Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a04b28-3918-4259-bd25-73d8df5eb288/1/myTjjpmw7kOacxtQfgK9VxXpQMQ.roa
File: myTjjpmw7kOacxtQfgK9VxXpQMQ.roa (raw, json)
Hash identifier: vBpgiytCg3FDlySnorm9JSAB/oDsNiDNbSj3rowWD5I=
Subject key identifier: 9B:24:E3:8E:99:B0:EE:43:9A:73:1B:50:7E:02:BD:57:15:E9:40:C4
Certificate issuer: /CN=0b0262eb9b43781af47bfd833d7b2a8ed5bd69c0
Certificate serial: 018382DE934F09D7CB89490037C59543943E
Authority key identifier: 0B:02:62:EB:9B:43:78:1A:F4:7B:FD:83:3D:7B:2A:8E:D5:BD:69:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CwJi65tDeBr0e_2DPXsqjtW9acA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a04b28-3918-4259-bd25-73d8df5eb288/1/myTjjpmw7kOacxtQfgK9VxXpQMQ.roa
Signing time: Wed 28 Sep 2022 06:52:48 +0000
ROA not before: Wed 28 Sep 2022 06:52:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210703
IP address blocks: 31.41.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:82:de:93:4f:09:d7:cb:89:49:00:37:c5:95:43:94:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b0262eb9b43781af47bfd833d7b2a8ed5bd69c0
Validity
Not Before: Sep 28 06:52:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b24e38e99b0ee439a731b507e02bd5715e940c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:87:3f:e7:f2:9d:90:18:11:c0:07:e9:43:da:
86:b8:18:31:65:5a:80:5d:1a:5b:0e:d9:93:af:bc:
c2:e2:e8:55:21:a3:c5:d9:b1:27:45:5f:39:f5:6b:
7d:3a:89:94:e2:fa:ed:5d:8f:bd:f8:bb:fb:4e:cd:
37:62:19:b0:2f:17:97:22:fb:23:4f:b6:36:f5:bc:
c2:06:1b:91:a3:62:fb:86:7b:e1:3a:fb:c8:f0:fb:
71:dd:e5:06:28:b1:d0:59:35:ac:a0:2c:97:c0:0d:
cd:66:b4:fb:bf:32:1e:db:3a:c0:ea:ad:be:63:83:
16:f6:15:20:17:0e:0a:3e:1c:39:f4:98:60:89:5e:
6d:7d:5d:6a:3b:10:0b:52:56:4b:a4:43:45:15:4f:
b2:2d:96:a2:25:31:dd:a6:21:ac:1f:65:8b:69:2e:
9a:73:c3:2e:ae:5c:9c:54:0f:1b:5e:4c:c1:02:38:
7b:db:bd:b2:1a:0d:50:09:58:22:cc:a5:4f:ea:ff:
4c:5d:d4:70:67:04:d7:cb:0a:c9:7d:86:e0:10:e0:
fe:05:db:1a:39:9f:d7:ad:58:5c:b9:b9:3a:c3:1e:
c0:0f:6d:0a:22:72:51:9f:6b:f5:43:17:64:f9:45:
f2:19:b9:ab:33:15:31:87:d0:fd:fc:3d:09:66:6a:
11:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:24:E3:8E:99:B0:EE:43:9A:73:1B:50:7E:02:BD:57:15:E9:40:C4
X509v3 Authority Key Identifier:
keyid:0B:02:62:EB:9B:43:78:1A:F4:7B:FD:83:3D:7B:2A:8E:D5:BD:69:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CwJi65tDeBr0e_2DPXsqjtW9acA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a04b28-3918-4259-bd25-73d8df5eb288/1/myTjjpmw7kOacxtQfgK9VxXpQMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a04b28-3918-4259-bd25-73d8df5eb288/1/CwJi65tDeBr0e_2DPXsqjtW9acA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.249.0/24
Signature Algorithm: sha256WithRSAEncryption
10:48:27:97:c1:78:87:8d:e9:db:87:e2:f0:63:1c:9d:3e:9d:
bc:09:b0:49:55:2a:cd:90:54:4e:f7:51:e0:d9:91:b5:46:1c:
dd:ce:d3:c2:4e:f4:1e:7b:38:fe:db:c3:2e:78:a9:08:40:5d:
7e:b2:5c:97:d8:68:53:c4:ed:2b:21:67:b2:72:da:e5:61:b8:
73:6d:7e:fc:50:79:c9:73:f8:2f:96:41:f3:b1:d6:bc:11:5a:
60:2f:06:5f:1c:ff:ae:02:d7:73:0b:b8:3b:8e:63:c3:d3:8b:
f0:ee:8a:09:5b:55:e8:00:91:eb:22:c7:0d:31:04:41:04:8a:
72:ef:80:9a:83:1b:e7:ed:e2:89:29:0f:ed:3a:8a:d2:16:e0:
33:9b:33:c5:20:a8:44:78:6f:f6:d9:0f:b9:f4:33:63:20:57:
80:5e:72:ee:06:3f:5e:e2:a2:8a:7d:4b:c5:07:bb:f1:3e:c2:
c2:9a:3c:64:3e:70:81:2d:34:c0:ad:e0:e7:07:87:ed:a2:2c:
ec:e5:62:84:57:05:a8:89:ca:9a:be:31:95:c6:45:2d:03:ed:
66:bb:64:8c:b6:72:e8:8d:17:36:e6:38:64:44:20:d4:4f:74:
52:c8:12:20:2c:e5:7c:3e:af:70:a9:90:4e:3c:90:3a:d0:25:
89:d0:a6:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYOC3pNPCdfLiUkAN8WVQ5Q+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMDI2MmViOWI0Mzc4MWFmNDdiZmQ4MzNkN2IyYThlZDVi
ZDY5YzAwHhcNMjIwOTI4MDY1MjQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjI0ZTM4ZTk5YjBlZTQzOWE3MzFiNTA3ZTAyYmQ1NzE1ZTk0MGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYc/5/KdkBgRwAfpQ9qGuBgxZVqA
XRpbDtmTr7zC4uhVIaPF2bEnRV859Wt9OomU4vrtXY+9+Lv7Ts03YhmwLxeXIvsj
T7Y29bzCBhuRo2L7hnvhOvvI8Ptx3eUGKLHQWTWsoCyXwA3NZrT7vzIe2zrA6q2+
Y4MW9hUgFw4KPhw59JhgiV5tfV1qOxALUlZLpENFFU+yLZaiJTHdpiGsH2WLaS6a
c8MurlycVA8bXkzBAjh7272yGg1QCVgizKVP6v9MXdRwZwTXywrJfYbgEOD+Bdsa
OZ/XrVhcubk6wx7AD20KInJRn2v1Qxdk+UXyGbmrMxUxh9D9/D0JZmoRHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJsk446ZsO5DmnMbUH4CvVcV6UDEMB8GA1UdIwQY
MBaAFAsCYuubQ3ga9Hv9gz17Ko7VvWnAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3dKaTY1dERlQnIwZV8yRFBYc3FqdFc5YWNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hMDRiMjgtMzkxOC00MjU5LWJkMjUt
NzNkOGRmNWViMjg4LzEvbXlUampwbXc3a09hY3h0UWZnSzlWeFhwUU1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9hMDRiMjgtMzkxOC00MjU5LWJkMjUtNzNkOGRmNWViMjg4
LzEvQ3dKaTY1dERlQnIwZV8yRFBYc3FqdFc5YWNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyn5MA0G
CSqGSIb3DQEBCwUAA4IBAQAQSCeXwXiHjenbh+LwYxydPp28CbBJVSrNkFRO91Hg
2ZG1RhzdztPCTvQeezj+28MueKkIQF1+slyX2GhTxO0rIWeyctrlYbhzbX78UHnJ
c/gvlkHzsda8EVpgLwZfHP+uAtdzC7g7jmPD04vw7ooJW1XoAJHrIscNMQRBBIpy
74Cagxvn7eKJKQ/tOorSFuAzmzPFIKhEeG/22Q+59DNjIFeAXnLuBj9e4qKKfUvF
B7vxPsLCmjxkPnCBLTTAreDnB4ftoizs5WKEVwWoicqavjGVxkUtA+1mu2SMtnLo
jRc25jhkRCDUT3RSyBIgLOV8Pq9wqZBOPJA60CWJ0KZq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:20 2024 by rpki-client on console-fra.rpki-client.org