Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/wuaYm63sG0eldEu_GV5dMPyoUyI.roa
File: wuaYm63sG0eldEu_GV5dMPyoUyI.roa (raw, json)
Hash identifier: FUgbCFX2rg8MiMdYpmD28QCj+5Hr6jMykPgwOnm3cLA=
Subject key identifier: C2:E6:98:9B:AD:EC:1B:47:A5:74:4B:BF:19:5E:5D:30:FC:A8:53:22
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 02F3F5C2
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/wuaYm63sG0eldEu_GV5dMPyoUyI.roa
Signing time: Wed 18 May 2022 22:26:16 +0000
ROA not before: Wed 18 May 2022 22:26:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 31.6.28.0/23 maxlen: 24
178.208.178.0/23 maxlen: 24
31.6.50.0/23 maxlen: 24
31.6.46.0/23 maxlen: 24
178.208.180.0/22 maxlen: 24
31.6.56.0/23 maxlen: 24
31.6.52.0/22 maxlen: 24
31.6.62.0/23 maxlen: 24
31.6.12.0/22 maxlen: 24
31.6.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49542594 (0x2f3f5c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: May 18 22:26:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2e6989badec1b47a5744bbf195e5d30fca85322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b1:2e:ca:4d:cb:54:16:39:f1:35:a2:f5:6c:
b0:c1:9e:d4:c7:20:29:e4:5b:b8:80:b4:a6:3f:bc:
bc:2d:ed:8a:89:e6:28:ec:11:b7:c8:27:46:e0:2f:
95:f7:f0:93:df:bc:e8:9b:b3:57:f6:77:35:53:8c:
fe:ca:f3:04:9e:17:0e:7b:ae:c2:0a:41:a8:a8:8f:
5d:d2:48:57:59:27:04:55:de:09:f3:8e:d2:3e:e4:
b4:b5:4a:e7:68:f2:ab:cf:09:81:55:6d:66:b2:3f:
91:cc:2b:bb:06:da:ca:5d:77:1c:bb:f4:a5:c9:16:
0f:d4:d1:c7:a1:80:3c:0b:e8:55:3a:b9:fc:32:23:
34:91:08:e7:44:95:7a:70:7e:6e:1a:9d:f9:8a:62:
7d:8f:0e:ea:24:f0:4c:2e:d8:24:8c:e8:ab:82:d3:
2e:f3:cf:9d:f3:cb:c4:19:0a:17:28:08:b4:ad:53:
74:0c:70:92:f0:fb:32:f9:03:89:f6:c6:ff:5c:c9:
23:a3:1d:d0:0c:00:3f:98:c0:06:2b:11:e5:3c:c3:
39:16:6f:e8:3f:dc:59:4e:a7:3d:8a:e4:6f:8e:af:
0b:57:50:c1:f1:bf:db:45:fc:ec:e7:6f:4b:66:2e:
40:85:2e:63:8f:f8:4a:29:1d:3d:16:78:d2:54:af:
a5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E6:98:9B:AD:EC:1B:47:A5:74:4B:BF:19:5E:5D:30:FC:A8:53:22
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/wuaYm63sG0eldEu_GV5dMPyoUyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.12.0/22
31.6.24.0-31.6.29.255
31.6.46.0/23
31.6.50.0-31.6.57.255
31.6.62.0/23
178.208.178.0-178.208.183.255
Signature Algorithm: sha256WithRSAEncryption
70:cc:36:e8:21:44:e9:01:4d:ff:67:0b:b1:2a:d1:20:8b:6c:
f1:ef:d6:95:5e:06:95:c7:ca:53:ec:c9:25:84:9f:33:b4:58:
b2:04:5a:2d:17:86:d0:4c:5d:a1:70:7d:11:b6:5c:de:83:ae:
13:22:29:52:cd:ca:74:2f:95:53:4e:66:b0:83:c7:ea:e8:ff:
dc:a8:5e:72:61:41:39:31:44:f7:07:87:31:bd:4b:a7:05:3f:
d7:c4:24:df:21:0b:cd:79:4d:86:8a:e5:cb:36:78:d8:1c:f0:
1b:e2:3f:9a:e6:22:6f:e3:b5:92:1b:eb:4f:59:36:c6:14:86:
58:57:0a:76:6b:02:b6:57:d3:95:3f:b5:cf:db:51:06:72:0f:
b2:05:5a:11:38:4b:e7:b5:75:e6:7b:20:8f:a1:98:f5:14:3c:
c3:56:fc:48:c3:4c:40:5d:8a:0f:ce:f9:94:37:d9:1d:83:aa:
b7:6b:ff:9f:93:c3:1d:75:3b:49:ec:be:00:7e:54:90:8f:b2:
9e:1b:6d:ed:7f:c4:0c:46:d6:04:65:92:e3:18:21:41:14:6d:
56:47:f3:19:42:25:cf:b3:5c:70:f2:61:5c:4f:1a:06:a3:9d:
91:cc:46:cf:59:0d:a5:03:89:31:8d:01:98:54:68:7d:f0:2f:
be:30:71:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org