Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/vU9XnOuU6Txcu2daQ2j6dzOoP_o.roa
File: vU9XnOuU6Txcu2daQ2j6dzOoP_o.roa (raw, json)
Hash identifier: LFUbd9Zw/gpEB4u+xkj5U9pXBy4Vj9lRdY7jt3RpMak=
Subject key identifier: BD:4F:57:9C:EB:94:E9:3C:5C:BB:67:5A:43:68:FA:77:33:A8:3F:FA
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 01837A86A73A3CB29DB90E946A4A267B08EF
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/vU9XnOuU6Txcu2daQ2j6dzOoP_o.roa
Signing time: Mon 26 Sep 2022 15:59:48 +0000
ROA not before: Mon 26 Sep 2022 15:59:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 31.6.1.0/24 maxlen: 24
31.6.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7a:86:a7:3a:3c:b2:9d:b9:0e:94:6a:4a:26:7b:08:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Sep 26 15:59:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd4f579ceb94e93c5cbb675a4368fa7733a83ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:23:3a:39:22:b5:58:c4:3b:cb:27:3f:c3:34:
c2:01:ca:bd:6e:91:7d:45:02:6e:6d:57:9f:48:07:
74:8e:a5:fa:9e:fa:e3:3c:a6:4a:ef:0d:5f:f1:aa:
89:12:5d:13:92:50:61:21:4f:49:04:6c:8f:3e:b0:
8d:91:d0:f9:3a:62:a0:8d:e4:34:f4:13:23:33:be:
4a:4e:bb:d6:31:7b:4c:1c:72:a1:37:a1:d8:24:fb:
f3:29:da:77:19:2a:09:95:7d:e6:4d:61:d6:4f:7e:
32:1b:fb:09:5b:07:88:60:0e:ee:ba:82:b4:42:43:
78:23:30:00:41:ee:0d:fa:f4:d6:cc:53:d7:70:be:
c1:28:3f:c8:e4:cc:29:d7:a6:ad:b4:96:cb:22:8b:
07:60:65:60:e3:6b:f8:32:0f:1f:45:94:9d:2a:25:
e1:40:4b:cb:60:2b:29:78:6e:17:f3:8a:b4:e6:2d:
f4:ed:f5:37:e6:a0:dd:9f:65:6c:bc:fb:d6:01:3c:
d1:96:65:00:07:94:e8:a7:33:7d:43:97:a5:4c:43:
4a:48:24:cc:15:fe:95:c1:1f:93:8d:6a:01:f2:f8:
d9:1c:f0:c0:f8:13:38:c9:37:48:ae:90:da:6d:53:
b6:aa:d0:26:03:50:13:4c:ce:14:d2:7d:c2:02:ec:
d0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4F:57:9C:EB:94:E9:3C:5C:BB:67:5A:43:68:FA:77:33:A8:3F:FA
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/vU9XnOuU6Txcu2daQ2j6dzOoP_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.1.0/24
31.6.16.0/24
Signature Algorithm: sha256WithRSAEncryption
87:5c:a9:cd:9e:fc:37:90:64:d2:67:c4:92:24:63:12:6c:f4:
76:d2:66:f1:70:8e:f1:6a:ac:e2:1c:e0:84:37:37:5d:31:2b:
8b:a1:ba:fd:d1:c8:5d:15:c2:f5:9a:36:44:24:55:14:38:10:
02:22:38:6f:dc:63:a5:fb:96:1e:72:6f:fe:ec:a7:ae:b0:fb:
3b:3e:2c:7e:03:64:bb:1a:a4:cd:2a:17:71:e7:02:1b:a1:2d:
d9:92:a7:d8:19:a9:97:ee:bd:bb:a6:5d:d2:b6:8b:c1:92:e3:
91:94:95:28:d8:a0:ec:e8:0d:65:45:82:7c:54:c9:1f:c0:43:
9c:be:cb:06:c6:b3:fd:f5:22:36:0d:f4:8a:8d:6b:e7:23:a3:
e3:63:c5:ec:0c:3a:a9:5a:31:9d:17:ef:25:2a:09:3f:e6:76:
32:56:e7:b4:4c:3c:64:67:a3:ea:ab:c7:88:1a:ac:56:77:bf:
e1:79:fd:98:dc:ec:42:3a:a1:ca:9a:62:ec:15:fc:5f:95:36:
d4:4f:51:8f:13:29:bf:94:6c:a7:ea:a2:1e:4c:3d:5a:27:ae:
eb:aa:74:da:b5:6a:c6:29:e1:22:5e:e2:3a:70:c8:b1:58:1e:
6f:9d:8a:e6:dd:b8:70:e2:96:c9:ae:0e:4b:ba:85:8d:5f:3a:
9c:bd:a0:c3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYN6hqc6PLKduQ6UakomewjvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1M2VjZTcxZWY2ZWJmNTViYjdiODdlNTA2NjViYTExZmRj
NzdmMDgwHhcNMjIwOTI2MTU1OTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDRmNTc5Y2ViOTRlOTNjNWNiYjY3NWE0MzY4ZmE3NzMzYTgzZmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyM6OSK1WMQ7yyc/wzTCAcq9bpF9
RQJubVefSAd0jqX6nvrjPKZK7w1f8aqJEl0TklBhIU9JBGyPPrCNkdD5OmKgjeQ0
9BMjM75KTrvWMXtMHHKhN6HYJPvzKdp3GSoJlX3mTWHWT34yG/sJWweIYA7uuoK0
QkN4IzAAQe4N+vTWzFPXcL7BKD/I5Mwp16attJbLIosHYGVg42v4Mg8fRZSdKiXh
QEvLYCspeG4X84q05i307fU35qDdn2VsvPvWATzRlmUAB5TopzN9Q5elTENKSCTM
Ff6VwR+TjWoB8vjZHPDA+BM4yTdIrpDabVO2qtAmA1ATTM4U0n3CAuzQ/wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL1PV5zrlOk8XLtnWkNo+nczqD/6MB8GA1UdIwQY
MBaAFNU+znHvbr9Vu3uH5QZluhH9x38IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVQ3T2NlOXV2MVc3ZTRmbEJtVzZFZjNIZndnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jODE2NjktMjUxOS00ZGE1LWJkNWQt
MWMyNjI2NTkwZDI4LzEvdlU5WG5PdVU2VHhjdTJkYVEyajZkek9vUF9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jODE2NjktMjUxOS00ZGE1LWJkNWQtMWMyNjI2NTkwZDI4
LzEvMVQ3T2NlOXV2MVc3ZTRmbEJtVzZFZjNIZndnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHwYBAwQA
HwYQMA0GCSqGSIb3DQEBCwUAA4IBAQCHXKnNnvw3kGTSZ8SSJGMSbPR20mbxcI7x
aqziHOCENzddMSuLobr90chdFcL1mjZEJFUUOBACIjhv3GOl+5Yecm/+7KeusPs7
Pix+A2S7GqTNKhdx5wIboS3ZkqfYGamX7r27pl3StovBkuORlJUo2KDs6A1lRYJ8
VMkfwEOcvssGxrP99SI2DfSKjWvnI6PjY8XsDDqpWjGdF+8lKgk/5nYyVue0TDxk
Z6Pqq8eIGqxWd7/hef2Y3OxCOqHKmmLsFfxflTbUT1GPEym/lGyn6qIeTD1aJ67r
qnTatWrGKeEiXuI6cMixWB5vnYrm3bhw4pbJrg5LuoWNXzqcvaDD
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:40 2023 by rpki-client on console-fra.rpki-client.org