Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/185e80-7339-4cc0-8b7c-4edf4244a9f9/1/77oSC6tu9PQoLN59Uwcm5WJ-Wcw.roa
File: 77oSC6tu9PQoLN59Uwcm5WJ-Wcw.roa (raw, json)
Hash identifier: okPaXQrhLsCCXd0gwvGyvuYQQKQ78UTVSvQYgqeehxg=
Subject key identifier: EF:BA:12:0B:AB:6E:F4:F4:28:2C:DE:7D:53:07:26:E5:62:7E:59:CC
Certificate issuer: /CN=baa63d3ba6dae4a4493bc14a675b94ad2aa45b69
Certificate serial: 0188D282C034DD65DC6F659A7455B0DD8022
Authority key identifier: BA:A6:3D:3B:A6:DA:E4:A4:49:3B:C1:4A:67:5B:94:AD:2A:A4:5B:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqY9O6ba5KRJO8FKZ1uUrSqkW2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/185e80-7339-4cc0-8b7c-4edf4244a9f9/1/77oSC6tu9PQoLN59Uwcm5WJ-Wcw.roa
Signing time: Mon 19 Jun 2023 07:16:04 +0000
ROA not before: Mon 19 Jun 2023 07:16:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 31.217.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d2:82:c0:34:dd:65:dc:6f:65:9a:74:55:b0:dd:80:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa63d3ba6dae4a4493bc14a675b94ad2aa45b69
Validity
Not Before: Jun 19 07:16:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efba120bab6ef4f4282cde7d530726e5627e59cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ae:90:07:67:95:5c:20:2d:bb:8a:35:9c:1f:
66:cd:7b:10:33:09:00:e6:88:6a:92:f4:0c:46:5c:
26:af:4a:24:8b:56:20:ab:78:af:5d:d4:2c:7f:fc:
71:ec:41:ef:6f:69:bf:49:fd:57:3d:cc:f5:0a:a7:
42:52:6c:87:8e:a0:8a:49:76:dc:5b:7f:4b:54:2f:
e3:19:f1:69:16:51:b8:c5:af:50:5a:78:99:65:1d:
6d:26:8c:6b:16:02:6d:96:72:4b:cc:a5:70:18:3c:
ec:1e:64:4c:e6:52:20:1e:a8:5a:37:88:db:3a:55:
eb:5f:44:b1:0d:5d:09:a2:c7:50:97:d3:5d:d6:d3:
2e:33:13:ab:0d:b0:7d:d0:74:db:09:72:2f:10:f3:
d1:31:8e:f7:8a:de:74:62:20:03:60:57:cb:86:3c:
6f:d2:71:48:34:98:a0:d1:5e:43:34:02:85:1d:a0:
b2:94:a1:76:07:9f:d6:1b:c1:f0:60:54:ee:b2:59:
51:99:b0:c2:20:6c:1b:16:fe:f4:00:b0:3d:b7:8a:
09:34:34:13:cf:6b:67:7c:7a:e8:a6:83:a9:dd:94:
4c:42:4f:4e:b1:cb:28:15:ab:dc:56:51:dc:db:88:
d8:5c:7b:2a:97:e3:98:a0:77:93:42:b6:9f:76:32:
0b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BA:12:0B:AB:6E:F4:F4:28:2C:DE:7D:53:07:26:E5:62:7E:59:CC
X509v3 Authority Key Identifier:
keyid:BA:A6:3D:3B:A6:DA:E4:A4:49:3B:C1:4A:67:5B:94:AD:2A:A4:5B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqY9O6ba5KRJO8FKZ1uUrSqkW2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/185e80-7339-4cc0-8b7c-4edf4244a9f9/1/77oSC6tu9PQoLN59Uwcm5WJ-Wcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/185e80-7339-4cc0-8b7c-4edf4244a9f9/1/uqY9O6ba5KRJO8FKZ1uUrSqkW2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.248.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:fd:aa:07:5f:11:02:93:38:5d:1a:d0:51:7f:79:7c:d4:25:
08:22:f2:7d:d7:f2:6d:72:e6:2a:e6:89:fc:ec:01:af:f6:70:
34:db:bb:9f:b5:1b:17:91:17:68:e8:d1:7a:11:e3:7f:a9:69:
6f:35:e5:1f:83:d3:f6:43:a4:01:bc:58:f9:cf:3f:cf:b8:1c:
20:2e:db:60:b8:ea:22:80:f9:5e:25:5d:61:d4:13:71:a3:0b:
02:31:a0:93:a7:d0:9d:1c:c7:c4:0b:2b:fb:c3:af:01:82:43:
9d:a7:b6:e5:c7:b0:b8:2e:2a:dc:c6:83:7a:3a:b2:f6:f2:a3:
18:59:06:cf:7f:16:0a:2f:6a:3a:6e:6b:44:84:45:12:ba:74:
ce:1e:27:1d:b8:4c:a2:a3:ae:a8:59:43:7a:2e:fd:7a:06:bd:
7f:b6:d5:88:88:9b:0f:e2:cf:d5:36:68:a0:61:b6:14:c3:a8:
b6:1c:b5:e1:63:bb:7e:4e:2a:a8:54:f6:5b:85:3e:50:ca:83:
b8:ef:5b:2c:0a:e6:e4:5e:a4:ca:4b:4c:ed:ac:19:e6:88:0b:
ab:a8:e6:5e:dc:27:e7:38:76:8d:0a:77:c1:e4:f4:80:af:66:
fa:3d:50:d7:c4:a7:59:63:3d:fd:42:98:3b:04:31:2e:0b:10:
e4:b2:23:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 10:20:17 2023 by rpki-client on console-ams.rpki-client.org