Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/894362-5296-4402-a7b7-929341f9a1b3/1/xgH07lwihnJCJ6MMu-EwYrSPwgE.roa
File: xgH07lwihnJCJ6MMu-EwYrSPwgE.roa (raw, json)
Hash identifier: I6K4y14husco1QbRrdXFjtgrZx0zS5J0UCTm5i7RZWE=
Subject key identifier: C6:01:F4:EE:5C:22:86:72:42:27:A3:0C:BB:E1:30:62:B4:8F:C2:01
Certificate issuer: /CN=07777ab40290b256edf25ed24809289e3fa9f83f
Certificate serial: 01824B9E03F4D1E9D2F614D6D4386103E54B
Authority key identifier: 07:77:7A:B4:02:90:B2:56:ED:F2:5E:D2:48:09:28:9E:3F:A9:F8:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3d6tAKQslbt8l7SSAkonj-p-D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/894362-5296-4402-a7b7-929341f9a1b3/1/xgH07lwihnJCJ6MMu-EwYrSPwgE.roa
Signing time: Fri 29 Jul 2022 20:20:23 +0000
ROA not before: Fri 29 Jul 2022 20:20:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 31.40.204.0/23 maxlen: 23
31.40.206.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4b:9e:03:f4:d1:e9:d2:f6:14:d6:d4:38:61:03:e5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07777ab40290b256edf25ed24809289e3fa9f83f
Validity
Not Before: Jul 29 20:20:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c601f4ee5c2286724227a30cbbe13062b48fc201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c9:7c:c0:d9:88:06:c2:c5:23:5a:f1:00:52:
e0:88:2a:8e:ec:20:25:f4:f7:ca:a7:c4:c2:a4:d3:
e3:1d:52:f1:14:ff:75:fe:94:ca:26:ad:82:c7:95:
e1:03:0d:ef:28:55:2f:c3:fb:be:0b:08:4d:c0:2b:
10:8b:14:50:e9:c5:1f:7b:76:4c:0b:89:4b:7b:d6:
17:ea:2f:cf:1c:21:1e:e4:00:8a:fa:e9:c0:34:87:
c2:28:cd:36:6a:28:87:5e:d1:c3:70:86:7b:58:3c:
b7:0d:92:3e:73:4e:a6:06:f9:27:b6:76:33:49:08:
19:ce:b2:aa:0d:d1:0d:42:c0:59:88:7b:8d:76:05:
52:79:09:2d:28:0b:22:e6:49:8a:dd:a4:3f:90:77:
92:8c:f4:be:32:f7:d9:fd:07:7a:d9:a3:4f:49:7e:
a2:c1:40:fc:9b:86:77:88:dc:d6:62:88:37:97:31:
d5:f1:e7:63:7d:f7:55:b9:32:f4:59:fa:40:a9:3d:
64:c3:26:1c:05:13:68:a7:1c:47:8d:ec:a9:64:8f:
d9:c8:fa:15:08:d2:b7:a0:ed:f0:f4:f6:23:9e:1d:
64:2e:c7:30:a9:1f:c1:18:ae:9b:18:59:ca:50:cb:
05:47:d2:30:ea:6d:89:11:f0:3c:ba:74:07:8c:b6:
89:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:01:F4:EE:5C:22:86:72:42:27:A3:0C:BB:E1:30:62:B4:8F:C2:01
X509v3 Authority Key Identifier:
keyid:07:77:7A:B4:02:90:B2:56:ED:F2:5E:D2:48:09:28:9E:3F:A9:F8:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3d6tAKQslbt8l7SSAkonj-p-D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/894362-5296-4402-a7b7-929341f9a1b3/1/xgH07lwihnJCJ6MMu-EwYrSPwgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/894362-5296-4402-a7b7-929341f9a1b3/1/B3d6tAKQslbt8l7SSAkonj-p-D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.204.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:76:59:26:e4:c8:44:11:dd:66:9e:53:e4:03:bd:b1:f6:61:
4a:ac:db:87:9d:5d:4e:5e:46:a8:31:e4:92:f4:e6:fb:45:3c:
ac:ed:79:86:f0:04:4c:d6:fa:24:54:ca:fc:c6:a9:1f:15:04:
91:ad:90:61:6a:be:d1:01:34:d3:36:25:dd:2d:3a:eb:e6:f0:
59:75:b8:15:82:9e:3a:85:6c:9b:2b:91:52:6c:0b:e8:80:e9:
b0:93:9b:dc:0b:b0:b3:f8:88:49:c1:44:d1:73:b1:85:ed:56:
15:3f:15:70:95:0b:e6:97:f9:16:54:5a:42:73:f8:0f:96:b5:
3d:6b:b2:72:37:d6:86:41:e3:34:e3:b0:cd:c9:81:cf:0e:de:
50:8e:70:0b:a9:f9:c7:34:80:44:fc:81:05:b2:e5:e4:c5:19:
41:3a:43:5b:4d:41:91:e6:2c:5f:c7:9d:e3:2d:ba:83:cc:71:
39:26:fc:55:ea:2b:b8:dd:92:df:a6:d7:e5:45:12:a9:56:85:
fe:ad:00:db:99:ea:09:b6:0f:2c:b0:ba:c7:30:8d:10:9d:3d:
34:30:be:f4:fb:98:ac:29:60:00:93:5e:fb:bf:ac:ec:4e:95:
96:00:14:87:f9:08:bc:4f:4d:9e:c0:58:bf:2f:79:67:14:c2:
6d:97:a1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:26 2023 by rpki-client on console-fra.rpki-client.org