Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/Bw24PlPZcgSIYCY4_CcOgTYQkFk.roa
File: Bw24PlPZcgSIYCY4_CcOgTYQkFk.roa (raw, json)
Hash identifier: Uu7v9LhM7Slec2P1MuafQ5daAJX8fwQ0tj23FdSFlI0=
Subject key identifier: 07:0D:B8:3E:53:D9:72:04:88:60:26:38:FC:27:0E:81:36:10:90:59
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 01856BAEA7B5E359CB6E06F5E9C7C575037B
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/Bw24PlPZcgSIYCY4_CcOgTYQkFk.roa
Signing time: Sun 01 Jan 2023 04:54:46 +0000
ROA not before: Sun 01 Jan 2023 04:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 31.6.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:a7:b5:e3:59:cb:6e:06:f5:e9:c7:c5:75:03:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Jan 1 04:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=070db83e53d9720488602638fc270e8136109059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:03:0d:1b:ce:84:d3:0a:fd:95:e5:94:ad:11:
71:f8:94:33:09:ce:74:46:26:ce:60:7c:cd:d0:e2:
7d:fd:bd:9c:45:25:5c:09:a0:47:7d:53:c2:46:eb:
72:8b:d1:4a:97:a8:34:5d:3f:6b:82:ff:f6:90:20:
1c:96:4a:a3:89:3a:f8:e8:4b:15:f7:6c:b8:46:31:
52:b2:d6:98:a5:7c:c7:8d:09:f8:95:0d:ba:91:94:
60:90:10:35:b3:4e:4f:4a:01:fe:8e:67:a5:19:af:
b3:36:7e:ba:20:77:4f:ca:af:e0:ca:45:63:6f:7e:
cb:52:f3:40:e0:4b:0f:04:b7:db:9b:81:ea:51:65:
8a:55:98:f1:c4:63:48:21:1e:b8:5f:6e:9f:56:53:
85:a3:c7:8d:87:bf:e2:b6:f7:2a:27:6e:95:cc:66:
de:ff:e2:c4:c2:18:51:69:19:2d:12:f1:1d:9d:d5:
63:bd:a5:4c:f6:a1:07:70:2d:2a:03:c9:61:be:ba:
56:be:dc:8c:46:9b:75:f4:bf:2e:e1:aa:32:4e:da:
2e:06:27:2b:71:ee:cd:b0:39:ca:67:88:a6:bb:96:
1a:c9:e0:3b:8c:b6:7a:7d:fa:f4:85:34:96:33:0e:
7e:20:78:5a:dd:3d:35:b3:10:c0:46:5a:d7:d7:7a:
04:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0D:B8:3E:53:D9:72:04:88:60:26:38:FC:27:0E:81:36:10:90:59
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/Bw24PlPZcgSIYCY4_CcOgTYQkFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.24.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:a9:0b:8f:38:fe:bb:eb:bb:c0:a2:4f:1c:ad:1a:52:bb:86:
2a:8a:d4:5f:8f:09:86:07:32:e3:b5:45:f5:38:23:58:c9:9e:
41:c5:5b:85:77:c2:ef:83:05:64:3f:ea:97:6b:c1:38:02:f5:
d3:31:14:88:3a:0f:00:f0:5e:86:d6:7e:7e:39:fc:f6:c1:30:
b4:7d:07:a4:b4:74:6f:37:7c:dc:12:7f:b8:2f:64:0b:36:01:
56:94:86:45:c6:3d:f7:2d:8c:ab:16:af:48:11:f3:e9:9d:d8:
ac:75:c3:13:9e:b2:51:d7:5c:b7:3b:94:19:01:9e:d2:24:19:
07:a1:0e:37:3e:fa:00:1d:64:04:df:df:30:d1:b9:77:c0:30:
57:ab:dd:49:ad:55:db:af:9b:1a:53:19:ba:e0:a6:1f:6c:e9:
48:93:d0:68:a8:d9:98:bf:a1:58:9d:d6:20:a9:cd:6a:13:8e:
b9:b4:7b:6b:6b:b7:ab:ad:26:68:e5:c3:7b:78:db:3e:fc:21:
f4:f9:90:83:55:62:b1:31:fa:3f:8b:d9:d5:45:f8:e4:e5:c6:
bd:79:94:b5:93:f5:e3:05:19:e0:b5:f7:9a:36:7b:18:ca:83:
fd:73:c6:1f:41:08:9a:d2:b6:66:38:c3:e1:20:0b:0e:d9:3a:
a4:25:db:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org