Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/STFZ7deAXudu5I0gflfTzukPMAM.roa
File: STFZ7deAXudu5I0gflfTzukPMAM.roa (raw, json)
Hash identifier: Gzn7e2lXKBCi7ir6UxueJzUVyVMqXX1EX+OwoFLlQAE=
Subject key identifier: 49:31:59:ED:D7:80:5E:E7:6E:E4:8D:20:7E:57:D3:CE:E9:0F:30:03
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 01856BAEA45FAC7AB66B9C3198C347AEC9B5
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/STFZ7deAXudu5I0gflfTzukPMAM.roa
Signing time: Sun 01 Jan 2023 04:54:45 +0000
ROA not before: Sun 01 Jan 2023 04:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 31.6.48.0/24 maxlen: 24
31.6.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:a4:5f:ac:7a:b6:6b:9c:31:98:c3:47:ae:c9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Jan 1 04:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=493159edd7805ee76ee48d207e57d3cee90f3003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:76:ff:b2:e6:5e:c5:53:1f:2f:e4:5c:b0:a9:
56:05:ae:5a:70:41:05:37:c8:49:88:b5:5f:3a:5f:
59:7b:30:34:db:48:9a:b7:21:e8:11:3d:10:4c:48:
ab:47:6c:db:52:87:4f:c9:79:c5:61:db:51:f9:96:
d1:b9:87:e9:7b:a6:b8:eb:9e:c2:64:a8:df:15:92:
aa:3f:c9:6c:59:f5:f4:62:99:6a:26:5b:96:68:92:
38:1a:98:99:3e:da:d9:f3:ea:10:b4:8b:ee:e3:a4:
de:1c:f7:f3:e0:0e:1a:75:8e:51:92:69:d1:4a:1b:
64:97:56:51:49:4c:64:72:7d:42:30:37:c6:ac:9a:
5f:94:48:57:eb:96:e2:9a:35:e0:a9:2a:1e:01:fe:
59:eb:62:18:ca:c3:b5:fd:44:a6:65:97:04:76:b0:
1e:d5:3c:c6:9c:6f:e9:2e:c6:69:25:76:b2:b7:04:
dd:9b:68:1a:23:b7:f7:67:04:4d:ed:96:31:8a:99:
35:e8:ea:40:24:0a:56:ef:e8:5c:47:4e:eb:c7:8f:
9f:be:e3:d8:6c:b1:7c:23:bf:4f:9a:ee:ba:1b:df:
4f:fc:3c:13:c6:ad:a2:b1:7f:d2:09:a4:ca:ee:4c:
f2:ae:37:44:2b:d9:7c:5c:39:d3:c8:f5:2c:b4:a6:
a6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:31:59:ED:D7:80:5E:E7:6E:E4:8D:20:7E:57:D3:CE:E9:0F:30:03
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/STFZ7deAXudu5I0gflfTzukPMAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.48.0/24
31.6.59.0/24
Signature Algorithm: sha256WithRSAEncryption
42:de:5e:31:65:8c:5a:3a:d9:c6:0f:39:b3:ed:31:bf:29:61:
0f:39:8b:50:e6:ac:08:c1:40:31:61:86:f6:a6:b0:10:fc:6f:
75:36:32:48:0a:5f:11:e8:7c:13:7c:57:e9:66:41:b3:1f:6d:
ec:ac:41:52:77:31:73:e5:73:a1:56:95:f9:f8:f4:b6:6a:ea:
f1:bc:af:2e:c6:03:c4:2d:34:6a:73:94:68:08:1e:47:75:32:
51:cb:8b:9c:38:e2:b8:72:64:a6:e1:8f:7c:87:60:f7:c1:9f:
31:ea:89:5a:6e:da:42:e1:9d:45:a0:39:94:51:5e:3b:0e:99:
c4:bf:db:ea:0f:cf:4f:26:04:8d:54:af:8e:11:e1:64:2d:fc:
30:43:38:9c:c1:53:50:b5:e1:ac:9d:16:33:6d:79:5a:32:e8:
9e:2d:a6:1b:4d:28:ef:c4:6b:78:9e:5a:4d:09:c6:0e:e2:58:
9f:0f:ae:9f:c4:56:01:44:46:48:98:49:2c:0b:dd:2a:71:18:
77:ab:0e:54:79:15:2d:2f:a1:05:cc:fe:4d:b0:af:fe:ad:d0:
46:12:f1:7e:98:63:53:09:9a:a6:90:11:f9:86:60:38:6a:f6:
81:00:f7:7a:ae:c3:fb:2e:05:ee:b1:40:6d:c3:b5:92:09:b2:
a7:43:51:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org