Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/4b97c4-de0c-45d7-8f17-5d0ae14563d7/1/j7DtpUFBvknr7iQmKjqpeynnKUs.roa
File: j7DtpUFBvknr7iQmKjqpeynnKUs.roa (raw, json)
Hash identifier: KqRW4tuF9obdNVkJ7HEbzxsqsCw93BhTC/RhRXOgCbM=
Subject key identifier: 8F:B0:ED:A5:41:41:BE:49:EB:EE:24:26:2A:3A:A9:7B:29:E7:29:4B
Certificate issuer: /CN=7b0a9ea086d81eed4d29de463d6029088fe3bec1
Certificate serial: 018636C8B33B24642909603DC44745912EBD
Authority key identifier: 7B:0A:9E:A0:86:D8:1E:ED:4D:29:DE:46:3D:60:29:08:8F:E3:BE:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewqeoIbYHu1NKd5GPWApCI_jvsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/4b97c4-de0c-45d7-8f17-5d0ae14563d7/1/j7DtpUFBvknr7iQmKjqpeynnKUs.roa
Signing time: Thu 09 Feb 2023 15:26:08 +0000
ROA not before: Thu 09 Feb 2023 15:26:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59447
IP address blocks: 31.222.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:36:c8:b3:3b:24:64:29:09:60:3d:c4:47:45:91:2e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0a9ea086d81eed4d29de463d6029088fe3bec1
Validity
Not Before: Feb 9 15:26:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fb0eda54141be49ebee24262a3aa97b29e7294b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:f2:bb:bd:5e:c9:be:28:e3:16:15:6f:6e:
a5:cb:45:c1:fd:1e:d3:a3:eb:a2:b2:e8:93:b0:13:
ef:8b:56:d6:46:87:43:31:17:4a:06:7c:38:0d:86:
27:bf:f6:0e:d6:8b:8a:74:cb:50:71:e9:72:4d:d6:
92:59:4b:b3:85:2b:82:2b:30:c5:7c:71:07:c9:a1:
f2:65:5e:5e:10:71:33:a0:76:12:86:28:6b:b5:c4:
20:2d:98:7e:50:46:7b:ef:0b:e3:71:3b:6c:6c:4e:
6c:55:11:d6:94:86:a8:bd:f2:55:42:b0:3b:04:d6:
cf:1d:53:1c:2e:cd:c6:0d:72:69:66:3a:81:aa:d7:
f7:54:a8:73:74:b9:b9:47:87:df:8a:b6:42:d3:40:
2f:b7:b0:48:19:5d:9e:d8:83:be:d7:59:da:29:0c:
da:20:71:fc:d2:a3:71:06:9d:35:96:6c:0b:15:81:
7a:e0:d5:79:52:6a:d2:8f:9a:d0:20:f4:e8:55:c4:
0a:1b:bd:1c:4a:3b:ad:13:2b:7a:7e:36:9b:f3:bb:
e2:5e:bd:f2:f0:a4:ae:ca:f0:e1:f8:a9:ea:0b:c1:
f8:53:12:a4:69:e0:72:e2:6b:7a:20:27:36:3b:11:
4f:e4:77:d7:34:ac:c4:10:69:94:95:95:0e:0f:46:
9a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B0:ED:A5:41:41:BE:49:EB:EE:24:26:2A:3A:A9:7B:29:E7:29:4B
X509v3 Authority Key Identifier:
keyid:7B:0A:9E:A0:86:D8:1E:ED:4D:29:DE:46:3D:60:29:08:8F:E3:BE:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewqeoIbYHu1NKd5GPWApCI_jvsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/4b97c4-de0c-45d7-8f17-5d0ae14563d7/1/j7DtpUFBvknr7iQmKjqpeynnKUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/4b97c4-de0c-45d7-8f17-5d0ae14563d7/1/ewqeoIbYHu1NKd5GPWApCI_jvsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.228.0/24
Signature Algorithm: sha256WithRSAEncryption
18:51:4f:8a:1d:6d:f8:c8:90:13:12:37:20:f7:93:e4:c6:ab:
65:a9:55:aa:19:c3:c6:c1:25:8b:39:33:13:4f:ed:81:33:49:
5c:5a:a4:19:19:67:8a:07:7b:fe:9c:8b:b9:b0:2c:5f:60:cd:
50:f4:d3:d1:8c:82:0c:cb:9e:db:c8:8a:2c:4a:63:a3:67:67:
6f:8f:e6:0c:6f:f3:3e:2c:83:f4:20:10:e4:38:39:95:ba:87:
81:07:e1:02:ad:45:f7:6d:b7:a1:50:b7:b7:91:aa:dc:31:3d:
ea:61:a0:e2:42:6c:d0:51:21:01:4e:17:89:19:53:9a:0b:13:
14:f5:0f:d6:e6:1f:8e:85:87:7f:53:94:bc:5d:66:76:e9:e9:
81:88:d8:a0:6d:01:df:73:57:3c:3f:0d:0a:c2:a6:df:95:e8:
fa:a0:b7:8e:dd:c1:0b:e1:b8:ba:21:c8:45:a3:fd:ae:21:fb:
59:0d:96:a9:ab:54:00:24:8d:13:6d:f0:b9:c8:bf:11:2e:6f:
1f:84:97:1a:3f:e9:e8:82:89:16:cb:d0:b5:40:a7:9c:55:a7:
2e:7a:7d:c5:22:27:0d:c9:b7:a7:46:89:42:cf:ca:5b:e8:c5:
3d:c1:db:5b:15:b2:42:57:01:52:6b:09:5f:6a:99:7b:56:9f:
c0:0e:61:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:45 2024 by rpki-client on console-fra.rpki-client.org