Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/yfNzyn5plkknImG0byrJX1quSIs.roa
File: yfNzyn5plkknImG0byrJX1quSIs.roa (raw, json)
Hash identifier: boZPg7bAvpaIJqBs/UDgjiG18aXc3vhNNOjyqbYMVy0=
Subject key identifier: C9:F3:73:CA:7E:69:96:49:27:22:61:B4:6F:2A:C9:5F:5A:AE:48:8B
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 0182846C93BAF589F606CDFA27BA6E020772
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/yfNzyn5plkknImG0byrJX1quSIs.roa
Signing time: Tue 09 Aug 2022 21:04:44 +0000
ROA not before: Tue 09 Aug 2022 21:04:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 31.6.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:84:6c:93:ba:f5:89:f6:06:cd:fa:27:ba:6e:02:07:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Aug 9 21:04:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9f373ca7e699649272261b46f2ac95f5aae488b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dd:25:89:5d:b2:92:ea:40:24:74:6d:91:37:
6d:a8:98:0e:04:11:c9:59:60:42:4b:23:a8:d7:8c:
90:ab:b8:2b:01:d5:2b:41:78:44:13:48:8e:31:80:
40:02:ca:87:d6:30:ff:58:81:a2:d9:79:81:ea:22:
ce:40:6e:b8:96:1b:33:9d:54:ef:a1:6c:ae:17:32:
56:e5:bc:4f:bb:0c:46:b6:89:22:76:a5:42:c4:23:
a0:91:e8:7f:8e:aa:72:b9:c2:c3:65:35:fa:21:43:
e2:91:d0:35:62:e7:47:e2:b9:80:37:f7:5b:a9:b9:
eb:76:43:7f:eb:93:34:86:f5:74:8b:c7:83:0d:ea:
60:1c:36:2a:00:06:ab:a8:22:fa:5d:af:19:10:d4:
eb:cf:d9:e6:a9:55:18:88:6b:1c:45:5d:ff:41:be:
8c:f3:47:61:4e:02:ac:89:4f:15:3a:50:52:c9:ce:
cd:d9:cd:36:4c:85:a6:67:fc:71:a0:ca:8e:75:e6:
5f:e7:dc:74:28:e0:5e:a1:25:e3:dd:41:36:54:39:
a8:20:e6:78:1f:58:da:ad:19:21:5a:32:ce:a9:e2:
7c:18:f2:bb:db:5e:12:19:3b:75:00:de:a4:f7:f6:
5e:6d:ca:e0:5e:de:1c:ba:08:09:3f:3c:02:be:f7:
22:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F3:73:CA:7E:69:96:49:27:22:61:B4:6F:2A:C9:5F:5A:AE:48:8B
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/yfNzyn5plkknImG0byrJX1quSIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.52.0/22
Signature Algorithm: sha256WithRSAEncryption
20:a1:04:64:87:89:0c:7c:be:ab:2e:67:23:54:2c:c2:89:2d:
a8:fb:6e:a0:a2:7e:ce:77:11:f4:df:86:2a:53:86:c3:a6:a7:
33:13:03:25:13:ba:b4:21:83:94:c5:af:73:e2:6b:be:1d:2c:
0c:9c:e5:b8:3a:08:77:2a:84:9d:12:5e:e4:91:b2:61:56:e1:
0e:de:8a:6b:33:63:0a:a6:15:3b:9c:f4:16:55:0a:45:a5:65:
2a:9e:47:8a:a7:f1:e2:31:fb:ba:bd:ad:5f:46:a6:16:dd:93:
ac:d2:14:f5:7d:c0:82:09:c7:24:16:39:d3:1e:3c:b0:8f:ff:
d0:f3:88:ea:b4:58:de:a6:a0:44:ee:19:57:68:8e:7b:4a:fb:
17:3a:64:71:e0:3c:1e:59:1a:82:b5:d8:0c:65:cf:9e:7e:9e:
51:4d:48:1d:a7:1e:47:fd:cd:a1:b7:83:7b:a5:34:81:6f:a6:
7e:af:a5:35:33:d1:b7:b3:de:3f:87:3b:9f:74:0b:ff:b8:89:
39:eb:1d:9d:59:fd:26:f2:66:f7:a4:b3:ec:7b:52:84:f5:be:
d5:63:2a:69:c4:ec:0f:fb:55:40:3f:1f:f8:3d:93:00:ca:40:
6b:af:77:2f:00:ff:91:92:5d:e6:58:87:85:14:57:ae:da:21:
96:76:30:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKEbJO69Yn2Bs36J7puAgdyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1M2VjZTcxZWY2ZWJmNTViYjdiODdlNTA2NjViYTExZmRj
NzdmMDgwHhcNMjIwODA5MjEwNDQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWYzNzNjYTdlNjk5NjQ5MjcyMjYxYjQ2ZjJhYzk1ZjVhYWU0ODhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN0liV2ykupAJHRtkTdtqJgOBBHJ
WWBCSyOo14yQq7grAdUrQXhEE0iOMYBAAsqH1jD/WIGi2XmB6iLOQG64lhsznVTv
oWyuFzJW5bxPuwxGtokidqVCxCOgkeh/jqpyucLDZTX6IUPikdA1YudH4rmAN/db
qbnrdkN/65M0hvV0i8eDDepgHDYqAAarqCL6Xa8ZENTrz9nmqVUYiGscRV3/Qb6M
80dhTgKsiU8VOlBSyc7N2c02TIWmZ/xxoMqOdeZf59x0KOBeoSXj3UE2VDmoIOZ4
H1jarRkhWjLOqeJ8GPK7214SGTt1AN6k9/ZebcrgXt4cuggJPzwCvvciVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMnzc8p+aZZJJyJhtG8qyV9arkiLMB8GA1UdIwQY
MBaAFNU+znHvbr9Vu3uH5QZluhH9x38IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVQ3T2NlOXV2MVc3ZTRmbEJtVzZFZjNIZndnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jODE2NjktMjUxOS00ZGE1LWJkNWQt
MWMyNjI2NTkwZDI4LzEveWZOenluNXBsa2tuSW1HMGJ5ckpYMXF1U0lzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jODE2NjktMjUxOS00ZGE1LWJkNWQtMWMyNjI2NTkwZDI4
LzEvMVQ3T2NlOXV2MVc3ZTRmbEJtVzZFZjNIZndnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCHwY0MA0G
CSqGSIb3DQEBCwUAA4IBAQAgoQRkh4kMfL6rLmcjVCzCiS2o+26gon7OdxH034Yq
U4bDpqczEwMlE7q0IYOUxa9z4mu+HSwMnOW4Ogh3KoSdEl7kkbJhVuEO3oprM2MK
phU7nPQWVQpFpWUqnkeKp/HiMfu6va1fRqYW3ZOs0hT1fcCCCcckFjnTHjywj//Q
84jqtFjepqBE7hlXaI57SvsXOmRx4DweWRqCtdgMZc+efp5RTUgdpx5H/c2ht4N7
pTSBb6Z+r6U1M9G3s94/hzufdAv/uIk56x2dWf0m8mb3pLPse1KE9b7VYyppxOwP
+1VAPx/4PZMAykBrr3cvAP+Rkl3mWIeFFFeu2iGWdjDX
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:40 2023 by rpki-client on console-fra.rpki-client.org