Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/WQ_79jXs_hjC8gWyV4BSDyHTT_s.roa
File: WQ_79jXs_hjC8gWyV4BSDyHTT_s.roa (raw, json)
Hash identifier: 5QdRcDYdAF8O9BaQbBB43CebLkxCnHS9d0rD0qDX9Qg=
Subject key identifier: 59:0F:FB:F6:35:EC:FE:18:C2:F2:05:B2:57:80:52:0F:21:D3:4F:FB
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 01826557678077EDE70DA0096DAC618A355C
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/WQ_79jXs_hjC8gWyV4BSDyHTT_s.roa
Signing time: Wed 03 Aug 2022 20:13:23 +0000
ROA not before: Wed 03 Aug 2022 20:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 31.6.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:65:57:67:80:77:ed:e7:0d:a0:09:6d:ac:61:8a:35:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Aug 3 20:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=590ffbf635ecfe18c2f205b25780520f21d34ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:87:92:c4:70:01:fe:3f:4e:02:3b:c5:23:46:
03:19:6d:e4:34:f3:2b:4d:31:71:dd:0e:8a:e4:4c:
9f:93:2b:8e:77:f4:7c:1a:5c:d5:35:1a:90:c1:93:
79:37:96:56:53:39:1d:2c:b0:4a:5c:6c:b9:43:2c:
99:cb:20:b6:56:69:2b:d8:55:f7:bb:e9:26:df:78:
fe:d9:50:99:c0:c7:cc:b0:66:ce:d4:f2:fa:0a:ee:
2a:b0:8d:c5:83:2f:ee:5d:86:d0:20:05:ba:c5:60:
37:2b:d6:dd:c1:12:ba:59:2c:ff:f8:1d:86:4a:68:
98:69:3b:2d:23:c0:a7:e3:ed:80:4b:b0:d5:3e:a7:
2a:4c:08:cc:be:8a:0f:eb:42:80:c9:b0:b9:dd:b4:
44:14:da:6f:ba:bf:d5:5b:45:a0:6c:f2:3d:0e:71:
7b:f9:e6:34:f7:86:5e:80:26:59:dd:6f:42:52:e6:
a8:00:c3:35:43:8c:c9:ca:6c:48:04:c4:81:48:15:
d3:4a:59:38:2f:9e:43:24:28:36:1d:73:b7:06:56:
05:22:a6:9a:df:a2:ea:44:08:1d:75:6e:2a:f4:c1:
0b:de:4e:22:5e:e0:b7:fd:45:eb:6a:45:8c:77:88:
e9:f3:6f:bc:b9:5b:7b:af:83:03:62:03:af:2f:63:
24:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0F:FB:F6:35:EC:FE:18:C2:F2:05:B2:57:80:52:0F:21:D3:4F:FB
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/WQ_79jXs_hjC8gWyV4BSDyHTT_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.12.0/22
Signature Algorithm: sha256WithRSAEncryption
87:2d:cd:5e:d0:a3:d3:a6:d1:5d:a4:92:b5:78:ab:6c:48:67:
04:2e:2c:62:71:60:de:2f:f6:a6:3d:49:bc:dc:22:e1:37:3d:
be:28:ef:67:a2:d4:b2:c8:ba:7a:54:69:3f:37:b5:79:59:4b:
83:ac:2a:b5:94:c7:e3:c9:84:05:f8:1e:d0:4a:e5:87:c9:01:
be:2e:28:ac:28:03:2e:3b:be:e2:8d:ce:3f:36:59:79:af:da:
f9:8c:e3:1a:6a:f5:a0:a7:bc:34:dc:3d:fc:49:74:5e:e6:38:
c4:d5:6a:23:d2:7d:fe:0b:3b:9a:13:0e:f4:ab:26:4a:75:16:
ae:86:4f:09:2f:b8:c0:14:04:39:b5:d0:51:13:fd:20:ff:8f:
75:f8:ee:1f:96:8a:35:e2:d9:3a:3a:14:62:f4:30:4f:f0:c2:
6b:7a:3a:19:96:8a:e9:5c:d9:e6:6a:17:f7:07:03:55:71:a5:
52:e1:03:4f:d8:69:ff:f9:a0:e1:51:46:79:9b:ec:4c:1c:8e:
c9:ca:f4:f4:37:c5:67:aa:2b:2d:d0:db:9f:eb:e6:9c:73:3b:
55:67:b7:5f:75:20:92:1e:d0:d4:d3:19:90:71:17:d3:03:60:
04:3e:5d:1e:67:42:1b:11:d7:32:7d:bd:6d:33:5f:28:09:c2:
19:51:1c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:18:15 2025 by rpki-client