Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/gjXmvffFX1LjzeAP2NtVw2FnKtc.roa
File: gjXmvffFX1LjzeAP2NtVw2FnKtc.roa (raw, json)
Hash identifier: uEf6q8/oacI5f6+kghXBJTAjNjdJWYgimNgrMyMEd1w=
Subject key identifier: 82:35:E6:BD:F7:C5:5F:52:E3:CD:E0:0F:D8:DB:55:C3:61:67:2A:D7
Certificate issuer: /CN=d41bca39861f9c30c757614801f86d17e5ea1e4b
Certificate serial: 0181F795ABB51D971CA85AE02FD7890602D4
Authority key identifier: D4:1B:CA:39:86:1F:9C:30:C7:57:61:48:01:F8:6D:17:E5:EA:1E:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BvKOYYfnDDHV2FIAfhtF-XqHks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/gjXmvffFX1LjzeAP2NtVw2FnKtc.roa
Signing time: Wed 13 Jul 2022 12:43:09 +0000
ROA not before: Wed 13 Jul 2022 12:43:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39521
IP address blocks: 194.31.222.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:95:ab:b5:1d:97:1c:a8:5a:e0:2f:d7:89:06:02:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41bca39861f9c30c757614801f86d17e5ea1e4b
Validity
Not Before: Jul 13 12:43:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8235e6bdf7c55f52e3cde00fd8db55c361672ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:13:31:3d:86:0c:80:f6:36:12:d4:cd:44:
43:76:05:ec:26:fd:16:5d:1c:96:c6:6a:2f:09:12:
16:db:26:3b:76:a4:6e:52:82:87:dc:e3:92:8f:cd:
51:8a:ec:1e:9b:c7:71:00:e8:e7:26:3e:1f:91:da:
62:ab:8c:95:ed:30:a9:07:e1:39:47:f7:62:34:e8:
a9:a5:46:a0:60:94:52:c1:dd:fb:b2:13:1a:ca:1d:
fd:20:3c:92:12:14:5c:04:20:94:cc:15:d1:31:f9:
aa:4a:00:98:cf:61:57:a1:b8:89:c6:11:16:2b:b6:
95:56:f2:82:6b:97:96:cc:fa:8a:6b:c9:90:28:ae:
2b:cd:1a:05:7b:c7:f3:f4:8e:b4:c8:01:60:a1:df:
94:21:33:33:06:af:2b:93:1d:a6:d2:c7:60:2d:57:
ba:ea:78:ca:90:e8:ff:4d:4f:7e:9d:fb:3d:de:18:
14:3b:2f:ee:24:28:5e:ba:b3:2f:57:a8:91:3a:f9:
31:d7:9b:35:24:f2:5a:63:79:ad:f4:31:37:96:9a:
bb:96:a3:51:c5:91:c9:64:fe:78:65:b5:22:0a:db:
4d:4f:65:8d:cb:a4:58:fa:e9:59:09:9a:d4:cd:3d:
c7:9d:89:a5:c4:bb:1f:16:3e:b5:5c:0b:1d:5b:54:
b4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:35:E6:BD:F7:C5:5F:52:E3:CD:E0:0F:D8:DB:55:C3:61:67:2A:D7
X509v3 Authority Key Identifier:
keyid:D4:1B:CA:39:86:1F:9C:30:C7:57:61:48:01:F8:6D:17:E5:EA:1E:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BvKOYYfnDDHV2FIAfhtF-XqHks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/gjXmvffFX1LjzeAP2NtVw2FnKtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/1BvKOYYfnDDHV2FIAfhtF-XqHks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.222.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:b4:94:f4:c0:72:51:c4:d0:98:9d:6b:d1:e1:47:0e:65:c0:
2f:85:dc:fb:53:d5:84:15:e4:b5:ba:b3:3b:77:d6:cb:71:ab:
69:3b:dc:ea:81:54:b1:77:b8:10:12:ce:cb:90:89:98:51:97:
60:37:51:b3:17:2e:69:0a:3e:40:47:6e:1d:6a:a1:f6:b7:8c:
52:ee:b6:48:88:49:50:92:6d:38:77:9c:70:c8:36:03:f1:ec:
c7:99:3b:05:da:19:53:12:d6:91:0d:94:6b:6e:ac:ea:30:69:
d8:3e:f8:ee:a5:05:e5:41:95:3a:29:0d:83:09:59:b0:f1:06:
d9:2c:28:05:ac:29:a2:d5:cb:e9:45:15:44:b7:dd:c6:f4:27:
55:ef:d4:9e:6f:ff:04:a7:7c:68:9d:2a:bc:77:18:d2:b4:16:
a6:80:14:62:7f:db:d8:a5:80:f3:23:84:34:61:5c:8a:5d:39:
9c:cd:4a:63:99:b5:c2:72:28:e5:7d:cb:92:a9:51:b5:df:73:
16:1c:21:0c:83:e4:3d:3b:fd:2b:41:99:0b:0b:ba:73:8b:78:
f7:d1:af:fe:e0:76:4a:9d:30:d6:d6:8d:ee:44:ad:6e:e0:f0:
af:7a:c0:2e:81:30:67:99:23:9f:27:76:f8:01:d9:d0:45:b6:
d8:1b:c8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:39 2023 by rpki-client on console-ams.rpki-client.org