Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/874c15-89ba-43ce-b9d9-a3569acb5a77/1/nfCMUJRF_ADX0NWgbKvbkabQCGU.roa
File: nfCMUJRF_ADX0NWgbKvbkabQCGU.roa (raw, json)
Hash identifier: Ufg3NuZkrx3AgXtR3n6NRz0hoN2yLgBsf7ISxrBokVE=
Subject key identifier: 9D:F0:8C:50:94:45:FC:00:D7:D0:D5:A0:6C:AB:DB:91:A6:D0:08:65
Certificate issuer: /CN=9339ae527b4ec756a097535cee3dee9ee1100752
Certificate serial: AD20
Authority key identifier: 93:39:AE:52:7B:4E:C7:56:A0:97:53:5C:EE:3D:EE:9E:E1:10:07:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzmuUntOx1agl1Nc7j3unuEQB1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/874c15-89ba-43ce-b9d9-a3569acb5a77/1/nfCMUJRF_ADX0NWgbKvbkabQCGU.roa
Signing time: Sun 17 Apr 2022 12:41:10 +0000
ROA not before: Sun 17 Apr 2022 12:41:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8849
IP address blocks: 31.222.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44320 (0xad20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9339ae527b4ec756a097535cee3dee9ee1100752
Validity
Not Before: Apr 17 12:41:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9df08c509445fc00d7d0d5a06cabdb91a6d00865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f8:01:e0:94:0f:6a:f7:f9:52:dd:2a:d2:a9:
ad:5b:b0:e4:5a:5e:79:c9:bc:ce:2b:1f:46:b2:03:
a2:d8:2e:3c:bd:1c:52:c6:88:5e:ae:e1:2f:d0:c6:
a7:e0:d0:75:b7:e8:30:b5:c6:2b:dd:14:7e:34:e4:
7b:91:96:c2:e2:3a:e9:cc:24:39:c2:26:4f:ba:4e:
db:4e:89:bd:1c:97:5c:56:b7:5d:f9:48:8d:30:d7:
fc:38:e7:86:cc:37:f3:18:ad:af:87:f1:0d:1d:e0:
c9:63:b0:6c:a2:e1:fb:6b:ce:35:4e:22:54:ba:64:
09:f3:8b:98:e0:a3:2b:54:09:87:86:f9:8e:d5:8d:
de:ff:ce:26:28:cc:99:3a:04:ea:27:6a:64:82:33:
5f:52:29:08:5e:af:23:5d:fd:24:c2:3b:b6:7d:7e:
dd:6b:64:d9:c6:86:28:7b:a2:f5:e4:e6:21:af:9a:
e0:09:7d:3c:d7:40:42:4b:41:b7:45:82:cb:e6:f2:
38:ec:27:d0:f9:2e:15:b0:8b:96:05:bd:37:69:ab:
72:58:94:43:b2:a4:24:aa:cd:1f:16:b8:4b:39:50:
17:d6:84:60:a4:18:57:55:40:08:73:3b:4a:94:9f:
85:8d:d7:0f:63:9f:6e:65:4d:35:21:2c:23:e0:0d:
50:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F0:8C:50:94:45:FC:00:D7:D0:D5:A0:6C:AB:DB:91:A6:D0:08:65
X509v3 Authority Key Identifier:
keyid:93:39:AE:52:7B:4E:C7:56:A0:97:53:5C:EE:3D:EE:9E:E1:10:07:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzmuUntOx1agl1Nc7j3unuEQB1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/874c15-89ba-43ce-b9d9-a3569acb5a77/1/nfCMUJRF_ADX0NWgbKvbkabQCGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/874c15-89ba-43ce-b9d9-a3569acb5a77/1/kzmuUntOx1agl1Nc7j3unuEQB1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.226.0/24
Signature Algorithm: sha256WithRSAEncryption
86:99:d5:89:5b:36:df:eb:85:4b:2d:cb:d9:ea:f5:da:36:72:
d3:70:00:29:ea:36:7a:86:80:73:16:a9:c7:42:db:91:4f:2a:
ff:2a:62:6e:54:17:7d:53:45:38:36:40:e2:46:58:27:d7:1d:
85:b0:2c:20:fd:96:1f:b7:7d:66:e5:de:42:6d:d5:e0:40:21:
0e:d0:ef:59:3b:e3:c3:1b:ea:b3:09:ef:63:64:67:0f:41:86:
d2:07:db:1f:ed:5e:92:9f:e0:63:e3:39:ef:62:00:9f:23:e9:
ea:23:31:07:b9:94:c6:db:fb:db:d8:73:fd:74:0c:57:d8:5c:
94:df:fb:3d:bd:6e:6b:30:38:e1:7a:3c:d3:c9:d5:08:55:f1:
4f:b7:27:48:bb:2c:88:3f:ad:93:01:43:37:a1:d5:32:96:89:
fb:09:cc:dc:f2:24:99:c3:14:97:71:62:25:b1:54:b6:fe:fd:
ce:5d:88:81:99:a4:74:ff:bd:16:2c:16:29:3d:51:52:0f:59:
c0:88:0e:71:f4:44:3e:f5:86:ac:7b:f9:c8:ef:51:22:7e:0f:
e4:ef:cd:22:be:d6:67:da:f3:bb:45:63:8a:1c:26:be:bd:92:
92:67:2c:a6:ba:50:63:a5:53:ba:9b:6b:e0:92:8b:22:75:3c:
b5:02:2a:4c
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAK0gMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkz
MzlhZTUyN2I0ZWM3NTZhMDk3NTM1Y2VlM2RlZTllZTExMDA3NTIwHhcNMjIwNDE3
MTI0MTEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5ZGYwOGM1MDk0NDVm
YzAwZDdkMGQ1YTA2Y2FiZGI5MWE2ZDAwODY1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyPgB4JQPavf5Ut0q0qmtW7DkWl55ybzOKx9GsgOi2C48vRxS
xoheruEv0Man4NB1t+gwtcYr3RR+NOR7kZbC4jrpzCQ5wiZPuk7bTom9HJdcVrdd
+UiNMNf8OOeGzDfzGK2vh/ENHeDJY7BsouH7a841TiJUumQJ84uY4KMrVAmHhvmO
1Y3e/84mKMyZOgTqJ2pkgjNfUikIXq8jXf0kwju2fX7da2TZxoYoe6L15OYhr5rg
CX0810BCS0G3RYLL5vI47CfQ+S4VsIuWBb03aatyWJRDsqQkqs0fFrhLOVAX1oRg
pBhXVUAIcztKlJ+FjdcPY59uZU01ISwj4A1Q+QIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFJ3wjFCURfwA19DVoGyr25Gm0AhlMB8GA1UdIwQYMBaAFJM5rlJ7TsdWoJdT
XO497p7hEAdSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
a3ptdVVudE94MWFnbDFOYzdqM3VudUVRQjFJLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC80Ni84NzRjMTUtODliYS00M2NlLWI5ZDktYTM1NjlhY2I1YTc3LzEv
bmZDTVVKUkZfQURYME5XZ2JLdmJrYWJRQ0dVLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84
NzRjMTUtODliYS00M2NlLWI5ZDktYTM1NjlhY2I1YTc3LzEva3ptdVVudE94MWFn
bDFOYzdqM3VudUVRQjFJLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH97iMA0GCSqGSIb3DQEBCwUAA4IB
AQCGmdWJWzbf64VLLcvZ6vXaNnLTcAAp6jZ6hoBzFqnHQtuRTyr/KmJuVBd9U0U4
NkDiRlgn1x2FsCwg/ZYft31m5d5CbdXgQCEO0O9ZO+PDG+qzCe9jZGcPQYbSB9sf
7V6Sn+Bj4znvYgCfI+nqIzEHuZTG2/vb2HP9dAxX2FyU3/s9vW5rMDjhejzTydUI
VfFPtydIuyyIP62TAUM3odUylon7Cczc8iSZwxSXcWIlsVS2/v3OXYiBmaR0/70W
LBYpPVFSD1nAiA5x9EQ+9Yase/nI71Eifg/k780ivtZn2vO7RWOKHCa+vZKSZyym
ulBjpVO6m2vgkosidTy1AipM
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:11 2024 by rpki-client on console-ams.rpki-client.org