Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/339f76-e2ac-45c4-b6b9-ae2a153d0b32/1/a_6z6fHzDUTA8S2PrGSHHuPN2iE.roa
File: a_6z6fHzDUTA8S2PrGSHHuPN2iE.roa (raw, json)
Hash identifier: RW0d9/c9aC2qSrYm+EmEhynSSS4HPlGsIyqEdJCdFJc=
Subject key identifier: 6B:FE:B3:E9:F1:F3:0D:44:C0:F1:2D:8F:AC:64:87:1E:E3:CD:DA:21
Certificate issuer: /CN=3b9ef3b0042c63c1517830f865757eb706b82209
Certificate serial: 0288C6EA
Authority key identifier: 3B:9E:F3:B0:04:2C:63:C1:51:78:30:F8:65:75:7E:B7:06:B8:22:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O57zsAQsY8FReDD4ZXV-twa4Igk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/339f76-e2ac-45c4-b6b9-ae2a153d0b32/1/a_6z6fHzDUTA8S2PrGSHHuPN2iE.roa
Signing time: Thu 05 May 2022 13:07:40 +0000
ROA not before: Thu 05 May 2022 13:07:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207710
IP address blocks: 31.204.4.0/22 maxlen: 22
31.204.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42518250 (0x288c6ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9ef3b0042c63c1517830f865757eb706b82209
Validity
Not Before: May 5 13:07:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bfeb3e9f1f30d44c0f12d8fac64871ee3cdda21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:23:0d:e8:48:cf:24:33:0d:e3:0d:7f:af:35:
02:6f:99:37:b4:a5:d6:5e:1a:9f:b7:d4:7a:69:87:
2f:20:9b:9b:be:00:9f:68:78:e3:3b:eb:4f:c1:33:
ae:9f:af:1f:f5:10:43:0d:af:ac:60:ad:22:a2:93:
a3:23:cb:ca:da:c9:a1:11:f3:7c:4f:8f:e7:31:2c:
a2:9a:e2:81:84:a2:7a:ee:77:2c:8b:56:65:32:bc:
c8:09:72:52:ff:0a:65:89:45:d7:f6:aa:65:6a:cb:
a1:ba:04:df:62:98:78:74:41:5f:81:2c:3a:e7:97:
43:cf:8d:da:7c:1e:b2:cf:99:e0:b3:b9:f1:a9:a1:
ff:6a:c8:27:a6:ce:1c:52:bd:ae:9e:9d:c6:2c:e5:
da:3a:a3:cb:01:0c:83:93:96:c6:22:98:3f:e0:22:
7f:6e:67:f0:c0:fc:24:b8:4b:12:58:cf:34:a7:c9:
ad:95:58:fd:c1:00:0e:4e:ef:6c:a8:90:c9:48:ce:
c5:2f:05:b7:84:98:93:80:e4:ca:74:97:47:34:1f:
06:7f:24:9b:f9:c9:f7:58:b6:1b:12:52:3d:cc:f2:
69:27:8c:8b:01:6c:83:dd:c2:86:86:21:24:3f:7d:
63:61:d0:41:e5:17:b5:59:41:39:4e:24:02:a9:5b:
1f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FE:B3:E9:F1:F3:0D:44:C0:F1:2D:8F:AC:64:87:1E:E3:CD:DA:21
X509v3 Authority Key Identifier:
keyid:3B:9E:F3:B0:04:2C:63:C1:51:78:30:F8:65:75:7E:B7:06:B8:22:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O57zsAQsY8FReDD4ZXV-twa4Igk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/339f76-e2ac-45c4-b6b9-ae2a153d0b32/1/a_6z6fHzDUTA8S2PrGSHHuPN2iE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/339f76-e2ac-45c4-b6b9-ae2a153d0b32/1/O57zsAQsY8FReDD4ZXV-twa4Igk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.204.4.0-31.204.15.255
Signature Algorithm: sha256WithRSAEncryption
36:7a:21:d9:7b:4b:5b:92:c8:2d:17:0c:6a:ad:6c:dc:cf:70:
35:c9:b8:42:76:52:a2:ac:06:15:95:fa:df:43:08:3d:24:95:
81:6f:35:b1:12:12:9c:e6:69:9a:49:d3:11:ea:7a:cc:22:66:
cd:00:cd:56:74:72:d6:38:f2:f5:47:a1:6f:9c:3f:16:e8:84:
12:f9:07:1a:c1:d0:cb:b0:6d:3f:c6:75:68:19:41:dd:b8:8c:
da:9c:72:41:cc:fd:3f:6c:73:36:f7:f4:35:ee:a0:4b:c7:0d:
81:0b:5c:c9:39:32:c5:17:08:71:73:cf:ab:52:9e:bf:30:bb:
e4:ac:f9:ef:43:2c:4e:9b:1a:1f:d3:3f:ed:d6:90:99:51:73:
bf:9f:31:86:bf:3e:a3:58:c3:8d:c9:87:bc:0a:2b:51:4f:59:
51:2d:fd:07:69:5b:a4:44:1b:48:5e:13:4e:19:55:30:4d:7d:
a4:b9:1f:0d:c6:03:a2:1c:a2:d4:46:3b:d5:1c:8a:5c:cf:de:
23:16:c4:a2:a4:fb:25:cf:ea:86:94:b2:73:be:31:f8:ff:29:
2b:94:74:c4:5d:34:bc:fa:19:43:61:b1:5c:a3:df:1a:c3:95:
ca:4c:7e:ca:89:c1:3e:b0:cb:ce:e5:22:9a:b4:5c:29:a4:8f:
a4:7f:ad:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:17 2024 by rpki-client on console-ams.rpki-client.org