Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/0c5de4-ed86-48f9-bc06-f4ca21dbd20a/1/MfrP7f5B-RX2mXKg_IxnYLTlKU8.roa
File: MfrP7f5B-RX2mXKg_IxnYLTlKU8.roa (raw, json)
Hash identifier: oLIGV9sjSXwYGn9rYUKThmsabE+RLLrnOQsR+fW28kA=
Subject key identifier: 31:FA:CF:ED:FE:41:F9:15:F6:99:72:A0:FC:8C:67:60:B4:E5:29:4F
Certificate issuer: /CN=3ef9ea90bbcde7c2cffcfbb6312b1b637a2e490a
Certificate serial: 07154425
Authority key identifier: 3E:F9:EA:90:BB:CD:E7:C2:CF:FC:FB:B6:31:2B:1B:63:7A:2E:49:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvnqkLvN58LP_Pu2MSsbY3ouSQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/0c5de4-ed86-48f9-bc06-f4ca21dbd20a/1/MfrP7f5B-RX2mXKg_IxnYLTlKU8.roa
Signing time: Sat 01 Jan 2022 06:03:27 +0000
ROA not before: Sat 01 Jan 2022 06:03:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204326
IP address blocks: 171.22.92.0/22 maxlen: 22
171.22.92.0/24 maxlen: 24
2a09:3cc0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118834213 (0x7154425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef9ea90bbcde7c2cffcfbb6312b1b637a2e490a
Validity
Not Before: Jan 1 06:03:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31facfedfe41f915f69972a0fc8c6760b4e5294f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:6c:71:1e:57:0c:d4:1d:77:83:37:fe:c7:
95:52:1f:5f:78:15:3f:04:6a:3a:ad:de:dd:2b:9f:
e9:3d:96:30:e0:e6:e8:1e:05:7a:52:a1:07:22:61:
e2:93:b1:70:2c:e6:1c:83:bf:d2:63:e9:2c:6d:65:
26:e0:8e:2d:5e:df:9a:49:9c:cd:5a:13:27:04:ed:
18:9c:63:85:7e:4b:3c:7e:a1:c8:ae:15:01:00:6a:
e5:c4:54:8a:3a:bc:90:90:3d:7b:af:f7:8f:6f:c2:
71:5d:51:a6:c1:04:b5:bc:2c:2d:67:3c:f4:a3:43:
e1:cf:45:6a:1c:33:2b:3b:f6:7e:07:3d:27:91:55:
bb:8e:64:25:50:19:57:d1:82:ee:dd:91:a5:25:46:
6d:a9:00:ba:d9:00:f9:1a:8f:b6:14:b8:7d:e4:08:
0f:70:56:5d:1c:16:8f:c7:03:e5:34:90:08:c0:b0:
87:e3:e1:fa:0b:81:6b:ed:45:57:df:bf:60:80:30:
07:d9:7d:d9:c4:ea:92:8b:59:0c:37:c5:0a:ea:4d:
ca:00:c4:0e:7a:8d:92:fa:0e:75:45:d4:53:85:6d:
07:b0:84:56:9f:90:be:c9:68:c1:3f:02:b2:79:85:
68:8d:24:71:25:ea:fb:25:1c:c0:92:31:fd:c4:f1:
cd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FA:CF:ED:FE:41:F9:15:F6:99:72:A0:FC:8C:67:60:B4:E5:29:4F
X509v3 Authority Key Identifier:
keyid:3E:F9:EA:90:BB:CD:E7:C2:CF:FC:FB:B6:31:2B:1B:63:7A:2E:49:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvnqkLvN58LP_Pu2MSsbY3ouSQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/0c5de4-ed86-48f9-bc06-f4ca21dbd20a/1/MfrP7f5B-RX2mXKg_IxnYLTlKU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/0c5de4-ed86-48f9-bc06-f4ca21dbd20a/1/PvnqkLvN58LP_Pu2MSsbY3ouSQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.92.0/22
IPv6:
2a09:3cc0::/29
Signature Algorithm: sha256WithRSAEncryption
08:d0:fe:3c:1b:d5:46:57:e8:2a:b1:95:1a:cf:6f:18:03:a5:
ac:9d:90:29:06:98:ad:a3:01:77:87:22:6a:82:58:f7:fb:f9:
fd:00:a6:f1:8a:8a:9f:30:f5:57:06:22:c2:cd:79:8b:e8:35:
02:14:18:fe:a8:dd:cd:9c:6e:9d:67:09:a0:f7:1f:bc:4c:e7:
34:03:6f:3f:99:52:f7:2c:cf:30:cc:fa:5c:c1:8b:48:f4:14:
89:48:40:a7:62:6d:83:ab:d5:b5:d3:1f:eb:f7:ca:c6:3e:53:
1e:7b:d4:d9:21:3a:d5:37:76:29:2d:66:c5:be:d9:e4:e1:a3:
c1:54:79:31:8c:5e:81:a2:db:26:1a:d1:71:0a:69:55:fb:8b:
5e:81:8c:b0:16:7c:58:3a:98:05:03:1a:7c:8f:85:56:89:5c:
b4:ef:00:bf:f1:73:ad:eb:36:97:f7:c2:cf:7c:03:56:4e:86:
36:80:31:dc:e5:ba:a4:1d:46:4f:b8:20:ec:4e:4a:24:3f:5b:
1b:73:32:78:44:9a:a4:6b:c9:2e:e9:96:25:8b:89:e7:3a:b8:
6d:4e:d5:ea:12:8c:de:47:e6:fd:a7:54:27:2c:1f:80:8d:1c:
1d:17:90:fd:74:95:9a:73:f9:b8:a4:ae:fd:81:51:f1:14:af:
8b:13:7d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:05 2024 by rpki-client on console-fra.rpki-client.org