Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/f6cb73-974f-4d11-baa7-52878eacdbf3/1/1-R_bIM7nFg13MvxkJgAXWAxuV4U.roa
File: 1-R_bIM7nFg13MvxkJgAXWAxuV4U.roa (raw, json)
Hash identifier: IcWffeLsVbVbvOFLGg9SX58LMk22zSEx0Digq9YAwiw=
Subject key identifier: F9:1F:DB:20:CE:E7:16:0D:77:32:FC:64:26:00:17:58:0C:6E:57:85
Certificate issuer: /CN=2770ca5cf0fcb3e1823d33d0cd9825aa1a98a107
Certificate serial: 018571A7B3C446C3071E4C742292E3315AFE
Authority key identifier: 27:70:CA:5C:F0:FC:B3:E1:82:3D:33:D0:CD:98:25:AA:1A:98:A1:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J3DKXPD8s-GCPTPQzZglqhqYoQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/f6cb73-974f-4d11-baa7-52878eacdbf3/1/1-R_bIM7nFg13MvxkJgAXWAxuV4U.roa
Signing time: Mon 02 Jan 2023 08:44:53 +0000
ROA not before: Mon 02 Jan 2023 08:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 394923
IP address blocks: 31.210.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:b3:c4:46:c3:07:1e:4c:74:22:92:e3:31:5a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2770ca5cf0fcb3e1823d33d0cd9825aa1a98a107
Validity
Not Before: Jan 2 08:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f91fdb20cee7160d7732fc64260017580c6e5785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:51:4f:cf:58:1a:af:8e:1b:2d:eb:30:84:f5:
82:4d:00:bf:86:bf:a9:1d:d1:92:b4:58:c4:09:6f:
28:b0:b4:c3:b5:d0:71:c5:b4:08:39:ee:d5:86:1e:
58:ef:be:a0:35:71:b6:0b:00:6a:ee:99:2e:7f:c0:
0d:5d:17:c7:5b:45:40:4a:49:f5:b8:7c:e8:e5:39:
a8:c2:90:14:ae:2e:aa:00:3b:a0:b9:0a:e6:a1:c0:
43:0a:6a:d5:6f:76:cc:ec:88:40:47:dc:fd:64:63:
86:72:ef:56:ae:18:23:d9:1d:5e:a5:f3:a5:1d:6c:
40:6c:ce:92:c8:e4:8d:5e:07:4a:ec:df:00:a6:e5:
72:4f:22:2c:72:2d:d7:2c:4a:22:8e:33:29:42:c2:
bb:35:74:0d:d3:d8:3c:92:09:b6:70:0b:22:44:1b:
1a:69:77:c0:e0:07:33:d4:5b:0d:7c:c6:46:d0:55:
ee:d9:d1:6b:39:f4:ce:1c:8f:5c:64:77:0d:5b:05:
d4:4d:3c:ba:f2:11:39:97:45:c0:93:07:48:88:2e:
45:a8:45:f5:a9:c0:ba:2f:9e:5f:67:e6:d1:ad:97:
24:78:74:75:07:bc:f3:1f:e6:f8:9c:31:f0:5d:1f:
60:9c:45:46:00:12:23:20:4a:40:61:b0:47:a5:4a:
67:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1F:DB:20:CE:E7:16:0D:77:32:FC:64:26:00:17:58:0C:6E:57:85
X509v3 Authority Key Identifier:
keyid:27:70:CA:5C:F0:FC:B3:E1:82:3D:33:D0:CD:98:25:AA:1A:98:A1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3DKXPD8s-GCPTPQzZglqhqYoQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f6cb73-974f-4d11-baa7-52878eacdbf3/1/1-R_bIM7nFg13MvxkJgAXWAxuV4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f6cb73-974f-4d11-baa7-52878eacdbf3/1/J3DKXPD8s-GCPTPQzZglqhqYoQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.148.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:ab:3f:28:12:36:b2:65:88:13:c6:f5:38:6a:7a:6d:b1:68:
06:f8:ac:15:d8:29:13:3d:33:f0:4d:0c:83:78:2b:fa:c6:b5:
0d:81:34:da:4c:92:d8:87:0b:b9:72:a5:e5:1d:1a:37:f2:c4:
0d:69:cd:19:46:f7:c2:24:ad:4a:e5:3a:7e:4f:f4:1d:6b:b6:
8a:00:3f:1b:07:be:81:02:e8:4c:b2:16:49:cf:96:3d:da:da:
26:69:b8:0d:e4:5a:3c:f9:6e:73:e0:9d:df:80:5a:e8:1a:7f:
86:63:56:e8:7e:fc:90:85:88:d5:aa:3b:29:5b:0e:c3:82:6f:
4a:d9:04:d3:0b:c7:0b:4a:75:b8:32:ec:d0:2d:87:26:2d:02:
5a:b3:31:f4:9f:3c:3f:c3:ca:fa:2e:66:f1:21:90:14:74:01:
b0:8f:33:38:eb:27:ec:7c:f8:53:33:30:5e:ef:b2:f1:e8:98:
c8:44:f8:5a:42:ee:25:36:ac:07:e6:15:54:3e:0a:df:23:ab:
84:8e:f6:22:f3:c1:d2:23:b2:1e:26:71:97:b4:2e:92:4b:40:
48:5b:6b:2b:12:8d:a2:05:18:71:be:ba:ad:92:0b:17:59:c1:
84:54:ed:6e:05:47:34:ac:52:6e:ac:80:f4:e5:1a:d9:49:08:
47:5a:c9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:55 2024 by rpki-client on console-fra.rpki-client.org