Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/2bjollVF_E9PfIEMBNvCgkCCbjc.roa
File: 2bjollVF_E9PfIEMBNvCgkCCbjc.roa (raw, json)
Hash identifier: yqJqaNq2AY7dbYsIvPsnmZ8hTFHpHgMTzFSoQFiMeuw=
Subject key identifier: D9:B8:E8:96:55:45:FC:4F:4F:7C:81:0C:04:DB:C2:82:40:82:6E:37
Certificate issuer: /CN=6189c749502e55366a350bea97354f6997c3c321
Certificate serial: 01839D5EA310A2FF3AF535AB6158F72C9106
Authority key identifier: 61:89:C7:49:50:2E:55:36:6A:35:0B:EA:97:35:4F:69:97:C3:C3:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYnHSVAuVTZqNQvqlzVPaZfDwyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/2bjollVF_E9PfIEMBNvCgkCCbjc.roa
Signing time: Mon 03 Oct 2022 10:22:48 +0000
ROA not before: Mon 03 Oct 2022 10:22:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203355
IP address blocks: 171.22.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9d:5e:a3:10:a2:ff:3a:f5:35:ab:61:58:f7:2c:91:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6189c749502e55366a350bea97354f6997c3c321
Validity
Not Before: Oct 3 10:22:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9b8e8965545fc4f4f7c810c04dbc28240826e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:01:b5:5f:df:4b:47:07:6e:69:ec:2a:da:fd:
5a:2a:8a:d9:83:29:fc:f7:61:b7:cf:46:14:38:10:
92:bb:87:e9:80:c7:71:8f:95:59:f7:7b:f5:88:d6:
5c:75:c5:e9:98:17:42:ce:f4:65:ee:2f:a0:cf:32:
3b:95:88:f1:a2:fd:57:9c:92:e6:63:f9:c1:fb:34:
52:ad:75:0d:61:3c:ad:e3:74:66:14:d0:0e:71:a6:
9d:10:09:0b:3d:84:5d:71:87:90:be:8b:98:d2:e5:
f7:c2:bb:e9:35:30:ab:52:91:e4:87:55:53:e7:25:
16:bc:85:b0:d7:7f:87:22:03:cb:eb:a7:51:f2:56:
f0:ec:d3:0b:5f:36:65:2a:fd:a0:05:e9:11:1e:ef:
e1:61:b4:7d:b1:80:7b:a7:f7:db:41:a5:9c:9c:e2:
17:c1:6d:86:2b:fc:9c:62:b1:39:7e:d6:47:30:10:
55:db:ad:cb:25:34:14:1c:b2:f2:75:e8:c6:26:36:
e2:ef:8e:03:79:e8:3a:c7:bd:fd:b2:98:06:49:10:
5f:4e:06:9c:dd:da:6c:54:3f:52:93:6e:38:27:8f:
23:1a:5d:fd:b1:fd:d9:1a:9e:c2:f9:9d:ba:d5:70:
2d:97:dd:bd:ce:58:46:28:66:7c:ee:81:d1:5a:ce:
3b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B8:E8:96:55:45:FC:4F:4F:7C:81:0C:04:DB:C2:82:40:82:6E:37
X509v3 Authority Key Identifier:
keyid:61:89:C7:49:50:2E:55:36:6A:35:0B:EA:97:35:4F:69:97:C3:C3:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYnHSVAuVTZqNQvqlzVPaZfDwyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/2bjollVF_E9PfIEMBNvCgkCCbjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/YYnHSVAuVTZqNQvqlzVPaZfDwyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.31.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ba:bb:d2:6d:73:4b:53:05:69:97:e3:57:40:4b:d1:40:dc:
cf:5e:ee:d1:d8:83:59:0c:2c:21:45:79:14:43:c8:03:c2:68:
eb:d1:85:1e:9a:a3:68:b9:2b:ac:3b:a7:31:e5:ce:61:f1:73:
2f:de:e1:0d:9c:ae:a7:d6:18:99:e5:f9:20:d1:c5:8f:7f:61:
0a:1e:74:d6:be:32:76:14:9c:a6:b2:d7:31:8c:f4:86:56:d8:
d6:5d:5a:96:40:93:3d:b0:cf:88:a5:5e:87:d4:68:ce:a5:9e:
01:93:5a:9a:d0:af:c3:fc:38:98:77:7a:60:f6:3e:69:75:3e:
7c:82:95:54:13:ec:b3:fa:ca:74:64:2f:13:5a:14:57:7b:e5:
dd:03:df:dc:3a:10:04:d8:a7:7b:8b:d5:34:52:5a:e5:ef:1e:
2d:cf:4f:2b:77:e8:c8:3d:5f:83:9b:79:5f:4e:53:1d:ee:e4:
c9:db:ef:6f:a9:d4:f6:13:49:be:64:69:34:ba:ee:52:06:24:
22:80:50:5b:f4:8e:75:15:0b:2a:b1:5c:a7:8c:67:f5:4e:cb:
2b:81:7f:3f:44:ad:a6:58:d0:97:e8:ca:05:81:50:cf:a2:eb:
2a:86:a4:be:5e:ac:88:13:ae:95:ed:23:6d:54:6f:b0:46:d1:
2e:ac:55:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:16 2024 by rpki-client on console-fra.rpki-client.org