Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f2dc2a-bf3b-444f-97fa-5ca0cb3656c4/1/YTp7w5gIm21WaqszYbIDMig8DkE.roa
File: YTp7w5gIm21WaqszYbIDMig8DkE.roa (raw, json)
Hash identifier: KPuOY2qzq6+KXPBZFelA2eCLsopfwTqEmjaA0PjAlSA=
Subject key identifier: 61:3A:7B:C3:98:08:9B:6D:56:6A:AB:33:61:B2:03:32:28:3C:0E:41
Certificate issuer: /CN=b6a22e411470d3da2d707c60f28f6d5d210fa668
Certificate serial: 0188303D7745428204507CCEABA45CF33D4E
Authority key identifier: B6:A2:2E:41:14:70:D3:DA:2D:70:7C:60:F2:8F:6D:5D:21:0F:A6:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqIuQRRw09otcHxg8o9tXSEPpmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/f2dc2a-bf3b-444f-97fa-5ca0cb3656c4/1/YTp7w5gIm21WaqszYbIDMig8DkE.roa
Signing time: Thu 18 May 2023 19:01:54 +0000
ROA not before: Thu 18 May 2023 19:01:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202656
IP address blocks: 31.41.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:30:3d:77:45:42:82:04:50:7c:ce:ab:a4:5c:f3:3d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a22e411470d3da2d707c60f28f6d5d210fa668
Validity
Not Before: May 18 19:01:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=613a7bc398089b6d566aab3361b20332283c0e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5a:bd:4f:14:44:81:d5:c7:5c:a8:39:33:a2:
05:25:0b:c0:90:9c:e0:1a:59:5b:30:88:b2:3b:dd:
99:12:70:18:86:fe:18:ab:51:bf:96:c7:ac:8c:90:
d6:07:e6:60:53:4b:ac:4c:af:65:f9:a1:43:6d:94:
47:df:a4:ae:7b:f4:ad:f7:3d:66:9c:bf:40:d7:00:
77:9e:c2:28:9a:c2:f1:05:f7:5f:12:f6:0f:91:91:
ed:e6:57:1d:c6:86:56:32:1a:f6:37:d7:50:de:9b:
fa:86:58:5d:3b:52:13:bb:7d:4c:53:8c:13:ce:2c:
2e:45:a4:f6:97:5f:71:c6:54:17:fe:e7:3f:4f:b7:
0c:2a:65:00:9b:07:a2:c8:66:d6:8e:20:f7:97:78:
55:3b:78:6d:99:d4:e7:4f:26:84:a5:ab:3b:ca:13:
6f:0e:41:6b:18:b6:87:8e:77:a3:39:bf:11:a2:27:
70:8b:7d:d9:51:e9:09:08:8f:47:88:cf:e5:c4:13:
de:1f:ac:ff:7c:d1:fd:d2:87:be:cb:1c:c1:35:0a:
1a:59:8d:dc:05:71:af:b5:2a:10:93:15:ae:27:1f:
a9:64:d2:7d:8d:97:49:35:cd:f2:c4:20:70:66:12:
c6:7c:88:96:f9:35:6d:04:b0:19:22:26:a6:4a:c5:
7f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3A:7B:C3:98:08:9B:6D:56:6A:AB:33:61:B2:03:32:28:3C:0E:41
X509v3 Authority Key Identifier:
keyid:B6:A2:2E:41:14:70:D3:DA:2D:70:7C:60:F2:8F:6D:5D:21:0F:A6:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqIuQRRw09otcHxg8o9tXSEPpmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f2dc2a-bf3b-444f-97fa-5ca0cb3656c4/1/YTp7w5gIm21WaqszYbIDMig8DkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f2dc2a-bf3b-444f-97fa-5ca0cb3656c4/1/tqIuQRRw09otcHxg8o9tXSEPpmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.254.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:04:24:1f:37:73:9f:f9:39:de:e3:da:81:fb:b3:83:e4:ea:
23:1c:6b:19:2d:04:e3:8e:f4:27:9c:66:92:67:71:1a:2a:c7:
57:46:69:3b:41:5c:22:f9:53:e9:90:94:8c:86:fb:6b:7e:ad:
24:54:82:f4:93:da:36:e1:61:55:ad:ee:7b:dc:2f:7d:9d:69:
20:66:17:67:0b:6d:23:fd:7b:b8:44:61:ef:13:4b:6e:fa:11:
35:84:4f:14:49:a5:29:49:17:d8:72:2c:85:4a:e3:85:db:67:
4a:c7:f8:f6:cb:80:fe:a8:76:ec:87:2e:e8:17:96:93:ca:eb:
d1:d0:db:a9:b7:31:14:6a:cb:4c:51:00:85:31:8d:ca:9c:7e:
9a:d9:ee:d1:88:c8:55:94:81:d4:af:13:80:c0:a0:c4:70:62:
a9:f6:8e:a7:18:7c:64:e3:91:2f:1e:58:a7:e6:00:25:42:e4:
6f:5b:93:e3:9f:c2:a6:15:d3:fa:fb:7e:f3:f4:90:f3:13:42:
b8:cf:c7:c9:90:25:ad:b0:a2:d6:bc:d8:7b:3e:67:da:1a:8f:
bd:65:83:5d:af:2e:f8:16:f2:9a:26:82:33:f2:18:df:74:a9:
fd:b6:d0:87:12:2b:d8:78:33:a2:d0:a1:27:7f:7b:35:03:1e:
14:f5:cf:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:14 2024 by rpki-client on console-fra.rpki-client.org