Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/n7Nf4AKzK9J3rcbI4Sfplu6Jtuw.roa
File: n7Nf4AKzK9J3rcbI4Sfplu6Jtuw.roa (raw, json)
Hash identifier: spIJ4Dm/j6Q0UEUoQ2LWl9+FShNcIFiOSz5oVnrH4og=
Subject key identifier: 9F:B3:5F:E0:02:B3:2B:D2:77:AD:C6:C8:E1:27:E9:96:EE:89:B6:EC
Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Certificate serial: 01932B82C2DCEA51831DEE7826CAEAD1D904
Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/n7Nf4AKzK9J3rcbI4Sfplu6Jtuw.roa
Signing time: Thu 14 Nov 2024 16:30:09 +0000
ROA not before: Thu 14 Nov 2024 16:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214036
IP address blocks: 31.171.131.0/24 maxlen: 24
109.235.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2b:82:c2:dc:ea:51:83:1d:ee:78:26:ca:ea:d1:d9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Validity
Not Before: Nov 14 16:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fb35fe002b32bd277adc6c8e127e996ee89b6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9e:2d:70:78:96:5a:81:ff:05:bf:ba:f3:2e:
62:62:23:ed:11:58:30:e2:e6:0f:5f:92:5b:99:b0:
f2:0c:a4:0b:dc:36:a5:ba:f7:f6:51:dd:ad:37:2f:
64:b2:9b:5a:d4:b0:d8:77:9b:b0:5b:f7:a1:39:a8:
1a:52:4b:7a:2b:1f:25:14:1c:d5:22:f7:a2:8f:d5:
70:99:8c:63:d3:0c:e3:b0:78:23:4e:2e:36:c0:78:
3b:5e:36:32:99:46:a0:d5:36:41:d0:32:c6:fa:61:
8e:46:47:1f:4a:57:a8:fe:d1:42:25:e4:83:93:b9:
1f:a0:21:99:c6:23:5d:50:81:9a:b5:bc:4a:ab:e4:
64:2f:44:05:57:6e:86:c2:fa:a6:76:4a:35:26:0f:
87:82:f9:fd:76:34:89:2f:09:4c:af:eb:35:58:fa:
c1:46:7c:d2:b7:77:b3:ff:53:b1:0a:bc:0a:7a:d3:
1a:c8:22:61:11:c8:c1:f8:f7:5f:fa:ce:61:25:d6:
85:5c:75:2d:a3:0d:fe:ff:57:6b:53:3d:4f:ac:ed:
05:96:4d:87:ff:61:32:e7:e0:a0:43:df:a3:d1:9b:
c6:5d:c8:fd:1c:55:93:94:a6:a2:7f:a0:09:f8:ab:
7d:39:ef:52:37:9d:75:d3:5b:9b:25:20:a8:46:8e:
75:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B3:5F:E0:02:B3:2B:D2:77:AD:C6:C8:E1:27:E9:96:EE:89:B6:EC
X509v3 Authority Key Identifier:
keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/n7Nf4AKzK9J3rcbI4Sfplu6Jtuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.131.0/24
109.235.48.0/24
Signature Algorithm: sha256WithRSAEncryption
10:dd:73:50:8d:4f:39:31:52:74:cd:60:eb:04:9e:e6:6a:20:
95:fa:d5:7d:07:a2:a6:bc:a4:95:91:7e:1c:2c:db:5b:1a:40:
39:21:de:b4:e4:80:dc:df:7c:8b:5c:87:d1:a8:d1:32:86:e0:
21:05:be:4a:ce:68:7f:a8:13:99:43:1a:ef:23:ce:ec:29:87:
0a:56:2b:e3:7e:a6:3f:4e:70:8f:e0:b1:b4:41:2b:5f:45:2d:
b1:7a:88:0c:39:ac:d2:6a:2f:35:54:8e:3a:07:02:09:47:de:
22:03:c0:45:8d:ec:4b:22:27:60:cb:0e:b8:9d:9f:b4:f6:6c:
81:8e:d8:2e:66:07:40:21:74:6b:06:ca:1c:1f:35:16:3b:68:
e5:42:03:be:3f:24:3d:37:d8:f2:bf:30:9c:ea:84:87:04:78:
29:55:4f:f2:e6:56:33:db:6c:5c:79:e7:a1:9e:25:23:bd:d2:
05:61:8c:df:fd:a0:1f:de:bc:f1:00:db:1c:67:39:85:8f:53:
bd:48:3a:f5:c1:d4:a0:46:13:6f:c2:76:94:4b:37:90:d0:72:
83:4f:62:e7:af:7f:1c:67:e9:ff:2e:54:55:b2:d5:61:bc:67:
c9:6c:96:64:01:b7:cc:9b:f0:78:b3:42:76:a6:65:e7:d0:b9:
51:f4:c6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:12:51 2024 by rpki-client on console.sobornost.net