Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/vRSwXCg3GZB35nFB78qeERRjPpk.roa
File: vRSwXCg3GZB35nFB78qeERRjPpk.roa (raw, json)
Hash identifier: r+jA1DrS6stucfiSLefpe4m8vWMWfie4bsIy9Mvl/Y0=
Subject key identifier: BD:14:B0:5C:28:37:19:90:77:E6:71:41:EF:CA:9E:11:14:63:3E:99
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 01856BAEA0624E6B620CCA5FE6061B51B718
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/vRSwXCg3GZB35nFB78qeERRjPpk.roa
Signing time: Sun 01 Jan 2023 04:54:44 +0000
ROA not before: Sun 01 Jan 2023 04:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 31.6.28.0/23 maxlen: 24
31.6.52.0/22 maxlen: 24
31.6.56.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:a0:62:4e:6b:62:0c:ca:5f:e6:06:1b:51:b7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Jan 1 04:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd14b05c2837199077e67141efca9e1114633e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0c:80:72:72:47:24:a5:76:7a:0d:50:f5:a4:
37:39:0d:6c:3d:54:7b:11:a3:86:c7:0c:d5:51:08:
b0:3e:64:64:5d:dd:a8:1c:c5:fb:7b:9a:03:b6:8f:
a2:7e:3c:ef:3e:18:0c:84:38:f8:50:84:82:6d:f3:
2b:f9:91:a5:95:f9:1f:ac:92:48:c8:0c:08:4e:21:
f6:0f:fc:bd:6f:86:55:e0:05:e4:11:c8:a5:5b:ae:
1b:5e:1e:cd:e1:0c:52:da:b7:eb:e5:a4:42:11:ab:
ce:fc:72:93:45:5b:19:88:80:a1:8f:d5:44:38:1c:
1d:b1:72:c2:3b:6b:dc:72:e3:74:22:15:dd:f9:f9:
a1:98:6d:33:13:3d:0c:c8:ce:5a:b6:d8:b3:3f:6e:
6e:eb:de:db:2f:1e:c0:e9:55:9a:c5:b9:54:f0:15:
d9:e7:94:27:d1:51:7a:8c:ae:5b:f2:0c:35:62:38:
36:4d:ea:f7:53:fc:bd:d4:f1:03:34:6c:86:c3:68:
2d:dd:24:81:94:03:3c:73:2a:e7:18:23:90:10:5d:
3a:de:0e:20:0f:1a:cd:54:d3:36:9e:e1:1a:3a:6c:
b5:07:3b:96:fa:d0:81:de:3f:72:a8:f0:81:60:21:
64:9d:d6:a4:71:b1:76:be:20:95:1f:26:84:ed:15:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:14:B0:5C:28:37:19:90:77:E6:71:41:EF:CA:9E:11:14:63:3E:99
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/vRSwXCg3GZB35nFB78qeERRjPpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.28.0/23
31.6.52.0-31.6.57.255
Signature Algorithm: sha256WithRSAEncryption
9e:c4:0f:c0:59:63:e5:5f:22:ee:92:7d:bb:c6:df:24:2e:c6:
ab:47:18:48:85:bf:5d:e1:aa:6c:f3:66:7d:6b:9d:61:35:21:
bd:ab:b6:65:70:4b:9c:49:cf:da:3f:74:1f:d7:0d:62:1c:ac:
4e:08:1d:93:4e:c3:e6:d0:59:7c:1c:6d:c1:f7:cf:cc:70:bb:
b7:03:00:b5:aa:b6:23:23:71:c4:7e:7d:e8:fc:02:77:d2:2b:
1f:92:ec:d7:3e:78:22:cd:94:81:25:92:15:b7:22:7c:0e:4f:
2a:68:20:a5:d0:6e:af:12:9f:cd:f9:3f:54:88:7a:48:1c:84:
e7:99:02:b9:db:18:de:02:c1:cb:b9:c1:8b:b1:1c:88:f7:67:
f3:9f:e3:24:e5:b9:e3:9c:d1:28:a6:c0:b0:c1:28:67:e2:12:
c5:ef:29:1b:f3:3e:92:f6:e2:23:b9:b1:fc:e5:d4:80:b4:3b:
03:37:ac:62:8f:f4:d3:08:2f:f2:67:16:f1:d3:39:14:dc:7a:
97:85:b5:d8:9f:52:1a:b9:3b:a2:3b:fb:14:4b:a4:42:6f:b6:
e4:9b:6a:bb:a4:29:0c:95:44:35:23:eb:83:dc:c7:e8:60:ec:
b3:04:c1:64:bf:d4:53:36:88:5f:d6:05:5b:e1:a0:28:db:f4:
0f:33:92:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:40 2023 by rpki-client on console-fra.rpki-client.org