Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/oiEoOeeSJbAfo1BhA0mzzl2ZDzM.roa
File: oiEoOeeSJbAfo1BhA0mzzl2ZDzM.roa (raw, json)
Hash identifier: SkPspjjkF696omzWdwMo7RWQSXrpUR2M7jzWYAp7T1A=
Subject key identifier: A2:21:28:39:E7:92:25:B0:1F:A3:50:61:03:49:B3:CE:5D:99:0F:33
Certificate issuer: /CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Certificate serial: 018CC348F58CF72C67DF7A599CF626A33FFC
Authority key identifier: 8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/oiEoOeeSJbAfo1BhA0mzzl2ZDzM.roa
Signing time: Mon 01 Jan 2024 04:29:47 +0000
ROA not before: Mon 01 Jan 2024 04:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52213
IP address blocks: 31.131.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f5:8c:f7:2c:67:df:7a:59:9c:f6:26:a3:3f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Validity
Not Before: Jan 1 04:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2212839e79225b01fa350610349b3ce5d990f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:da:8b:ff:e1:3b:05:66:08:c5:56:dd:ae:71:
f9:77:48:81:0c:61:5d:b3:96:79:6a:11:c2:94:a5:
04:d6:8d:a2:b0:a6:c3:a6:60:88:de:f8:34:18:e1:
cb:ba:11:9a:af:84:a5:cd:10:0c:dd:1c:0c:12:45:
6f:4c:7a:e6:59:76:d4:2e:e3:1f:99:ad:4e:d3:c5:
4b:0c:9b:46:05:cc:30:74:f5:d2:1e:64:d8:64:76:
48:24:5c:9b:63:3a:05:80:cf:86:34:09:48:cc:30:
15:2a:1f:c4:f0:3f:cc:13:dc:1a:e8:95:35:17:d5:
a7:88:eb:18:e5:1a:c1:9f:16:ed:b8:f2:43:06:2c:
7a:6f:1a:08:67:eb:63:6f:e2:69:57:38:d9:c8:f0:
80:fc:35:b5:fd:42:b2:dd:50:a8:3b:fb:37:75:1d:
bc:74:63:42:db:9d:48:44:2e:6e:12:51:89:67:d2:
3e:b9:f7:20:d8:b1:e3:99:03:51:47:2b:e0:ba:a9:
6c:db:b7:bc:cc:e2:ef:f1:63:85:f0:07:45:ac:64:
02:0b:da:92:06:7d:11:b7:d2:72:af:9c:ed:6e:ed:
61:b1:58:0b:79:1f:34:f2:fd:78:ab:a8:84:4d:21:
2d:15:35:d6:63:cd:64:26:a4:2f:87:74:b6:d6:51:
01:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:21:28:39:E7:92:25:B0:1F:A3:50:61:03:49:B3:CE:5D:99:0F:33
X509v3 Authority Key Identifier:
keyid:8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/oiEoOeeSJbAfo1BhA0mzzl2ZDzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.139.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:67:1a:82:0b:80:a3:ad:06:8a:de:87:52:28:5e:3e:e3:10:
e2:c7:aa:48:72:aa:bf:8c:42:f8:35:47:d8:cf:b2:43:19:c5:
b8:08:a4:47:eb:d9:24:68:cf:c7:0c:f2:45:57:2a:e5:8a:43:
29:63:57:02:f8:a7:8f:5d:03:88:44:cc:0b:41:f4:1c:d6:7d:
ad:9c:9e:40:fb:18:a1:0b:61:cf:e9:4e:46:b1:33:a6:aa:c5:
a1:bc:23:67:21:7d:86:79:cc:07:f2:be:fb:fb:37:b9:b6:2f:
66:a7:cc:77:5c:63:83:0d:df:f4:66:56:6d:04:ff:fe:b2:16:
ba:57:42:ce:f0:2b:29:a4:37:42:2b:a5:b9:47:f0:77:32:21:
04:23:67:eb:b3:2b:a2:9c:be:9b:06:71:08:55:b4:b6:07:68:
3a:a8:cf:0f:28:95:c2:7c:21:48:28:b0:5e:2e:8e:5a:0d:95:
6d:29:11:60:45:71:28:6c:f4:15:c6:d2:7d:ce:bd:58:c8:2a:
31:6c:b4:b9:f5:5f:00:5f:6c:ff:43:24:bc:36:a2:3a:ce:1b:
7a:06:29:6d:a3:34:7a:d8:39:f1:d8:cb:0e:07:52:f9:0a:fd:
71:60:13:14:35:fd:f4:bf:5c:27:29:d6:e9:61:4a:e3:3a:ae:
f3:e6:39:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSPWM9yxn33pZnPYmoz/8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMTE3OWYwYTM1Y2YwN2MxNjI5NjcyNjYyODY2Y2EwMDFm
NzViZDMwHhcNMjQwMTAxMDQyOTQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjIxMjgzOWU3OTIyNWIwMWZhMzUwNjEwMzQ5YjNjZTVkOTkwZjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdqL/+E7BWYIxVbdrnH5d0iBDGFd
s5Z5ahHClKUE1o2isKbDpmCI3vg0GOHLuhGar4SlzRAM3RwMEkVvTHrmWXbULuMf
ma1O08VLDJtGBcwwdPXSHmTYZHZIJFybYzoFgM+GNAlIzDAVKh/E8D/ME9wa6JU1
F9WniOsY5RrBnxbtuPJDBix6bxoIZ+tjb+JpVzjZyPCA/DW1/UKy3VCoO/s3dR28
dGNC251IRC5uElGJZ9I+ufcg2LHjmQNRRyvguqls27e8zOLv8WOF8AdFrGQCC9qS
Bn0Rt9Jyr5ztbu1hsVgLeR808v14q6iETSEtFTXWY81kJqQvh3S21lEBKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKIhKDnnkiWwH6NQYQNJs85dmQ8zMB8GA1UdIwQY
MBaAFI4RefCjXPB8FilnJmKGbKAB91vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamhGNThLTmM4SHdXS1djbVlvWnNvQUgzVzlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lZThmOTAtZWYyYi00M2MwLWIwYzAt
NGNiYzY3MjE5YjRhLzEvb2lFb09lZVNKYkFmbzFCaEEwbXp6bDJaRHpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9lZThmOTAtZWYyYi00M2MwLWIwYzAtNGNiYzY3MjE5YjRh
LzEvamhGNThLTmM4SHdXS1djbVlvWnNvQUgzVzlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH4OLMA0G
CSqGSIb3DQEBCwUAA4IBAQCeZxqCC4CjrQaK3odSKF4+4xDix6pIcqq/jEL4NUfY
z7JDGcW4CKRH69kkaM/HDPJFVyrlikMpY1cC+KePXQOIRMwLQfQc1n2tnJ5A+xih
C2HP6U5GsTOmqsWhvCNnIX2GecwH8r77+ze5ti9mp8x3XGODDd/0ZlZtBP/+sha6
V0LO8CsppDdCK6W5R/B3MiEEI2frsyuinL6bBnEIVbS2B2g6qM8PKJXCfCFIKLBe
Lo5aDZVtKRFgRXEobPQVxtJ9zr1YyCoxbLS59V8AX2z/QyS8NqI6zht6BiltozR6
2Dnx2MsOB1L5Cv1xYBMUNf30v1wnKdbpYUrjOq7z5jlj
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:40 2024 by rpki-client on console.sobornost.net