Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/_iyFOjNLVMmDIFEXxWyJxC2sO-8.roa
File: _iyFOjNLVMmDIFEXxWyJxC2sO-8.roa (raw, json)
Hash identifier: /5KXch/wdEbhuri8i3xvEqFno7we0iHQFmh+CP0XDFg=
Subject key identifier: FE:2C:85:3A:33:4B:54:C9:83:20:51:17:C5:6C:89:C4:2D:AC:3B:EF
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 034CDECB
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/_iyFOjNLVMmDIFEXxWyJxC2sO-8.roa
Signing time: Fri 17 Jun 2022 17:19:45 +0000
ROA not before: Fri 17 Jun 2022 17:19:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 31.6.48.0/24 maxlen: 24
31.6.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55369419 (0x34cdecb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Jun 17 17:19:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe2c853a334b54c983205117c56c89c42dac3bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:23:5b:cb:19:b3:8b:f7:6e:1d:f3:a6:f5:6d:
9b:34:14:1c:3d:a2:bf:d1:a4:42:49:ab:11:a0:ed:
4d:20:94:bc:53:b0:7a:b7:f8:dc:ce:94:83:49:a0:
32:ab:9e:fa:77:fd:13:99:f8:45:47:b3:db:25:70:
86:bb:86:95:94:dd:15:6b:8e:7a:96:95:85:b6:7b:
2f:ae:cf:db:5a:bd:83:30:4c:a4:ff:cd:5e:ac:18:
26:3b:4e:07:94:3e:a7:81:86:b0:ab:b9:85:14:4c:
4a:91:8b:f0:2a:ba:da:61:65:64:59:d3:72:99:75:
3c:bb:bf:f2:1d:4f:52:bb:52:a8:e1:e4:e9:29:cb:
54:56:6a:39:92:12:e2:ab:f0:cc:4b:e0:f0:ed:33:
fd:04:fb:50:1e:7a:1b:e5:45:f0:0d:10:03:58:90:
b1:a4:1d:1c:32:92:46:35:b5:d5:41:d8:55:d4:32:
1b:be:ff:1d:7b:f6:f1:c9:c0:1c:27:ae:06:47:d4:
1a:fc:65:65:9a:07:be:72:11:15:e8:6b:37:da:87:
85:72:28:88:e4:98:3b:af:ab:cb:56:03:6c:26:3f:
c1:7c:a5:4d:b8:c9:f3:17:69:64:30:c3:94:a5:41:
db:ca:31:77:b3:8a:0b:c8:c4:88:2d:e9:5f:51:c8:
ef:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2C:85:3A:33:4B:54:C9:83:20:51:17:C5:6C:89:C4:2D:AC:3B:EF
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/_iyFOjNLVMmDIFEXxWyJxC2sO-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.48.0/24
31.6.59.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:0f:69:d5:3b:87:77:b7:55:52:9d:bc:06:93:7f:0c:eb:21:
d3:1b:fa:d4:8e:17:75:b5:48:ca:08:1a:84:89:a5:04:76:4f:
b1:d2:08:83:46:8c:07:03:07:a3:ba:9d:60:90:fc:01:0f:51:
3e:73:95:23:47:8e:79:17:b5:1b:09:28:f7:4b:d1:fa:cf:bb:
2d:9a:83:15:4c:fd:ae:8d:17:8a:77:aa:b6:14:f8:e9:77:40:
26:d6:c9:86:a4:3d:32:fe:25:a4:6a:5c:d2:6c:45:bb:a6:df:
7f:f2:94:72:cb:6e:6e:9d:f0:34:16:6c:9e:db:f5:0f:fe:9e:
29:6d:a3:fd:03:62:d2:15:5d:18:e2:ff:38:bf:89:36:ff:7c:
6f:f1:75:bb:64:a2:69:5a:05:da:7a:a1:c4:20:c1:a7:17:24:
10:f4:93:13:45:ae:a6:8d:14:2b:fe:87:6b:86:a9:4c:14:9a:
d7:4e:63:e6:06:fd:67:30:75:01:3b:fd:c0:bf:ed:ca:54:d2:
e3:35:e9:45:a6:72:78:b8:24:7f:df:b3:12:fd:03:34:d8:7f:
49:c6:0f:f8:27:9e:ee:c1:f1:46:61:e8:24:bc:d5:65:50:5f:
90:f8:53:2f:34:47:c6:f5:5f:d4:c3:7d:f7:de:50:85:e1:73:
c4:aa:71:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:40 2023 by rpki-client on console-fra.rpki-client.org