Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/u0PSoRtMQ3tjR1mRBG8plhyoAFA.roa
File: u0PSoRtMQ3tjR1mRBG8plhyoAFA.roa (raw, json)
Hash identifier: CwqFjIC2EwnX0NqqStDsEDV8seJNMsB2+690IN6TGOM=
Subject key identifier: BB:43:D2:A1:1B:4C:43:7B:63:47:59:91:04:6F:29:96:1C:A8:00:50
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193BADEC9187FADA7F36F4B7B19D8413325
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/u0PSoRtMQ3tjR1mRBG8plhyoAFA.roa
Signing time: Thu 12 Dec 2024 12:36:22 +0000
ROA not before: Thu 12 Dec 2024 12:36:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213737
IP address blocks: 31.58.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:de:c9:18:7f:ad:a7:f3:6f:4b:7b:19:d8:41:33:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 12 12:36:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb43d2a11b4c437b63475991046f29961ca80050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:42:2f:74:49:04:06:91:8c:e0:1c:f1:38:ce:
89:74:a1:b9:60:b8:76:7f:5b:d0:8b:fe:56:33:de:
14:40:92:cb:53:30:8c:aa:c0:93:35:ef:77:66:02:
98:7b:cc:90:36:dd:8f:2c:dc:e6:40:df:b5:48:6c:
cf:d7:00:d5:e2:c7:78:88:8c:0e:b9:e1:f5:6d:5d:
b0:00:ac:06:c9:66:3b:ec:33:4f:1a:8c:69:d3:dc:
fe:40:d1:ca:6c:49:ef:15:71:07:7a:6e:09:69:32:
78:81:30:fe:ac:50:49:26:2d:98:77:74:dc:30:21:
f0:da:15:1c:85:33:c4:06:50:f8:e0:75:8c:6e:25:
c3:09:30:83:14:e6:20:43:b0:c1:61:f9:d8:45:62:
b7:37:a2:ad:2e:f6:d9:11:c4:5d:3c:e7:c6:0a:41:
7b:46:06:d6:5e:f2:20:45:d9:2a:1e:55:14:03:fe:
b0:2d:14:e2:c9:21:b8:22:3e:f2:6b:b7:7b:20:2c:
bf:c2:23:0c:74:bd:d0:63:5a:e1:5c:81:bc:5e:ef:
6a:21:4c:09:29:eb:4b:c0:6d:cd:58:d0:11:b3:d1:
a3:70:de:8b:96:74:68:f3:93:28:cf:b2:d3:19:41:
28:bd:fa:87:f3:21:a2:ee:86:48:c7:c3:4a:90:42:
08:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:43:D2:A1:1B:4C:43:7B:63:47:59:91:04:6F:29:96:1C:A8:00:50
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/u0PSoRtMQ3tjR1mRBG8plhyoAFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.210.0/24
Signature Algorithm: sha256WithRSAEncryption
16:3d:0c:6e:41:4e:6e:80:a5:43:25:2d:36:de:fd:e9:0b:55:
44:48:47:9c:81:0a:13:5f:fd:0d:95:29:75:35:bc:48:2c:f0:
c5:49:f2:e0:92:4c:15:14:66:88:25:5a:fa:55:0a:25:45:55:
95:ae:3c:c7:87:36:40:20:e6:e4:8c:50:8e:16:c0:10:97:f6:
13:84:f2:f2:0f:c6:df:40:18:f4:4e:91:b1:89:db:9e:9f:56:
6b:b8:2f:9d:74:15:c5:24:68:b5:4e:87:31:8d:3f:4d:f2:8e:
06:5b:b1:2a:cb:fc:a1:90:58:63:35:13:dd:5e:7d:7a:4f:90:
08:54:a6:22:03:5c:21:9d:ac:c9:cb:15:2b:fd:84:d3:6c:c7:
cc:e4:21:6a:95:b0:4c:7c:c3:b5:8b:c5:da:89:b9:5a:70:12:
2e:09:ee:69:bd:15:b1:f0:aa:09:8a:57:ae:31:33:00:76:99:
a3:d4:d9:28:2c:fb:fc:e9:49:0b:3d:63:14:74:cd:ed:74:c1:
83:b2:90:7c:86:72:7a:41:52:b5:d9:93:93:ba:24:37:95:5c:
77:70:b8:a1:20:11:e1:ac:1a:5e:8a:39:88:9d:93:8f:b9:53:
ae:c8:b7:b3:ad:e8:61:13:0c:70:18:19:c0:32:c4:8e:d8:bb:
63:c6:4e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:28 2024 by rpki-client on console.sobornost.net