Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/339f76-e2ac-45c4-b6b9-ae2a153d0b32/1/0fh6GuySnFlxlo3Z1jznFd2OLAI.roa
File: 0fh6GuySnFlxlo3Z1jznFd2OLAI.roa (raw, json)
Hash identifier: stqwbEPS7xtYBwlcxmkJF8KbK14A6urpavxoLtX8vfc=
Subject key identifier: D1:F8:7A:1A:EC:92:9C:59:71:96:8D:D9:D6:3C:E7:15:DD:8E:2C:02
Certificate issuer: /CN=3b9ef3b0042c63c1517830f865757eb706b82209
Certificate serial: 01713B6E
Authority key identifier: 3B:9E:F3:B0:04:2C:63:C1:51:78:30:F8:65:75:7E:B7:06:B8:22:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O57zsAQsY8FReDD4ZXV-twa4Igk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/339f76-e2ac-45c4-b6b9-ae2a153d0b32/1/0fh6GuySnFlxlo3Z1jznFd2OLAI.roa
Signing time: Sat 01 Jan 2022 12:02:58 +0000
ROA not before: Sat 01 Jan 2022 12:02:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 31.204.4.0/22 maxlen: 22
31.204.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24197998 (0x1713b6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9ef3b0042c63c1517830f865757eb706b82209
Validity
Not Before: Jan 1 12:02:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1f87a1aec929c5971968dd9d63ce715dd8e2c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:84:bf:f9:4e:4f:11:54:b0:4c:bd:02:c6:
a0:53:5a:c8:04:3c:e5:3d:8d:f8:93:24:d6:cd:6f:
11:f7:34:34:6a:e9:79:1c:db:fe:ac:a9:a7:09:a1:
3b:2d:90:65:44:d4:dd:8a:e5:8a:3c:cb:b4:9e:27:
1b:60:03:ea:79:48:38:4d:ac:33:01:68:c2:18:93:
08:be:08:16:bd:50:44:29:85:e1:b1:03:ff:f9:9e:
38:7d:7a:38:d4:79:98:df:dd:b4:da:0f:1b:ee:9d:
c4:75:b1:28:99:a6:b0:51:51:41:4a:9f:60:0e:32:
11:78:ea:56:90:dc:e6:65:94:26:a9:a5:74:7c:6d:
8d:b0:a1:ac:65:4f:a5:3e:8e:01:11:07:67:70:67:
a4:f0:48:93:d9:ac:b9:65:9a:57:99:a6:49:4e:0f:
3e:12:f1:d7:17:a2:fd:3a:68:dd:a6:8d:a6:6c:77:
25:84:fc:56:4e:eb:9d:65:f0:7b:2b:dd:60:38:28:
77:34:ea:ce:0a:65:91:23:fd:2e:30:b3:d7:3b:08:
8c:79:16:e6:3a:b6:4e:23:01:d0:81:b2:19:ae:8b:
f9:51:67:66:2d:17:cf:a3:fc:23:ac:f1:d6:57:af:
d6:28:19:c7:64:2c:6d:c5:17:c9:51:f2:02:ed:20:
f3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F8:7A:1A:EC:92:9C:59:71:96:8D:D9:D6:3C:E7:15:DD:8E:2C:02
X509v3 Authority Key Identifier:
keyid:3B:9E:F3:B0:04:2C:63:C1:51:78:30:F8:65:75:7E:B7:06:B8:22:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O57zsAQsY8FReDD4ZXV-twa4Igk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/339f76-e2ac-45c4-b6b9-ae2a153d0b32/1/0fh6GuySnFlxlo3Z1jznFd2OLAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/339f76-e2ac-45c4-b6b9-ae2a153d0b32/1/O57zsAQsY8FReDD4ZXV-twa4Igk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.204.4.0-31.204.15.255
Signature Algorithm: sha256WithRSAEncryption
9c:fb:44:d0:c0:0d:47:f5:c1:c1:c0:1c:75:ee:fe:9f:6b:6b:
c7:95:9e:51:c7:8a:9d:06:ed:68:a6:e3:d3:9b:80:dc:c4:87:
ad:7c:c4:fc:a2:03:61:46:67:35:24:77:49:5f:c2:75:98:e6:
32:b3:8f:7c:40:5c:65:cf:64:ca:96:db:cf:c8:54:07:19:1d:
6c:fb:83:97:70:7c:88:63:32:0b:8f:d0:7b:d3:3d:01:ae:74:
f8:43:a3:b3:ea:e0:91:59:19:ed:4e:d9:5b:3c:fc:a1:49:b0:
68:a4:2c:87:bb:7c:d6:79:48:1e:80:ff:64:a8:e5:29:78:e9:
c0:c6:56:b6:14:b1:1d:e5:58:30:1c:23:28:39:1e:98:c8:48:
51:95:1c:b6:62:4e:69:8e:cb:03:5b:ff:ae:1e:0b:c4:34:b0:
ec:45:e6:7a:ef:51:98:5f:3c:25:65:8c:96:37:1a:c6:2d:72:
02:04:f3:a0:52:d6:ab:58:b8:01:05:d1:ad:29:ec:16:bf:1f:
a7:c5:6b:7d:76:c3:57:13:ac:5b:df:63:54:a7:80:a2:09:71:
9f:d6:a6:dd:a2:1d:7b:5d:1e:13:f5:6b:30:c4:fa:f9:f5:10:
89:a1:ea:df:b1:e4:7e:81:a4:29:67:8b:1d:af:9c:0e:93:79:
16:c3:1d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:12 2024 by rpki-client on console-fra.rpki-client.org