Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/pDec6Lq7W3CkqClH2qh7K9pxZP0.roa
File: pDec6Lq7W3CkqClH2qh7K9pxZP0.roa (raw, json)
Hash identifier: E8kXe886N+50eIyx+DDULtUUb0mdN+bGvteckH5US6c=
Subject key identifier: A4:37:9C:E8:BA:BB:5B:70:A4:A8:29:47:DA:A8:7B:2B:DA:71:64:FD
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 01856BAEA928940A17676BF003C730EDC2A0
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/pDec6Lq7W3CkqClH2qh7K9pxZP0.roa
Signing time: Sun 01 Jan 2023 04:54:46 +0000
ROA not before: Sun 01 Jan 2023 04:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207326
IP address blocks: 178.208.178.0/23 maxlen: 24
31.6.46.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:a9:28:94:0a:17:67:6b:f0:03:c7:30:ed:c2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Jan 1 04:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4379ce8babb5b70a4a82947daa87b2bda7164fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:74:93:51:72:56:55:24:dd:26:bb:31:c1:
5b:85:0b:0f:b8:18:f9:7d:3e:d2:77:a1:f7:8b:c3:
7f:51:43:15:a7:66:ac:7c:38:5b:cc:6f:6d:1e:a7:
4b:12:bf:2d:b7:80:7b:cb:59:da:45:6f:bc:74:bf:
39:21:8f:7f:ea:bf:59:c5:b7:a6:a3:c1:37:40:4a:
f8:1a:5a:21:2d:12:d7:91:f3:85:bf:d7:ce:0c:e4:
f0:8c:ad:07:47:bc:d3:90:f3:5b:4e:1a:ff:28:b2:
60:f0:29:8b:ba:43:cb:ba:61:22:6a:bd:62:fb:6c:
ec:b3:21:59:c2:3b:60:ee:7e:d1:64:c7:b4:90:f5:
4e:2f:3b:9a:37:5b:8a:74:8f:5c:c4:aa:fe:13:0d:
a2:90:69:2a:0d:fb:40:b2:8b:cc:4c:3c:ef:d2:43:
c7:a0:fe:87:b4:cd:d9:51:6e:04:40:1a:d5:5c:39:
ea:6b:38:f3:67:84:14:0c:22:c4:eb:4c:28:d1:69:
7f:23:2b:da:a2:66:9e:51:a1:28:35:77:d6:4b:0c:
57:6e:02:05:6b:c8:30:9f:34:74:f9:16:b8:27:1c:
ed:da:d4:dd:ed:51:ae:6f:7a:d1:ef:85:38:42:60:
19:f0:70:8d:2c:26:24:4c:fd:b0:1c:7b:46:6f:f9:
94:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:37:9C:E8:BA:BB:5B:70:A4:A8:29:47:DA:A8:7B:2B:DA:71:64:FD
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/pDec6Lq7W3CkqClH2qh7K9pxZP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.46.0/23
178.208.178.0/23
Signature Algorithm: sha256WithRSAEncryption
58:18:e1:93:c4:f2:43:a3:ac:4f:a0:e3:18:1c:93:10:fe:c2:
73:90:b9:af:58:00:0b:db:4b:9e:9a:08:52:af:ae:02:f8:df:
75:ad:de:a4:c1:99:5b:0e:10:bf:b0:fa:0c:ce:13:2f:45:7f:
ac:2d:07:3d:b3:ee:aa:8e:88:8e:84:8e:0b:2f:32:13:da:5a:
b4:70:15:b2:99:70:87:17:03:11:b5:89:56:b3:13:26:09:ed:
c8:c5:67:c0:59:d7:65:d8:d0:91:82:5b:c9:6d:5a:46:f6:10:
8a:20:4f:85:4c:6b:58:2e:7b:5b:9c:34:42:55:f0:c6:30:98:
45:2d:0d:db:23:11:47:bc:c9:04:15:7b:0e:03:8f:48:e1:73:
83:f5:b7:26:d6:2a:27:25:7a:6c:39:49:e9:37:f9:af:9a:c4:
62:1f:ee:19:97:93:45:89:33:9e:61:3f:bd:57:be:05:1e:e4:
cd:a7:be:ea:9c:13:c1:5e:35:02:88:52:30:e8:32:f3:59:27:
30:52:bd:c2:e5:62:3d:7f:89:20:c1:57:31:93:24:eb:7e:e7:
7d:1b:9c:81:bb:85:1e:a6:85:c1:fe:a4:05:c8:81:11:72:82:
24:f4:9a:2f:85:8a:a6:30:6b:b8:04:cd:fe:49:bd:a4:b1:f9:
b1:21:59:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org