Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b7ee6c-af99-45af-9c34-4569de2644e2/1/IEjcC8DVm21ADsrL5No39ckv8zg.roa
File: IEjcC8DVm21ADsrL5No39ckv8zg.roa (raw, json)
Hash identifier: qt/hAYYbJXFPD6kC6gfVCkggUPGyylOe0mkJFNiRUB8=
Subject key identifier: 20:48:DC:0B:C0:D5:9B:6D:40:0E:CA:CB:E4:DA:37:F5:C9:2F:F3:38
Certificate issuer: /CN=8418e90c6deab04ad9d25dd116b1990cdbcd88f2
Certificate serial: BBBAA0
Authority key identifier: 84:18:E9:0C:6D:EA:B0:4A:D9:D2:5D:D1:16:B1:99:0C:DB:CD:88:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBjpDG3qsErZ0l3RFrGZDNvNiPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b7ee6c-af99-45af-9c34-4569de2644e2/1/IEjcC8DVm21ADsrL5No39ckv8zg.roa
Signing time: Sat 01 Jan 2022 07:03:11 +0000
ROA not before: Sat 01 Jan 2022 07:03:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 31.222.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12303008 (0xbbbaa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8418e90c6deab04ad9d25dd116b1990cdbcd88f2
Validity
Not Before: Jan 1 07:03:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2048dc0bc0d59b6d400ecacbe4da37f5c92ff338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:59:22:1b:fb:05:b2:2d:e9:ed:b4:da:71:
e2:7f:4e:45:cf:03:26:ab:86:11:a0:1e:63:60:00:
7e:3d:6b:fd:e8:32:ae:11:86:65:ce:00:c0:f0:5a:
99:a9:ba:08:dc:77:8d:b1:49:43:e1:1b:34:44:ee:
a8:d8:cd:d2:f6:e1:33:8e:24:e0:6b:d5:93:57:58:
f1:14:7b:33:05:03:c2:f3:1a:d7:6d:19:d2:1f:24:
62:5e:a5:66:88:3f:57:ce:1f:ff:19:8d:07:46:b7:
de:2e:b8:af:7a:34:fe:5b:59:10:c3:79:ec:6d:2c:
05:79:05:3b:fe:fd:e0:6c:df:60:f9:62:8a:48:bf:
02:75:03:a4:6b:7e:4a:cb:a6:85:ae:d0:c6:d9:f5:
3c:1a:fd:f6:98:1e:9c:2f:e2:51:dc:2c:5b:88:62:
f9:89:6e:ee:68:90:2a:e4:84:b0:da:ce:5d:18:40:
c9:91:41:5d:df:43:da:34:1a:d0:e7:be:49:9f:9d:
38:a8:d8:2d:13:4d:19:7e:18:88:ac:e4:da:94:f6:
be:91:8b:5f:74:9b:bb:3f:45:e6:3c:e9:49:d7:e7:
80:55:62:fc:27:ea:bf:b4:86:d0:24:25:f2:bd:b4:
01:ed:4d:ca:46:98:a5:5c:ca:8f:b2:a2:15:10:0d:
83:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:48:DC:0B:C0:D5:9B:6D:40:0E:CA:CB:E4:DA:37:F5:C9:2F:F3:38
X509v3 Authority Key Identifier:
keyid:84:18:E9:0C:6D:EA:B0:4A:D9:D2:5D:D1:16:B1:99:0C:DB:CD:88:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBjpDG3qsErZ0l3RFrGZDNvNiPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b7ee6c-af99-45af-9c34-4569de2644e2/1/IEjcC8DVm21ADsrL5No39ckv8zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b7ee6c-af99-45af-9c34-4569de2644e2/1/hBjpDG3qsErZ0l3RFrGZDNvNiPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.250.0/24
Signature Algorithm: sha256WithRSAEncryption
02:85:56:94:60:df:45:42:7d:5f:0e:6a:1a:a2:8e:f0:5a:f1:
ff:c4:96:cc:31:1e:7b:96:44:22:7b:b0:90:95:6c:c8:61:cc:
68:70:86:f3:eb:65:1f:7e:97:8d:0d:75:99:1f:93:1e:4c:eb:
10:bd:35:02:97:6b:34:db:04:57:6e:1d:0a:cb:ed:e1:a4:59:
b7:af:2d:72:4c:13:20:04:94:d4:79:2e:04:11:f0:a3:54:75:
01:c2:01:21:3a:76:00:3f:7a:33:b3:3e:20:79:ec:2f:26:c6:
39:87:ae:2c:5c:12:a4:d9:b8:25:b1:42:f2:fa:69:25:6f:60:
94:6e:3f:18:94:c4:21:97:9e:68:cf:64:0d:5d:66:95:0d:6d:
86:42:16:29:a0:1f:b1:5b:d7:53:da:14:de:30:32:06:e3:58:
3c:29:01:ab:94:75:48:66:50:b5:39:6a:49:9f:1d:52:27:4d:
81:2f:e3:89:b3:ab:b4:e6:a1:2e:31:a6:4d:27:56:b9:86:84:
f9:98:e6:be:e1:c3:3e:c2:79:0f:de:3a:14:64:a3:8c:91:28:
70:4f:fa:2e:28:bb:a5:ef:5b:86:94:e5:03:0e:1f:dd:ce:85:
bd:ae:12:36:0b:2a:5e:63:15:bd:74:0c:01:e6:cf:dd:83:07:
8c:af:c3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:34 2024 by rpki-client on console-ams.rpki-client.org