Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/4d01JBCJh2Z8FVVNq0Kz98kR1v8.roa
File: 4d01JBCJh2Z8FVVNq0Kz98kR1v8.roa (raw, json)
Hash identifier: 7u3Xf6JoB8/t1iIodr/OuK+kePn2fgO2kXRJLBO3fh8=
Subject key identifier: E1:DD:35:24:10:89:87:66:7C:15:55:4D:AB:42:B3:F7:C9:11:D6:FF
Certificate issuer: /CN=55d06afd26d25223427a7a0d5f9e3159063fbca3
Certificate serial: 018CC500E1222009F30EB84FD3A723F1CABA
Authority key identifier: 55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/4d01JBCJh2Z8FVVNq0Kz98kR1v8.roa
Signing time: Mon 01 Jan 2024 12:30:18 +0000
ROA not before: Mon 01 Jan 2024 12:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204311
IP address blocks: 31.217.255.0/24 maxlen: 24
92.255.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:e1:22:20:09:f3:0e:b8:4f:d3:a7:23:f1:ca:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d06afd26d25223427a7a0d5f9e3159063fbca3
Validity
Not Before: Jan 1 12:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1dd3524108987667c15554dab42b3f7c911d6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3a:cc:b0:ef:37:47:89:1d:48:01:2c:f2:28:
22:82:58:07:54:26:19:f4:ca:af:e8:4e:ca:ca:4d:
16:09:bc:06:68:99:c9:74:25:e2:fd:39:56:88:18:
41:e9:9a:07:1e:88:dc:be:01:fe:4d:60:a2:95:04:
ec:53:0a:48:ee:e5:a4:d2:46:ff:e4:da:88:f3:34:
a8:3e:fc:5e:eb:4d:d2:fa:55:75:bc:2d:da:d5:b7:
d2:fc:dc:fb:f1:23:d9:4d:18:46:bd:3d:6c:41:66:
2b:c3:6e:55:c2:56:9e:05:d5:d5:bf:3b:ef:f2:ec:
cd:8d:51:2b:7f:9a:fd:50:4b:37:81:e6:16:cd:8d:
f4:85:38:f8:dc:54:05:29:80:56:74:59:4e:03:74:
73:a1:99:4c:a1:af:82:fa:10:38:d0:60:ed:7f:13:
a9:64:5f:b8:d1:a2:24:3f:4a:01:e7:80:85:74:07:
96:47:5a:75:f3:1e:ed:42:57:25:68:b0:fe:3f:2f:
02:10:9e:23:31:e2:c9:87:ed:b8:06:ae:60:d8:e4:
38:e5:9d:88:f9:6a:84:cf:6a:45:6c:86:45:89:a9:
50:af:24:85:e2:1d:e7:19:b6:2e:9c:51:03:79:24:
0a:fc:85:25:ed:31:25:b3:c7:e2:b9:a2:6a:1e:32:
d2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DD:35:24:10:89:87:66:7C:15:55:4D:AB:42:B3:F7:C9:11:D6:FF
X509v3 Authority Key Identifier:
keyid:55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/4d01JBCJh2Z8FVVNq0Kz98kR1v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.255.0/24
92.255.48.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ef:41:6a:5f:62:51:69:6b:e0:b0:41:3a:45:7e:4b:c6:1a:
9d:e9:d0:82:3e:3c:99:cf:d3:ff:2e:65:49:2b:c0:e3:d3:1c:
4a:b4:f7:68:78:6a:91:ec:b4:bb:f3:60:d4:25:64:82:48:32:
ae:c5:b8:3e:74:31:15:be:3c:42:66:d3:f4:23:04:8d:bb:38:
02:e9:46:0e:27:d6:8c:c4:ad:b6:19:82:f6:3d:a1:9c:fa:aa:
5a:5c:3d:b0:50:c0:da:dc:a9:80:49:26:b5:33:70:23:5b:46:
34:cb:a3:3c:50:8d:ba:22:2c:a1:0e:90:d6:a0:1e:56:d0:71:
3f:c3:ab:7d:1e:c2:7a:23:59:b4:3d:af:f1:d3:70:68:07:d2:
26:95:67:8b:c2:fb:e2:0c:e1:0e:e0:a3:87:c5:6e:0a:d4:25:
83:12:6c:0b:ec:17:fb:be:92:07:4d:92:64:96:a0:50:c2:0b:
1b:98:95:c8:57:fc:e2:88:98:dd:37:1b:bd:8a:f4:61:33:85:
c9:59:ab:49:84:77:38:c8:aa:13:f6:0f:4f:c7:35:5d:c1:81:
79:7e:a2:9a:9c:f7:ea:92:28:74:d2:67:dc:88:0c:94:1f:19:
c4:ca:94:93:0b:03:39:22:58:c3:3e:36:0b:9a:19:b1:52:7d:
14:f1:9a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:09 2024 by rpki-client on console.sobornost.net