Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b28317-8aeb-43be-8ed3-44a6953bc447/1/hQIXwoJhxQusbVBk3ixGNXG9TkU.roa
File: hQIXwoJhxQusbVBk3ixGNXG9TkU.roa (raw, json)
Hash identifier: 4O8KGQWNdcbA2yX09zN263Uah7ODQINF2QTPAv6e97Y=
Subject key identifier: 85:02:17:C2:82:61:C5:0B:AC:6D:50:64:DE:2C:46:35:71:BD:4E:45
Certificate issuer: /CN=54d8427752e12e80c9e9b590e397abe7f3cadd1f
Certificate serial: 0212468D
Authority key identifier: 54:D8:42:77:52:E1:2E:80:C9:E9:B5:90:E3:97:AB:E7:F3:CA:DD:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNhCd1LhLoDJ6bWQ45er5_PK3R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b28317-8aeb-43be-8ed3-44a6953bc447/1/hQIXwoJhxQusbVBk3ixGNXG9TkU.roa
Signing time: Sat 01 Jan 2022 14:56:00 +0000
ROA not before: Sat 01 Jan 2022 14:56:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 31.40.196.0/24 maxlen: 24
31.40.199.0/24 maxlen: 24
31.40.198.0/24 maxlen: 24
31.40.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34752141 (0x212468d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d8427752e12e80c9e9b590e397abe7f3cadd1f
Validity
Not Before: Jan 1 14:56:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=850217c28261c50bac6d5064de2c463571bd4e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:47:c0:33:09:e7:85:03:08:dd:6b:ce:f6:5a:
93:9c:cd:ff:ac:20:e9:15:18:b5:10:14:8a:53:df:
7c:05:3a:8f:a3:cf:bc:1d:83:86:4c:67:04:83:40:
9a:4e:83:e3:59:58:01:e3:26:10:c3:ed:6f:43:e4:
c2:39:8d:3c:81:8c:c5:69:4a:9d:e1:e8:c1:7e:5b:
5a:42:44:53:3c:76:78:1a:fa:e4:fe:b3:8c:2b:c3:
3b:d1:e6:f2:73:84:d7:36:28:79:8e:08:ac:27:14:
8b:15:cd:70:5f:f4:c9:3b:10:55:19:63:91:91:41:
4c:f2:9d:dd:b7:79:8d:7f:48:6b:d9:e8:bc:15:b2:
68:a1:57:2a:bb:60:73:82:d3:c1:b6:f4:17:03:29:
24:46:16:0d:e3:10:0d:87:38:27:c1:af:4b:0b:5d:
63:0c:d4:81:44:8f:48:42:04:c7:79:96:6c:f6:0a:
3b:07:cf:31:09:f6:48:68:8e:c2:f9:29:a3:02:f2:
21:f7:47:f7:ab:54:3d:d9:09:c4:ce:eb:22:cf:67:
e7:f6:17:51:e3:6c:2a:31:be:b9:97:01:93:2e:ee:
57:37:4d:52:9c:cf:da:15:3c:7e:d1:4f:c9:ea:e5:
6a:50:47:41:cd:b3:e7:7c:e1:21:0b:26:e2:26:c3:
df:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:02:17:C2:82:61:C5:0B:AC:6D:50:64:DE:2C:46:35:71:BD:4E:45
X509v3 Authority Key Identifier:
keyid:54:D8:42:77:52:E1:2E:80:C9:E9:B5:90:E3:97:AB:E7:F3:CA:DD:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNhCd1LhLoDJ6bWQ45er5_PK3R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b28317-8aeb-43be-8ed3-44a6953bc447/1/hQIXwoJhxQusbVBk3ixGNXG9TkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b28317-8aeb-43be-8ed3-44a6953bc447/1/VNhCd1LhLoDJ6bWQ45er5_PK3R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.196.0/22
Signature Algorithm: sha256WithRSAEncryption
60:15:69:39:f9:33:da:ad:24:90:aa:e6:a5:1c:96:37:f1:ef:
39:7d:da:e0:76:65:f0:cb:5a:d2:01:1b:76:bb:88:69:35:26:
fb:17:6c:23:3c:30:39:74:df:3b:ca:e1:92:e2:90:36:1a:e2:
14:34:2e:a0:e8:99:f5:b4:f5:f4:85:72:e5:93:70:df:58:e8:
0b:00:ad:20:72:ab:69:a2:6e:70:fe:0d:a0:f3:73:74:80:fe:
f6:3c:d8:6f:83:d2:fd:80:ee:35:5e:4e:d1:17:e6:04:e7:b5:
3e:c0:31:13:79:48:ef:6c:e8:8f:5f:f5:8d:b6:5d:12:c4:55:
52:27:28:f4:c9:96:57:17:6b:6a:d4:bc:47:17:65:e2:02:34:
97:98:3f:74:f1:d9:84:50:d3:46:a6:44:4a:be:b2:bd:98:98:
e3:f4:33:82:ee:a3:e8:f6:f4:d9:dc:e6:4f:a9:1d:f9:17:28:
36:bf:4b:a0:e0:1a:77:87:6d:a2:ec:cb:c0:3f:a5:c4:20:e3:
4a:61:b4:56:73:76:4e:8e:2d:85:d9:0a:54:99:70:b0:e3:06:
3b:95:2f:11:78:fc:5f:4a:91:f2:a8:c2:eb:94:71:69:49:87:
6d:7b:9b:f6:70:ea:84:0c:34:df:a3:9b:f3:58:f7:80:00:44:
37:2a:70:3e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAhJGjTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NGQ4NDI3NzUyZTEyZTgwYzllOWI1OTBlMzk3YWJlN2YzY2FkZDFmMB4XDTIyMDEw
MTE0NTYwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODUwMjE3YzI4MjYx
YzUwYmFjNmQ1MDY0ZGUyYzQ2MzU3MWJkNGU0NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM1HwDMJ54UDCN1rzvZak5zN/6wg6RUYtRAUilPffAU6j6PP
vB2DhkxnBINAmk6D41lYAeMmEMPtb0PkwjmNPIGMxWlKneHowX5bWkJEUzx2eBr6
5P6zjCvDO9Hm8nOE1zYoeY4IrCcUixXNcF/0yTsQVRljkZFBTPKd3bd5jX9Ia9no
vBWyaKFXKrtgc4LTwbb0FwMpJEYWDeMQDYc4J8GvSwtdYwzUgUSPSEIEx3mWbPYK
OwfPMQn2SGiOwvkpowLyIfdH96tUPdkJxM7rIs9n5/YXUeNsKjG+uZcBky7uVzdN
UpzP2hU8ftFPyerlalBHQc2z53zhIQsm4ibD3+8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSFAhfCgmHFC6xtUGTeLEY1cb1ORTAfBgNVHSMEGDAWgBRU2EJ3UuEugMnp
tZDjl6vn88rdHzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZOaENkMUxoTG9ESjZiV1E0NWVyNV9QSzNSOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODkvYjI4MzE3LThhZWItNDNiZS04ZWQzLTQ0YTY5NTNiYzQ0Ny8x
L2hRSVh3b0poeFF1c2JWQmszaXhHTlhHOVRrVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkv
YjI4MzE3LThhZWItNDNiZS04ZWQzLTQ0YTY5NTNiYzQ0Ny8xL1ZOaENkMUxoTG9E
SjZiV1E0NWVyNV9QSzNSOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAh8oxDANBgkqhkiG9w0BAQsFAAOC
AQEAYBVpOfkz2q0kkKrmpRyWN/HvOX3a4HZl8Mta0gEbdruIaTUm+xdsIzwwOXTf
O8rhkuKQNhriFDQuoOiZ9bT19IVy5ZNw31joCwCtIHKraaJucP4NoPNzdID+9jzY
b4PS/YDuNV5O0RfmBOe1PsAxE3lI72zoj1/1jbZdEsRVUico9MmWVxdratS8Rxdl
4gI0l5g/dPHZhFDTRqZESr6yvZiY4/Qzgu6j6Pb02dzmT6kd+RcoNr9LoOAad4dt
ouzLwD+lxCDjSmG0VnN2To4thdkKVJlwsOMGO5UvEXj8X0qR8qjC65RxaUmHbXub
9nDqhAw036Ob81j3gABENypwPg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:25 2023 by rpki-client on console.sobornost.net