Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/339f76-e2ac-45c4-b6b9-ae2a153d0b32/1/wGcApTDePaAGXAVllALvxi3hM8E.roa
File: wGcApTDePaAGXAVllALvxi3hM8E.roa (raw, json)
Hash identifier: BvzgxgpAWfejHKgG0VfTSK/6ZYAfA9XZaLXV4WEc4OQ=
Subject key identifier: C0:67:00:A5:30:DE:3D:A0:06:5C:05:65:94:02:EF:C6:2D:E1:33:C1
Certificate issuer: /CN=3b9ef3b0042c63c1517830f865757eb706b82209
Certificate serial: 028ABF1E
Authority key identifier: 3B:9E:F3:B0:04:2C:63:C1:51:78:30:F8:65:75:7E:B7:06:B8:22:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O57zsAQsY8FReDD4ZXV-twa4Igk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/339f76-e2ac-45c4-b6b9-ae2a153d0b32/1/wGcApTDePaAGXAVllALvxi3hM8E.roa
Signing time: Thu 05 May 2022 13:10:37 +0000
ROA not before: Thu 05 May 2022 13:10:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 31.204.4.0/22 maxlen: 22
31.204.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42647326 (0x28abf1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9ef3b0042c63c1517830f865757eb706b82209
Validity
Not Before: May 5 13:10:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c06700a530de3da0065c05659402efc62de133c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:7f:4b:59:f3:33:14:b8:b4:c9:3a:59:9b:40:
1a:86:2e:03:bd:9f:29:b2:1d:c3:1e:93:b1:cb:93:
43:07:52:55:2e:bb:c2:60:6a:4a:dd:4f:86:76:8c:
94:af:4a:c7:05:d8:93:be:ec:40:ad:7c:26:88:ba:
34:9f:c9:dc:f0:d4:a6:31:9f:55:59:7b:75:c8:6e:
a7:d4:82:81:2d:f0:37:bc:de:90:25:7c:8c:d2:b2:
19:ed:27:f6:e1:a6:8e:06:68:44:68:7c:76:8c:84:
ac:aa:1f:ae:cd:47:64:8e:4d:cd:e7:5c:7c:fb:63:
ed:b1:68:27:5b:ef:22:a4:7a:76:81:4c:e2:b6:69:
fc:08:be:42:bf:4b:49:ca:36:de:91:3f:0d:42:13:
5d:d4:08:72:60:7d:c1:81:9b:1e:b2:13:f4:5f:0e:
5a:03:0f:07:80:a5:fd:e0:ce:f0:e7:fb:7d:16:d8:
7d:1e:d1:87:c6:de:b0:12:70:01:5b:91:ff:e0:7a:
e4:d7:ae:5f:98:3b:47:67:b2:2f:48:76:57:b0:b6:
ec:00:d3:bb:11:34:b2:75:ac:82:ad:22:87:c5:93:
dc:a1:8e:ea:e6:11:2d:6b:7f:42:fd:cf:03:d0:cd:
3a:a0:cc:68:2b:0a:f5:c0:b9:6f:90:7f:ed:e4:e0:
a2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:67:00:A5:30:DE:3D:A0:06:5C:05:65:94:02:EF:C6:2D:E1:33:C1
X509v3 Authority Key Identifier:
keyid:3B:9E:F3:B0:04:2C:63:C1:51:78:30:F8:65:75:7E:B7:06:B8:22:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O57zsAQsY8FReDD4ZXV-twa4Igk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/339f76-e2ac-45c4-b6b9-ae2a153d0b32/1/wGcApTDePaAGXAVllALvxi3hM8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/339f76-e2ac-45c4-b6b9-ae2a153d0b32/1/O57zsAQsY8FReDD4ZXV-twa4Igk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.204.4.0-31.204.15.255
Signature Algorithm: sha256WithRSAEncryption
0e:e6:8f:ae:21:ba:8d:c7:ed:4e:b7:bb:c5:85:87:6d:0c:02:
db:7f:b5:ed:05:bb:87:b7:bf:3f:a4:d5:d4:f3:2b:94:64:20:
a6:41:f9:80:b0:c7:89:70:02:44:ee:83:a3:60:06:9d:85:8f:
80:e4:17:9f:28:c6:15:e0:31:aa:6a:d2:82:67:25:ac:5f:26:
87:3d:93:ee:9a:30:5c:d4:24:b5:dc:5e:b3:70:2b:ad:88:96:
da:a7:ca:52:a6:a7:1c:07:10:8c:1d:ae:c1:77:af:89:29:fa:
cb:ff:ed:10:4b:b8:46:45:bf:4b:d9:d7:64:d3:bc:49:30:aa:
f8:bc:4b:dc:cd:53:33:5e:15:da:65:2e:3a:d9:81:53:5b:65:
12:d0:95:80:79:fc:6d:20:0b:f0:1a:24:e7:4b:57:e7:53:db:
bd:e7:7b:fa:43:8c:56:52:95:14:04:b5:af:b0:ef:e5:59:17:
03:69:55:4c:b1:b8:4c:75:95:23:77:00:4f:46:bf:fa:13:ab:
cc:c4:91:21:e8:e1:b2:5d:f7:97:62:da:d2:06:53:6c:6c:95:
9a:4f:d6:75:bc:73:61:0f:22:49:5c:8d:3f:c9:59:6c:d7:60:
56:e2:3b:d4:ca:40:a3:b4:9d:38:8a:af:2a:cc:05:9b:bb:e8:
72:3e:55:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:18 2024 by rpki-client on console-ams.rpki-client.org