Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f890ca-6309-410d-9525-b43891b28edc/1/SQ6t3XMpPnEC5NDHMQACEmZKF-E.roa
File: SQ6t3XMpPnEC5NDHMQACEmZKF-E.roa (raw, json)
Hash identifier: oIZJPvCZ3mBm640bPszi8gG32oVfQyL7iLGcOcoxw9k=
Subject key identifier: 49:0E:AD:DD:73:29:3E:71:02:E4:D0:C7:31:00:02:12:66:4A:17:E1
Certificate issuer: /CN=af651eb6a9e64793d3605f42983c43a52af89175
Certificate serial: 01894B67F578C0C1CFFE234F300719F2A2C2
Authority key identifier: AF:65:1E:B6:A9:E6:47:93:D3:60:5F:42:98:3C:43:A5:2A:F8:91:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2UetqnmR5PTYF9CmDxDpSr4kXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f890ca-6309-410d-9525-b43891b28edc/1/SQ6t3XMpPnEC5NDHMQACEmZKF-E.roa
Signing time: Wed 12 Jul 2023 18:40:51 +0000
ROA not before: Wed 12 Jul 2023 18:40:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147049
IP address blocks: 31.222.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4b:67:f5:78:c0:c1:cf:fe:23:4f:30:07:19:f2:a2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af651eb6a9e64793d3605f42983c43a52af89175
Validity
Not Before: Jul 12 18:40:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=490eaddd73293e7102e4d0c731000212664a17e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:89:fd:18:01:ed:22:53:7e:cf:b5:4a:00:47:
7c:bc:31:72:43:3e:9e:5b:21:ef:fd:3a:86:a5:a9:
26:e8:8b:bd:df:29:3d:c1:d0:d2:f8:12:c0:3f:59:
67:99:f0:d7:d4:81:a6:b8:db:88:28:65:15:75:9b:
ba:3e:fa:00:f4:4b:8d:57:ea:4b:59:74:31:55:e1:
a7:e8:21:b1:3c:92:b6:14:51:7e:37:45:9d:b4:70:
26:49:bf:4d:89:64:e2:76:8c:a7:ec:58:d1:f6:55:
b6:bf:63:72:d4:d5:60:2a:0a:e3:27:67:70:e1:7f:
20:2d:d8:a4:fd:82:8f:17:62:e2:68:3f:d5:85:e8:
68:5f:e0:92:9c:4a:0b:fd:2d:d4:73:d1:22:96:1c:
57:55:02:de:39:56:19:2f:be:e3:6a:a0:07:bd:fb:
0e:de:09:e2:c8:94:8c:d7:89:17:3b:f6:d6:86:d3:
63:e0:86:da:c7:26:91:d4:77:ae:ff:13:04:61:7f:
cf:bf:72:87:d1:04:b3:58:e2:18:e5:d1:a4:73:6a:
60:18:2e:3d:ed:8b:f2:e6:6d:91:c5:8d:c0:59:65:
a9:69:2a:5c:5f:19:33:be:5c:59:f9:36:a4:6e:51:
fd:b7:cc:24:35:9f:5e:84:ca:20:80:87:e3:46:3c:
f8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0E:AD:DD:73:29:3E:71:02:E4:D0:C7:31:00:02:12:66:4A:17:E1
X509v3 Authority Key Identifier:
keyid:AF:65:1E:B6:A9:E6:47:93:D3:60:5F:42:98:3C:43:A5:2A:F8:91:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2UetqnmR5PTYF9CmDxDpSr4kXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f890ca-6309-410d-9525-b43891b28edc/1/SQ6t3XMpPnEC5NDHMQACEmZKF-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f890ca-6309-410d-9525-b43891b28edc/1/r2UetqnmR5PTYF9CmDxDpSr4kXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.254.0/24
Signature Algorithm: sha256WithRSAEncryption
21:d3:26:e0:32:cb:bf:ef:5c:57:ca:2d:1e:f3:ad:2b:d6:3e:
51:ad:14:33:3f:46:17:c1:86:2e:5b:f9:b2:a1:f7:01:47:c1:
f9:38:02:f4:2a:ec:a5:40:d4:44:37:e1:dc:c9:1c:dc:79:e9:
cb:94:1d:46:7e:fd:30:6c:07:45:47:0a:54:6d:e5:1a:ef:7d:
af:ec:be:69:d4:2d:f0:a2:2e:a8:ce:06:68:21:fd:d4:80:52:
aa:d9:e4:6f:42:6e:30:62:cb:59:3f:6d:9d:15:0c:e7:8f:f8:
85:85:ac:f2:f3:03:b0:b0:65:00:93:3f:34:8b:d7:8d:fa:0b:
64:bf:1c:df:eb:a6:ea:e6:4a:a6:bf:af:18:04:f2:8c:e6:e6:
6e:6b:72:cf:d6:70:2c:52:03:84:f4:48:07:30:a9:33:d0:85:
58:a7:43:28:e8:6b:8f:9d:55:f1:0a:1c:2f:cc:54:f3:f9:43:
b9:3b:0d:74:0d:bf:97:83:dc:7d:1e:a2:47:03:78:56:de:54:
88:b0:94:5b:64:90:06:cb:db:72:d7:61:07:62:f2:23:4c:f5:
ae:01:26:c7:58:8c:a2:b2:f6:b6:3a:d9:5b:11:58:99:a8:35:
46:1c:b6:52:15:46:0f:14:2c:cf:8b:04:0e:63:11:49:1a:83:
8a:0e:cc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:32 2024 by rpki-client on console-ams.rpki-client.org