Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/glFVqe71sERlRDIkMYKuxQE7CVw.roa
File: glFVqe71sERlRDIkMYKuxQE7CVw.roa (raw, json)
Hash identifier: 9iPW6kEq5wIMUeq21CdV2eIsDfJIvlnwUZraIBPPfxk=
Subject key identifier: 82:51:55:A9:EE:F5:B0:44:65:44:32:24:31:82:AE:C5:01:3B:09:5C
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 03291A8F
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/glFVqe71sERlRDIkMYKuxQE7CVw.roa
Signing time: Thu 09 Jun 2022 05:43:02 +0000
ROA not before: Thu 09 Jun 2022 05:43:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 31.6.28.0/23 maxlen: 24
31.6.43.0/24 maxlen: 24
31.6.48.0/24 maxlen: 24
31.6.50.0/23 maxlen: 24
31.6.45.0/24 maxlen: 24
31.6.46.0/23 maxlen: 24
31.6.56.0/23 maxlen: 24
31.6.62.0/23 maxlen: 24
31.6.59.0/24 maxlen: 24
31.6.61.0/24 maxlen: 24
31.6.1.0/24 maxlen: 24
31.6.2.0/24 maxlen: 24
185.29.166.0/24 maxlen: 24
31.6.16.0/24 maxlen: 24
31.6.12.0/22 maxlen: 24
31.6.20.0/24 maxlen: 24
31.6.24.0/22 maxlen: 24
178.208.177.0/24 maxlen: 24
178.208.178.0/23 maxlen: 24
178.208.184.0/24 maxlen: 24
178.208.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53025423 (0x3291a8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Jun 9 05:43:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=825155a9eef5b044654432243182aec5013b095c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:10:a8:28:04:5c:28:76:bc:0c:8e:a7:d0:38:
9e:d3:0c:6a:ad:dc:d5:c7:df:3d:72:b9:e5:d2:62:
70:ec:23:97:85:a8:72:f4:4d:ad:8f:e7:dd:8c:4c:
ea:e4:78:05:3c:e6:e4:4a:e1:b7:32:c5:d2:f6:b3:
e3:5d:99:41:c1:ab:b2:e9:ba:2a:00:d3:ed:b6:87:
80:cc:b8:a8:21:ad:ff:52:4d:33:ed:10:42:3e:47:
a2:0f:9d:bd:c2:17:58:d0:c5:08:d1:d6:01:b5:0d:
6b:c3:4c:8c:11:1b:01:19:6f:6d:1e:09:5e:05:a3:
4f:ba:d1:d1:1d:6d:b8:94:ef:6c:22:82:05:84:57:
be:e4:a6:f8:4e:33:01:46:4a:dc:d9:aa:00:77:34:
3f:11:f4:02:10:ab:28:e8:74:12:16:85:3f:92:cd:
f6:91:a9:d6:23:b9:96:a1:12:48:b4:08:0a:25:28:
9e:7a:48:fb:8b:2a:4a:8e:20:43:e4:2a:9c:89:d8:
a6:27:f2:33:41:c9:79:f5:60:75:96:58:8d:15:93:
87:29:b6:5e:9c:0d:c0:2a:38:70:c4:8d:7a:51:0d:
a8:4e:50:c1:f4:97:e6:fd:ba:e0:f3:1c:f1:08:39:
f8:e7:f5:ae:33:ac:34:07:56:63:03:77:31:8d:2b:
bc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:51:55:A9:EE:F5:B0:44:65:44:32:24:31:82:AE:C5:01:3B:09:5C
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/glFVqe71sERlRDIkMYKuxQE7CVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.1.0-31.6.2.255
31.6.12.0-31.6.16.255
31.6.20.0/24
31.6.24.0-31.6.29.255
31.6.43.0/24
31.6.45.0-31.6.48.255
31.6.50.0/23
31.6.56.0/23
31.6.59.0/24
31.6.61.0-31.6.63.255
178.208.177.0-178.208.184.255
185.29.166.0/24
Signature Algorithm: sha256WithRSAEncryption
18:12:02:a8:94:70:e3:36:87:42:8c:e7:5b:a6:2b:df:0a:39:
c8:16:77:c2:9d:1d:ba:2b:73:b6:1d:38:c3:2a:52:88:3f:78:
60:f2:a5:b4:ba:37:89:2e:cc:b9:5b:2a:1a:7d:29:d7:34:18:
3e:bb:a0:d1:33:4c:3a:0d:27:8f:99:d3:73:ff:38:64:f6:8c:
71:f6:a9:7d:e7:f2:b9:c0:ab:67:f9:1b:76:c3:51:b2:25:ca:
7b:58:86:5d:ab:93:c9:ef:03:0f:7e:ec:89:ab:14:77:da:ec:
5e:65:58:7e:80:fb:b9:22:e6:c1:0f:c1:4d:d4:e6:ca:03:32:
a5:df:6e:fe:7a:8b:00:1d:9a:5d:6a:fb:68:a7:ed:b9:24:87:
75:f0:d9:95:68:5e:cd:c9:1d:20:f8:1c:59:bd:72:6c:2b:89:
2e:ef:78:00:e2:98:38:47:5a:9d:7a:98:94:e2:93:9d:68:b1:
ec:b7:b6:61:d3:5c:f6:36:b0:f2:51:0b:e9:a6:f7:fa:1b:a5:
00:6c:c8:a0:72:ec:4f:ca:bd:8d:ca:ea:cd:8a:7e:8f:d1:25:
81:b6:d6:1d:dd:37:9d:a5:9b:52:d1:24:91:ca:a7:c1:3d:23:
2b:47:02:b0:f6:85:a9:a7:48:cc:6b:82:99:4e:37:71:f7:9d:
d0:99:af:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org