Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/595d8c-185a-4f86-a32a-60fa912615cb/1/NG0i1XxpYBJhct4pabwsroCEPJ4.roa
File: NG0i1XxpYBJhct4pabwsroCEPJ4.roa (raw, json)
Hash identifier: 3tnJzVTS3//H9/eCWB+AS2W2Cit8Q4z7oPwfwKTMeNU=
Subject key identifier: 34:6D:22:D5:7C:69:60:12:61:72:DE:29:69:BC:2C:AE:80:84:3C:9E
Certificate issuer: /CN=10ad1930af9eafdee10e7686849d41af7ef33439
Certificate serial: 018CC348BD0ED08FB40A788DB34D1DDA84AE
Authority key identifier: 10:AD:19:30:AF:9E:AF:DE:E1:0E:76:86:84:9D:41:AF:7E:F3:34:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EK0ZMK-er97hDnaGhJ1Br37zNDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/595d8c-185a-4f86-a32a-60fa912615cb/1/NG0i1XxpYBJhct4pabwsroCEPJ4.roa
Signing time: Mon 01 Jan 2024 04:29:33 +0000
ROA not before: Mon 01 Jan 2024 04:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198401
IP address blocks: 31.24.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:bd:0e:d0:8f:b4:0a:78:8d:b3:4d:1d:da:84:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10ad1930af9eafdee10e7686849d41af7ef33439
Validity
Not Before: Jan 1 04:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=346d22d57c6960126172de2969bc2cae80843c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:eb:03:04:81:5e:cf:de:3e:90:af:de:01:
15:b3:c2:c3:8b:3d:af:e1:11:3f:27:c2:f7:82:59:
46:15:46:41:74:af:aa:27:c1:86:ec:3c:82:61:da:
d3:72:9c:1f:8d:1e:68:b5:4a:82:90:dc:1f:93:a3:
68:69:f7:9f:db:5c:78:cf:cf:ec:1d:e6:95:4b:4e:
af:77:64:25:ba:c4:f6:47:af:55:40:84:9b:a4:86:
9d:05:71:2a:c7:06:56:1a:53:df:d9:84:da:61:68:
64:8d:b0:61:26:54:43:d2:30:f8:46:98:34:11:ed:
20:cd:a0:6f:53:d5:8c:0b:f8:77:7d:fa:19:b6:86:
28:e8:c2:c1:6b:e2:36:8d:0e:b0:0c:87:76:56:a4:
63:21:4f:cf:cc:f9:b8:f4:34:7d:a6:a5:96:40:56:
cc:50:ea:13:97:ba:76:bc:4b:b6:f3:1e:45:32:7a:
74:75:b5:00:9d:06:96:1e:c6:66:bf:e1:d0:8f:1d:
af:ce:62:75:99:52:98:fa:92:ae:d1:42:90:e8:76:
31:b8:ce:d9:35:6b:1f:2d:c1:d6:2e:c2:e6:1d:4e:
8c:ef:a2:45:47:02:28:60:be:23:dc:ff:f3:84:06:
26:f2:37:1c:b4:24:58:95:a2:17:75:10:bd:66:05:
8c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6D:22:D5:7C:69:60:12:61:72:DE:29:69:BC:2C:AE:80:84:3C:9E
X509v3 Authority Key Identifier:
keyid:10:AD:19:30:AF:9E:AF:DE:E1:0E:76:86:84:9D:41:AF:7E:F3:34:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK0ZMK-er97hDnaGhJ1Br37zNDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/595d8c-185a-4f86-a32a-60fa912615cb/1/NG0i1XxpYBJhct4pabwsroCEPJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/595d8c-185a-4f86-a32a-60fa912615cb/1/EK0ZMK-er97hDnaGhJ1Br37zNDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.83.0/24
Signature Algorithm: sha256WithRSAEncryption
21:63:53:d8:cd:f3:08:f0:01:f2:96:1c:01:3e:09:ec:70:57:
1a:02:f7:6c:fb:a8:5c:19:25:62:e9:e8:3e:86:65:70:27:88:
01:5c:e0:d1:d4:51:92:d9:3d:7d:b7:26:0f:8c:fb:75:4e:1e:
9e:22:4c:00:29:f4:25:ef:50:c9:4f:39:27:ad:23:e7:19:b4:
61:26:7f:3d:c3:bd:5f:b2:67:7b:11:2c:4f:94:67:3b:cd:b3:
44:37:77:8c:99:68:a1:f6:ca:69:0e:e9:b4:e5:75:b9:2a:e1:
2a:68:3a:fb:46:f4:df:1d:d4:6a:26:22:de:5d:07:6c:cb:5d:
52:e9:88:0c:4f:63:f0:c3:cb:e0:77:69:6a:50:fc:80:03:cf:
ad:3f:8c:d8:e6:be:31:f5:cb:01:ce:ed:38:12:da:29:7b:24:
5c:e0:5f:77:0c:0a:84:5d:23:7a:f1:24:bd:f6:d6:6f:f3:22:
ff:0a:66:a4:bf:01:59:b1:b3:b3:87:2b:93:a4:bb:28:6e:55:
49:35:75:e8:37:64:d2:0d:0e:00:fd:5c:1f:5b:50:35:2e:d8:
6e:09:ec:df:2f:b1:81:f2:11:ac:c2:dd:61:ed:32:9f:72:9f:
b3:99:d8:c5:ee:92:8e:f9:d4:1c:2f:b0:04:c3:90:03:a0:8a:
f8:32:c2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 08:59:29 2024 by rpki-client on console-ams.rpki-client.org