Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d97443-9a5f-4655-80cc-82159d94d3e9/1/a4Pa9PbKVeUPRkfgje976ctZtqE.roa
File: a4Pa9PbKVeUPRkfgje976ctZtqE.roa (raw, json)
Hash identifier: hv13m7o1/J9F/CWMsBq4UredwJxM1TWMDoJu2FLQhdo=
Subject key identifier: 6B:83:DA:F4:F6:CA:55:E5:0F:46:47:E0:8D:EF:7B:E9:CB:59:B6:A1
Certificate issuer: /CN=d92954ef7d9b84b83380bcbe517850e55a79c75b
Certificate serial: 018964C089B402F6C0C7CCCE6E569191A535
Authority key identifier: D9:29:54:EF:7D:9B:84:B8:33:80:BC:BE:51:78:50:E5:5A:79:C7:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SlU732bhLgzgLy-UXhQ5Vp5x1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d97443-9a5f-4655-80cc-82159d94d3e9/1/a4Pa9PbKVeUPRkfgje976ctZtqE.roa
Signing time: Mon 17 Jul 2023 16:48:07 +0000
ROA not before: Mon 17 Jul 2023 16:48:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 31.222.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:89:b4:02:f6:c0:c7:cc:ce:6e:56:91:91:a5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92954ef7d9b84b83380bcbe517850e55a79c75b
Validity
Not Before: Jul 17 16:48:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b83daf4f6ca55e50f4647e08def7be9cb59b6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:47:dd:de:a6:d0:42:14:20:90:04:eb:c6:1d:
50:db:66:8b:ce:48:70:c3:a3:6f:a9:a6:3b:ce:de:
53:23:07:b7:77:4b:55:05:6f:ef:c6:96:77:55:eb:
50:d5:1f:f5:16:98:4d:d7:92:db:a8:46:15:d9:fa:
ea:f3:76:ce:00:90:2c:6a:1d:92:9c:e5:6b:21:3e:
9f:58:ef:c6:2f:4d:28:c9:a7:08:d6:a5:81:67:01:
f5:4e:59:02:9b:c2:10:ad:63:7a:c6:cb:b1:f7:6a:
a0:78:91:f5:e1:42:57:69:1e:89:6b:33:ef:12:71:
f6:fd:3d:4e:e8:9f:d4:6a:91:31:d1:ca:bd:8e:7d:
d3:b8:01:48:3b:04:29:d8:13:ad:8b:8c:31:2a:e3:
35:ab:15:86:bd:c2:bd:19:40:b5:a2:cf:c3:57:9d:
9d:c7:08:64:89:48:a4:e7:33:2e:cf:bb:28:c6:b0:
8b:df:42:9e:0d:80:64:f8:51:a3:2f:0a:0c:76:72:
5d:ef:4f:c5:67:5c:c9:e4:dc:e6:2e:76:c3:0e:8a:
5a:2c:39:ef:20:e6:95:4b:77:77:d5:6d:84:5c:4e:
cc:f7:5e:80:37:7e:fe:1e:bf:73:9c:35:d1:b2:04:
e1:5b:45:32:d5:89:4b:27:d3:62:33:4a:24:1f:c5:
0a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:83:DA:F4:F6:CA:55:E5:0F:46:47:E0:8D:EF:7B:E9:CB:59:B6:A1
X509v3 Authority Key Identifier:
keyid:D9:29:54:EF:7D:9B:84:B8:33:80:BC:BE:51:78:50:E5:5A:79:C7:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SlU732bhLgzgLy-UXhQ5Vp5x1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d97443-9a5f-4655-80cc-82159d94d3e9/1/a4Pa9PbKVeUPRkfgje976ctZtqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d97443-9a5f-4655-80cc-82159d94d3e9/1/2SlU732bhLgzgLy-UXhQ5Vp5x1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.247.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:84:cf:54:78:3b:46:3e:ff:be:3b:16:02:a0:02:90:ba:a4:
69:01:e6:41:8c:8d:2c:0b:00:1b:04:9f:94:c3:5e:db:be:55:
55:b2:f5:bf:9f:2e:d8:48:9a:0b:c9:6e:77:92:f2:33:fa:44:
1c:c8:cd:0e:08:8a:67:75:83:67:b8:54:f4:59:5a:3d:d3:07:
37:39:df:46:55:a2:47:a8:00:fd:cc:e1:e4:fa:4c:9d:5c:10:
88:1a:b6:5d:fb:3e:90:c5:d3:c5:56:5a:b9:93:84:a3:e7:a3:
74:fe:0c:f9:6d:83:fb:47:f0:b4:27:27:d3:72:46:42:2a:75:
4b:f3:f7:89:ea:50:87:13:5e:9f:14:b4:88:5c:b1:90:76:e2:
91:9f:56:87:21:68:c0:9a:6c:a2:c7:3b:25:e6:6d:67:8a:b6:
1c:24:b2:7a:93:0f:be:c6:90:01:b7:89:71:79:7d:d0:55:02:
21:9f:c2:6b:85:e4:d6:00:13:66:e1:6c:f8:50:4a:fe:6e:00:
4f:b8:75:0a:74:a4:f3:39:3b:79:6f:65:18:4e:0e:cb:9c:e3:
33:d9:35:62:ca:08:07:70:cf:10:2f:b8:d9:ee:3a:5a:62:8f:
eb:14:3b:f7:64:1d:03:e3:e1:3a:32:ac:15:99:b9:d8:5a:19:
f5:02:b7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 11:51:13 2023 by rpki-client on console-fra.rpki-client.org