Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/Ky5wVvIcjUNKCVswl4LfW04fdr0.roa
File: Ky5wVvIcjUNKCVswl4LfW04fdr0.roa (raw, json)
Hash identifier: 6eJCvRup/K5Ejdpm4p0in3WQsDQ10siQwNNTrXoW8sU=
Subject key identifier: 2B:2E:70:56:F2:1C:8D:43:4A:09:5B:30:97:82:DF:5B:4E:1F:76:BD
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 0184CE108810782997E7868E540A2BDC7C5B
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/Ky5wVvIcjUNKCVswl4LfW04fdr0.roa
Signing time: Thu 01 Dec 2022 14:21:40 +0000
ROA not before: Thu 01 Dec 2022 14:21:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 31.6.28.0/23 maxlen: 24
31.6.52.0/22 maxlen: 24
31.6.56.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ce:10:88:10:78:29:97:e7:86:8e:54:0a:2b:dc:7c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Dec 1 14:21:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b2e7056f21c8d434a095b309782df5b4e1f76bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:66:6e:04:25:28:d5:0d:68:d2:f6:ff:cc:
18:db:01:4d:58:03:06:54:a0:7a:87:76:27:24:25:
3b:4a:f0:55:bf:8d:a1:1a:f0:0b:51:4d:d6:da:86:
dc:b1:16:1a:11:0b:d8:fd:e9:df:e8:5c:1e:44:4b:
d3:ab:c7:6e:e5:d0:fe:d0:b7:8f:f3:2f:f7:41:88:
b1:c8:7d:dc:73:8f:28:78:3d:f5:c8:68:cd:c1:fd:
29:7f:7a:34:57:c8:d7:bf:ef:f3:af:4d:fc:ff:24:
2a:11:ce:3e:6d:1b:e6:38:66:ba:f8:35:39:4a:e5:
6d:24:15:60:a1:8b:dc:d9:72:e0:b2:09:f3:10:26:
d9:35:79:62:46:b4:6d:4b:bc:c6:0f:26:ff:f8:e4:
be:fc:c4:03:09:40:0d:8b:12:90:cb:27:c8:a9:6d:
6f:4e:f4:e7:9a:98:a6:54:ba:4d:11:6f:58:ad:9d:
5c:27:65:cd:99:80:3c:91:12:9e:2d:17:d9:e1:39:
db:7d:0d:85:87:0b:49:23:4a:f8:5b:1c:ae:9d:82:
93:33:f9:6d:5e:b5:5c:7a:9b:60:7a:ed:5b:c8:6d:
6c:3a:33:a7:d9:63:41:3e:09:27:68:53:75:cd:3f:
03:f2:70:a7:01:0d:e7:18:f8:9e:fd:69:61:86:e6:
fb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2E:70:56:F2:1C:8D:43:4A:09:5B:30:97:82:DF:5B:4E:1F:76:BD
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/Ky5wVvIcjUNKCVswl4LfW04fdr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.28.0/23
31.6.52.0-31.6.57.255
Signature Algorithm: sha256WithRSAEncryption
55:21:b6:f8:a9:f3:1d:fc:2f:15:52:55:60:cd:40:f2:a0:c6:
0d:b1:27:6b:dc:86:6a:b1:17:73:66:54:84:3b:c4:fd:15:fb:
fb:2e:f6:50:da:51:c7:ac:67:7d:89:29:33:a5:f9:4e:02:29:
17:d3:31:d6:ba:52:93:36:7e:cd:7d:7a:f1:56:04:a9:d6:71:
57:1c:b6:68:f4:86:f8:e1:ea:37:bf:27:b4:4c:02:4c:db:64:
58:ff:e4:4a:2b:6b:5e:7b:89:dc:10:56:5c:10:9e:78:ba:de:
e9:88:78:72:ef:79:b9:6a:d2:41:b8:9f:dc:2b:94:3f:ec:02:
3f:43:78:8e:5d:18:cc:9e:e3:ef:d7:31:13:d2:d1:ee:b3:9f:
0e:9e:7d:1c:53:e8:c1:4e:fd:eb:45:fb:21:34:77:a0:27:2d:
f6:3f:e1:96:05:e2:c5:eb:ec:16:01:bf:60:2d:3d:10:97:25:
3c:04:99:e6:8b:0c:e4:c7:3e:e0:0e:ee:ad:7c:13:8b:10:b6:
98:07:e5:37:97:58:77:2f:fe:77:34:41:83:9c:51:1d:5f:8d:
f0:a1:dd:81:2d:96:86:b0:ac:56:71:c6:d0:18:c9:32:77:61:
05:57:94:bf:b9:a3:50:7e:bf:7f:f4:c8:f1:d1:a7:c7:47:62:
7f:54:0d:29
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYTOEIgQeCmX54aOVAor3HxbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1M2VjZTcxZWY2ZWJmNTViYjdiODdlNTA2NjViYTExZmRj
NzdmMDgwHhcNMjIxMjAxMTQyMTQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjJlNzA1NmYyMWM4ZDQzNGEwOTViMzA5NzgyZGY1YjRlMWY3NmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCRmbgQlKNUNaNL2/8wY2wFNWAMG
VKB6h3YnJCU7SvBVv42hGvALUU3W2obcsRYaEQvY/enf6FweREvTq8du5dD+0LeP
8y/3QYixyH3cc48oeD31yGjNwf0pf3o0V8jXv+/zr038/yQqEc4+bRvmOGa6+DU5
SuVtJBVgoYvc2XLgsgnzECbZNXliRrRtS7zGDyb/+OS+/MQDCUANixKQyyfIqW1v
TvTnmpimVLpNEW9YrZ1cJ2XNmYA8kRKeLRfZ4TnbfQ2FhwtJI0r4WxyunYKTM/lt
XrVceptgeu1byG1sOjOn2WNBPgknaFN1zT8D8nCnAQ3nGPie/Wlhhub7cwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFCsucFbyHI1DSglbMJeC31tOH3a9MB8GA1UdIwQY
MBaAFNU+znHvbr9Vu3uH5QZluhH9x38IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVQ3T2NlOXV2MVc3ZTRmbEJtVzZFZjNIZndnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jODE2NjktMjUxOS00ZGE1LWJkNWQt
MWMyNjI2NTkwZDI4LzEvS3k1d1Z2SWNqVU5LQ1Zzd2w0TGZXMDRmZHIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jODE2NjktMjUxOS00ZGE1LWJkNWQtMWMyNjI2NTkwZDI4
LzEvMVQ3T2NlOXV2MVc3ZTRmbEJtVzZFZjNIZndnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBHwYcMAwD
BAIfBjQDBAEfBjgwDQYJKoZIhvcNAQELBQADggEBAFUhtvip8x38LxVSVWDNQPKg
xg2xJ2vchmqxF3NmVIQ7xP0V+/su9lDaUcesZ32JKTOl+U4CKRfTMda6UpM2fs19
evFWBKnWcVcctmj0hvjh6je/J7RMAkzbZFj/5Eora157idwQVlwQnni63umIeHLv
eblq0kG4n9wrlD/sAj9DeI5dGMye4+/XMRPS0e6znw6efRxT6MFO/etF+yE0d6An
LfY/4ZYF4sXr7BYBv2AtPRCXJTwEmeaLDOTHPuAO7q18E4sQtpgH5TeXWHcv/nc0
QYOcUR1fjfCh3YEtloawrFZxxtAYyTJ3YQVXlL+5o1B+v3/0yPHRp8dHYn9UDSk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org