Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1b6bd9-2aa3-473c-a033-38f918a515bd/1/ydCys1ZtvNCLW7M-2OUqWEGf1zY.roa
File: ydCys1ZtvNCLW7M-2OUqWEGf1zY.roa (raw, json)
Hash identifier: vdeCtvVLWmAUcoX6zSRUx6US0JTCHfggPtG5GFuNTrY=
Subject key identifier: C9:D0:B2:B3:56:6D:BC:D0:8B:5B:B3:3E:D8:E5:2A:58:41:9F:D7:36
Certificate issuer: /CN=3778d86d81485ea44210b9e054137fd935cfeea8
Certificate serial: CB72F0
Authority key identifier: 37:78:D8:6D:81:48:5E:A4:42:10:B9:E0:54:13:7F:D9:35:CF:EE:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3jYbYFIXqRCELngVBN_2TXP7qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1b6bd9-2aa3-473c-a033-38f918a515bd/1/ydCys1ZtvNCLW7M-2OUqWEGf1zY.roa
Signing time: Sat 01 Jan 2022 01:55:38 +0000
ROA not before: Sat 01 Jan 2022 01:55:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 31.222.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13333232 (0xcb72f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3778d86d81485ea44210b9e054137fd935cfeea8
Validity
Not Before: Jan 1 01:55:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9d0b2b3566dbcd08b5bb33ed8e52a58419fd736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:17:d7:ec:e5:e9:a3:be:c2:98:44:2d:5f:
7f:36:8b:7b:fd:e4:fb:19:6d:e5:97:aa:c4:e0:34:
82:ef:52:49:69:bb:df:1c:54:d5:1d:96:05:e3:b0:
c5:98:a6:5b:87:b7:0a:d2:44:3e:4f:85:6e:0f:51:
ed:9c:f4:71:c3:e5:8e:8b:66:3c:03:7a:1f:eb:d6:
ae:8f:76:9f:8c:c3:84:6f:a5:9d:0e:5d:fd:14:be:
78:81:72:27:ef:7e:8e:15:96:d9:9d:64:51:48:2d:
b1:3e:e2:7e:50:e4:23:23:c3:7b:48:b6:cf:b3:de:
28:d9:3e:ba:e3:cb:05:04:96:e7:8f:5b:0a:e2:ea:
fc:82:f4:17:07:ac:3c:ac:7e:93:d6:14:74:f3:d3:
fc:0e:a2:09:c0:44:71:d0:2a:9d:e1:99:e8:d5:59:
35:6e:4e:21:a2:33:2e:8c:25:a3:7a:cc:99:b1:59:
0e:1d:ad:0d:64:43:0b:5e:92:28:3f:9d:40:03:41:
5f:af:af:6a:ec:6d:34:9a:60:02:16:14:cf:2f:b3:
44:6e:81:0e:89:e4:21:4e:48:c7:a6:39:52:27:74:
37:db:e0:c1:69:e8:b6:f8:0c:4f:59:e3:f5:ef:8b:
e1:7b:dd:f9:87:ed:33:f6:bf:71:ec:3e:3a:43:93:
85:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D0:B2:B3:56:6D:BC:D0:8B:5B:B3:3E:D8:E5:2A:58:41:9F:D7:36
X509v3 Authority Key Identifier:
keyid:37:78:D8:6D:81:48:5E:A4:42:10:B9:E0:54:13:7F:D9:35:CF:EE:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3jYbYFIXqRCELngVBN_2TXP7qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1b6bd9-2aa3-473c-a033-38f918a515bd/1/ydCys1ZtvNCLW7M-2OUqWEGf1zY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1b6bd9-2aa3-473c-a033-38f918a515bd/1/N3jYbYFIXqRCELngVBN_2TXP7qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.244.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ef:08:a6:d3:91:6c:48:69:e1:ac:c0:4f:eb:3d:61:80:89:
bd:be:0f:a7:54:5b:70:e9:b3:7a:5d:f7:5e:0b:28:d2:3a:5c:
9f:a0:d5:a1:0c:cf:16:2f:b2:8b:0d:0c:f2:3a:5c:1b:7a:12:
09:23:d6:bc:5b:dd:fd:61:9f:36:a5:97:f5:ca:79:3e:b1:bf:
55:14:15:dc:2d:15:0b:f9:73:cc:2f:cf:72:74:15:2b:77:d6:
95:92:2b:b5:15:b9:ed:94:40:e0:79:46:51:42:79:82:d3:56:
51:93:c3:68:a3:5e:d4:2d:df:f6:11:0d:51:e5:bb:16:97:d3:
a2:13:5f:1e:89:64:be:5c:97:65:e3:14:56:05:d0:bb:79:9c:
a7:21:a6:0c:a5:7f:c8:ba:e2:29:e4:95:de:1c:dd:a9:d3:66:
23:05:e2:36:67:9e:ed:14:8a:9d:68:1a:36:5c:5d:75:04:59:
15:34:19:24:00:5e:7d:77:48:4a:ce:57:d4:79:36:92:56:6d:
69:3e:db:95:8f:38:54:49:00:98:59:f6:8a:b0:da:34:d2:e4:
08:b5:59:12:2f:4c:41:3a:db:1d:f3:f3:64:db:36:6c:c9:dd:
fe:0c:34:44:bf:de:72:7b:ac:54:e3:0a:4a:e2:32:6f:7a:fd:
d5:ef:f2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:29 2024 by rpki-client on console-ams.rpki-client.org