Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/213e7c-7491-4843-8cb7-cec03f034816/1/Gd4di5Edvj34yd9w4sO-Xd3oRU0.roa
File: Gd4di5Edvj34yd9w4sO-Xd3oRU0.roa (raw, json)
Hash identifier: /icRR4JgkGT/0BhqLdxAzrOOM4zBthkQmWSmIMXFRLY=
Subject key identifier: 19:DE:1D:8B:91:1D:BE:3D:F8:C9:DF:70:E2:C3:BE:5D:DD:E8:45:4D
Certificate issuer: /CN=a525016c37e739326f4e95e4c5eb8855e12ed8b0
Certificate serial: 01875C860F6790591F01996439C3E3B0E8A4
Authority key identifier: A5:25:01:6C:37:E7:39:32:6F:4E:95:E4:C5:EB:88:55:E1:2E:D8:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSUBbDfnOTJvTpXkxeuIVeEu2LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/213e7c-7491-4843-8cb7-cec03f034816/1/Gd4di5Edvj34yd9w4sO-Xd3oRU0.roa
Signing time: Fri 07 Apr 2023 16:21:42 +0000
ROA not before: Fri 07 Apr 2023 16:21:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 31.222.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5c:86:0f:67:90:59:1f:01:99:64:39:c3:e3:b0:e8:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a525016c37e739326f4e95e4c5eb8855e12ed8b0
Validity
Not Before: Apr 7 16:21:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19de1d8b911dbe3df8c9df70e2c3be5ddde8454d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:05:bc:d3:5c:46:17:5b:85:94:4c:14:88:4c:
e2:78:53:ab:fe:93:15:d5:60:d2:bd:08:13:ad:17:
9e:e7:4c:6f:60:83:e4:bc:a0:24:4d:fd:29:61:24:
f3:a8:cc:80:f1:f5:7c:01:c3:e0:4e:7e:ce:56:a0:
74:3d:f0:b6:0d:20:4e:8f:00:fd:57:46:9a:b7:a5:
fa:e9:c9:8a:6d:6b:c8:be:82:94:fa:91:98:a0:42:
98:c8:11:c5:a1:03:2c:bc:6f:8a:fc:f7:35:dc:04:
85:b3:97:43:ae:47:ba:f0:51:ce:c0:0e:0b:4b:9b:
92:58:16:9c:04:81:8f:68:08:0c:85:b2:44:5d:f2:
b1:f2:f9:5d:15:f4:16:a2:c9:b4:0c:43:26:17:b5:
fc:da:4e:18:3e:6e:b5:73:0e:9f:45:60:07:d3:f4:
1f:d2:c5:6d:b3:93:16:37:68:59:71:94:e8:78:5d:
5a:d1:f9:3d:91:a5:46:12:a1:4a:d2:f5:ad:cd:bd:
76:52:e7:6d:b3:76:89:ef:1e:fd:a6:21:18:c7:f5:
6d:85:1e:2d:12:a9:36:b9:02:c4:9d:b0:7a:8b:cc:
77:cb:ca:00:40:08:59:66:b5:68:0b:f4:28:1d:45:
3c:9c:0c:ce:5e:f4:11:18:d3:9a:9b:38:3b:46:bd:
58:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DE:1D:8B:91:1D:BE:3D:F8:C9:DF:70:E2:C3:BE:5D:DD:E8:45:4D
X509v3 Authority Key Identifier:
keyid:A5:25:01:6C:37:E7:39:32:6F:4E:95:E4:C5:EB:88:55:E1:2E:D8:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSUBbDfnOTJvTpXkxeuIVeEu2LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/213e7c-7491-4843-8cb7-cec03f034816/1/Gd4di5Edvj34yd9w4sO-Xd3oRU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/213e7c-7491-4843-8cb7-cec03f034816/1/pSUBbDfnOTJvTpXkxeuIVeEu2LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.239.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:d7:d8:18:45:d1:ec:db:50:02:16:a6:6e:f8:22:60:56:10:
37:50:3c:a7:a4:cf:cb:d2:20:b9:79:ea:61:f0:f9:39:fa:4b:
a4:66:2d:79:23:a1:dc:f2:6d:0e:c2:1f:90:40:fe:68:83:83:
c3:e8:11:ca:e0:42:1b:0e:55:c8:b8:0c:23:df:04:7f:be:ea:
07:93:9f:5c:2e:9b:96:83:28:7d:5a:56:c4:9f:7a:68:5c:9b:
11:ae:15:7d:83:0e:66:1c:4e:fb:1d:64:5a:fb:31:bd:29:f9:
f6:57:3f:cb:b8:be:7c:7a:90:ab:ea:61:42:82:cc:86:ad:71:
51:05:6c:99:08:50:11:f0:ff:01:51:77:5f:0d:84:01:45:31:
37:2b:fd:8a:5c:a7:78:8a:7b:07:db:dd:a8:d6:24:f7:2a:3f:
0d:3a:6c:f0:f0:dd:c2:43:40:7c:bb:0e:66:a3:b8:b0:d5:db:
ab:e6:4d:8a:e6:05:9b:2d:79:c4:93:95:32:f5:26:37:d3:46:
74:6f:c6:c6:bb:4b:e2:98:a5:66:b7:88:12:b4:31:24:7c:ea:
ed:42:92:fa:87:4f:f9:b6:a6:51:74:54:6c:ad:6b:cc:91:0e:
ca:58:f9:69:71:2c:62:06:69:61:23:d9:74:e6:d8:48:64:e0:
f4:1f:5f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:44 2024 by rpki-client on console-fra.rpki-client.org