Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/btzOYoKY5_7fJGM1du7u1swP1xY.roa
File: btzOYoKY5_7fJGM1du7u1swP1xY.roa (raw, json)
Hash identifier: tBV/wbUH/4QdmEoIsQBeloirRMzMR6/8V09zcvm+Fvc=
Subject key identifier: 6E:DC:CE:62:82:98:E7:FE:DF:24:63:35:76:EE:EE:D6:CC:0F:D7:16
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 0182F61EB03985DEB5836172D4273AC3670C
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/btzOYoKY5_7fJGM1du7u1swP1xY.roa
Signing time: Wed 31 Aug 2022 22:56:22 +0000
ROA not before: Wed 31 Aug 2022 22:56:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 178.208.178.0/23 maxlen: 24
31.6.46.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f6:1e:b0:39:85:de:b5:83:61:72:d4:27:3a:c3:67:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Aug 31 22:56:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6edcce628298e7fedf24633576eeeed6cc0fd716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:7e:d4:02:00:ae:e0:eb:54:60:92:99:3b:
c6:c6:f7:d1:b0:36:fa:a8:6e:8e:42:f7:96:af:52:
b1:bb:49:1c:46:db:84:98:8e:f2:2f:12:d7:3a:bf:
68:20:7b:dd:c7:50:cf:5c:56:ad:b9:5c:3f:7d:20:
35:d3:5b:82:bc:bf:03:f7:c2:98:4b:64:28:95:bc:
78:f7:49:3a:b2:b3:3d:b7:5a:cf:66:99:f9:5d:0c:
76:99:b9:90:3e:8a:3d:64:5f:ec:f1:a1:78:ec:f1:
64:1a:71:fe:d1:ef:2e:2e:4a:d7:c9:02:9a:3d:23:
50:e5:12:9d:ed:54:a6:42:ee:bb:e4:f9:01:a7:d3:
f5:a7:24:da:13:b5:e1:8a:87:37:b7:75:fa:f7:1c:
0d:57:88:c5:7a:3d:ad:43:05:d6:d8:52:36:70:b4:
ba:f5:74:50:e8:bb:0f:72:49:9d:b6:89:39:cd:d2:
29:8e:9c:53:36:4c:b1:af:03:02:70:4f:32:b5:6c:
e7:14:c8:e6:da:20:d1:40:9a:fc:c7:80:95:50:80:
d1:3e:05:d9:7d:55:b1:25:e7:34:8f:37:f7:56:5d:
32:3a:f2:68:29:0f:46:bd:7f:38:8a:cd:cf:52:33:
f3:62:e1:af:59:08:48:31:80:55:fd:e2:7e:29:b8:
85:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DC:CE:62:82:98:E7:FE:DF:24:63:35:76:EE:EE:D6:CC:0F:D7:16
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/btzOYoKY5_7fJGM1du7u1swP1xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.46.0/23
178.208.178.0/23
Signature Algorithm: sha256WithRSAEncryption
07:03:c9:42:46:f6:10:04:d9:0b:30:e1:af:09:83:20:56:f5:
6b:4b:9b:2f:f0:db:ac:21:6a:2b:57:ad:4f:b0:f4:2c:62:bc:
08:97:1a:d9:a8:95:4d:74:f4:6c:ec:1b:2c:df:95:d5:e2:e4:
e7:1d:49:87:10:2b:fa:cf:d1:0d:5c:22:b6:ea:4c:79:7b:dd:
02:b7:60:9b:07:3f:45:fa:db:1f:e0:45:47:5f:1e:50:9c:e9:
8c:6d:79:d6:dd:11:9f:69:7d:62:8d:46:ce:bf:f8:1e:33:6f:
75:8a:6f:60:56:43:ed:8d:5c:5d:4f:80:2a:06:43:ce:17:a0:
a3:c2:29:5e:c9:38:8f:d8:2a:2e:2b:6c:6b:87:49:16:54:3b:
c5:a5:4d:dc:d9:5f:ba:65:1d:a9:5b:08:9f:93:76:62:02:fb:
a3:18:a9:05:9c:0b:a3:66:94:97:3f:15:1c:39:b4:17:1e:b6:
fa:c7:85:d7:71:bd:af:84:0d:95:5a:4c:5e:6a:46:45:3d:7c:
29:9f:bc:3b:66:2a:55:7c:4e:3c:0e:d3:ce:ab:b1:b7:d6:54:
13:80:67:58:0d:97:e3:92:e2:c9:d4:bb:ca:9c:92:3a:98:24:
f4:f8:5e:b4:61:60:5f:02:53:1a:b4:d8:12:ea:fc:ae:3b:39:
cc:39:fe:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org