Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/IV39ebeqW_gti-OYvI10qwhXGz4.roa
File: IV39ebeqW_gti-OYvI10qwhXGz4.roa (raw, json)
Hash identifier: U4DT9tSVfFM1sZfYAa/mD195YPZ1nVs1YeoVac2VP9Y=
Subject key identifier: 21:5D:FD:79:B7:AA:5B:F8:2D:8B:E3:98:BC:8D:74:AB:08:57:1B:3E
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 032494D6
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/IV39ebeqW_gti-OYvI10qwhXGz4.roa
Signing time: Wed 08 Jun 2022 13:17:02 +0000
ROA not before: Wed 08 Jun 2022 13:17:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 31.6.45.0/24 maxlen: 24
31.6.1.0/24 maxlen: 24
31.6.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52729046 (0x32494d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Jun 8 13:17:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=215dfd79b7aa5bf82d8be398bc8d74ab08571b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:9a:0c:15:36:96:93:67:c9:18:e0:44:53:
5c:f7:53:f5:21:33:76:a7:b5:1c:e4:25:6e:43:2b:
4c:57:c9:46:76:de:d8:75:88:6f:76:4f:67:cc:74:
8b:97:ba:ea:0d:9b:6b:67:8a:07:ec:80:59:23:29:
dc:5d:b6:93:29:4b:fc:6f:6d:1a:3b:f0:c3:4f:8a:
82:b3:b2:e7:5f:d4:78:98:aa:2c:96:9b:be:0c:ca:
c5:7d:d4:d1:89:13:13:3d:e0:13:f1:df:8c:a4:d3:
ec:c3:24:70:8f:06:d1:54:dc:a2:2d:94:f8:09:cb:
0d:58:81:68:b7:60:f3:b2:06:48:80:50:19:33:0b:
38:74:be:a0:9a:8b:c6:4e:9a:c0:96:89:7a:2a:2e:
e4:1c:f9:af:63:7d:46:6e:a4:b7:83:e2:5f:f5:5f:
cc:08:e5:9a:4e:c8:1d:17:9e:7e:92:3f:76:84:32:
bc:b6:83:c7:35:54:0d:80:78:6a:35:11:e1:4d:7b:
20:99:eb:2e:19:d6:e2:67:71:bf:46:5e:ae:cb:c6:
ae:31:b6:25:6c:d6:45:20:f8:cf:30:f4:e8:34:90:
d2:dc:40:4e:a4:46:ad:05:00:9c:5b:0c:c7:63:dd:
13:51:24:a8:c1:ca:d5:fb:8e:6f:f0:94:71:03:2f:
0d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5D:FD:79:B7:AA:5B:F8:2D:8B:E3:98:BC:8D:74:AB:08:57:1B:3E
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/IV39ebeqW_gti-OYvI10qwhXGz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.1.0/24
31.6.16.0/24
31.6.45.0/24
Signature Algorithm: sha256WithRSAEncryption
34:3a:be:2b:31:74:7f:56:de:6e:f0:21:c1:35:6c:ff:56:5c:
f1:87:8a:f3:58:2d:33:af:e8:d0:58:11:f3:9c:97:bb:a2:56:
00:a9:e1:da:6e:2f:9d:ec:ab:42:0c:c5:07:83:5f:3d:3a:29:
e5:f6:4e:d6:8e:81:7d:bd:5f:ac:d1:61:c0:48:72:28:91:41:
4f:c7:8f:94:e0:f0:86:56:23:b3:c3:52:28:3c:06:ef:85:13:
50:ea:ee:3b:13:6b:b4:2f:97:ed:b5:8f:77:62:ae:53:c0:e3:
12:fd:0b:7f:bf:12:f0:40:82:d5:78:64:f1:82:84:e2:5c:1b:
c2:72:99:81:91:f3:a0:5d:25:69:01:49:f4:32:a3:b1:11:2d:
33:5d:65:fa:26:60:fd:c6:c8:90:b6:2a:be:2d:86:47:38:fa:
ad:22:d9:ef:69:e0:c9:56:94:ec:d4:06:ca:ff:7f:6c:d5:e5:
6e:96:84:3f:ee:e0:fe:10:fb:e3:65:1a:bb:7f:fc:1e:f4:93:
4b:a0:0c:9e:aa:8f:1d:77:1a:cf:24:0a:3c:72:ff:82:90:d5:
49:34:4e:3a:28:43:86:5c:40:f6:47:a9:8c:f6:d2:2d:b0:47:
37:ae:3e:d2:25:ff:8c:51:04:b9:7f:ed:70:91:7d:1c:59:9d:
f4:bf:a0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:40 2023 by rpki-client on console-fra.rpki-client.org