c:10:88:9f:b4:
79:5c:c2:6e:d0:1a:6e:4a:c9:8d:fe:e3:79:ad:c3:
fa:ca:7a:56:2b:5b:15:98:28:2b:03:6f:db:d2:3f:
5f:75:9f:10:9c:85:b8:d8:b1:b3:6f:e2:8b:f7:f7:
2e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:85:C9:B6:3A:B6:7D:CF:A5:82:F9:D4:7E:90:B8:EB:BF:14:EC:A1
X509v3 Authority Key Identifier:
keyid:A5:25:01:6C:37:E7:39:32:6F:4E:95:E4:C5:EB:88:55:E1:2E:D8:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSUBbDfnOTJvTpXkxeuIVeEu2LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/213e7c-7491-4843-8cb7-cec03f034816/1/4YXJtjq2fc-lgvnUfpC4678U7KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/213e7c-7491-4843-8cb7-cec03f034816/1/pSUBbDfnOTJvTpXkxeuIVeEu2LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.239.0/24
Signature Algorithm: sha256WithRSAEncryption
63:13:53:1d:73:e7:05:35:eb:ef:b0:b9:a8:34:ab:1a:c8:42:
44:a7:3c:32:02:8c:7f:0c:02:6a:25:f9:50:55:83:dc:9b:fa:
b2:56:15:b9:0b:38:9d:b2:f8:89:9e:c7:b9:e9:79:4d:ad:fc:
01:fd:69:28:c2:9d:38:1b:7b:cc:f4:14:e2:c8:0f:5a:5d:1b:
4a:6b:ea:3d:d3:e4:b6:05:d9:61:10:b1:6b:16:d6:df:25:b3:
19:f6:1a:71:80:75:ad:b8:b9:d2:1c:2d:3d:5a:1b:79:6d:42:
cb:3e:00:7f:fa:b7:71:c6:79:f6:c8:e3:cb:2d:de:8e:49:eb:
5c:42:bf:3c:14:f1:41:b5:63:b5:27:9c:43:c0:6e:3e:10:c6:
43:4e:16:76:e9:6d:56:8b:5d:9f:06:5e:a9:f7:6a:38:a5:28:
ad:fb:18:61:91:cf:c1:07:0d:4a:0d:f8:c8:98:bb:ae:5b:19:
9c:0a:ff:5b:2a:6d:79:a3:1d:12:59:f4:61:de:d1:c8:44:d9:
2b:8e:77:4b:93:d4:ea:5b:8b:67:d4:47:c7:0c:fa:f7:6b:72:
5d:da:d3:c5:fd:49:e0:62:5c:e4:02:c7:83:b5:c4:1c:e5:4d:
c5:b0:0c:15:8c:16:e9:7e:ac:9d:fd:79:33:6b:06:79:27:2e:
32:05:3d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:09 2025 by rpki-client