Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/BicnfnVcWREfo7wJbvVbKmmChgE.roa
File: BicnfnVcWREfo7wJbvVbKmmChgE.roa (raw, json)
Hash identifier: fZalU+TWx90RWpTm8OsLydIA0Z8cCo3T5YH+RhznGdc=
Subject key identifier: 06:27:27:7E:75:5C:59:11:1F:A3:BC:09:6E:F5:5B:2A:69:82:86:01
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 018265594615A38B62AEDBE1ED776118A2CC
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/BicnfnVcWREfo7wJbvVbKmmChgE.roa
Signing time: Wed 03 Aug 2022 20:15:25 +0000
ROA not before: Wed 03 Aug 2022 20:15:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205220
IP address blocks: 31.6.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:65:59:46:15:a3:8b:62:ae:db:e1:ed:77:61:18:a2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Aug 3 20:15:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0627277e755c59111fa3bc096ef55b2a69828601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:69:7f:2c:81:4b:b6:48:15:0a:44:ac:35:7c:
39:6f:ca:8d:4d:51:f8:0d:d7:44:76:2d:5f:d7:16:
40:58:f1:93:fc:ba:96:72:b6:76:1e:9b:b6:12:52:
d2:7a:a7:61:29:58:39:6c:f2:fb:89:56:51:a3:5e:
7f:f8:df:0d:1d:06:c5:16:00:bc:f8:b9:be:ee:1f:
4c:f4:a6:b1:7a:bb:21:bc:08:9b:5e:de:d0:37:ca:
ab:ec:04:e7:7d:10:d7:75:12:0a:f0:7e:ab:f3:87:
f8:e5:5b:4c:d6:c8:cc:23:c7:0f:77:74:fd:02:54:
be:14:1c:60:7a:f8:95:45:23:1c:ca:cc:91:c8:fb:
6b:e6:3a:8d:f9:e3:b8:13:67:68:88:7a:53:15:fb:
06:cb:48:81:15:be:a8:fe:bb:d8:fb:9c:f7:c8:15:
06:85:3c:b0:6b:89:a5:4d:ff:52:46:56:2d:8b:d8:
7e:c6:9f:6f:c5:31:50:6a:c2:c4:38:b2:98:4d:bc:
e0:ab:99:9e:86:42:30:15:b2:c3:06:40:7d:91:8a:
50:5f:39:b4:eb:81:50:34:9f:b7:d4:eb:5e:1f:8b:
57:df:21:c3:ec:db:fd:29:b0:0c:07:d7:e0:f2:87:
ab:c2:94:3c:f7:20:53:bc:1c:fb:81:f2:b3:8b:f9:
77:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:27:27:7E:75:5C:59:11:1F:A3:BC:09:6E:F5:5B:2A:69:82:86:01
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/BicnfnVcWREfo7wJbvVbKmmChgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.24.0/22
Signature Algorithm: sha256WithRSAEncryption
76:92:51:98:d4:5b:6c:8e:32:4a:1b:6e:3f:73:73:de:3f:ba:
8d:d2:10:e2:c3:ee:81:59:99:1d:38:cb:75:ed:a1:44:03:7c:
cb:ea:16:ac:83:b5:b1:ee:99:bc:16:d9:71:c5:36:99:af:3d:
aa:a7:4c:65:48:6b:d9:75:76:b1:d4:3c:ee:11:fc:0e:25:2b:
4e:38:1b:de:e2:f9:3b:9f:0f:3e:d9:23:35:ec:e6:7c:37:ce:
95:77:11:73:a5:90:66:db:c0:d5:e1:02:ce:f9:b8:97:de:3f:
d9:c3:5d:e1:bf:c6:63:55:1b:36:cb:1a:d0:ce:5c:0b:8f:ec:
74:8a:81:49:0c:dd:14:01:24:8e:d7:a6:af:51:5a:f6:a1:ad:
4a:7a:ef:e1:24:d9:96:6c:cd:6c:3b:f8:97:60:47:6e:bd:d1:
66:d8:2c:fc:55:14:ba:33:cb:86:16:cc:75:86:0b:83:2d:be:
79:3e:6b:7d:02:2c:2e:94:f4:f2:25:ac:39:b5:4f:7a:d5:1a:
87:f9:94:c5:c7:6b:ff:b8:58:dd:4d:f6:a7:c6:bd:44:30:8f:
62:48:9a:cf:71:6b:6b:05:93:09:74:12:38:f1:d6:fe:f8:40:
06:d4:31:f1:e4:cc:76:c9:fc:49:5a:55:1b:cf:15:21:1f:77:
74:d1:91:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org