Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f890ca-6309-410d-9525-b43891b28edc/1/_UNNAQnP35ykWL-y49hZWoDd99o.roa
File: _UNNAQnP35ykWL-y49hZWoDd99o.roa (raw, json)
Hash identifier: jwH4bEUrImWL2bpEepQSBK/apHcJRe2SMq4TgRmlb5k=
Subject key identifier: FD:43:4D:01:09:CF:DF:9C:A4:58:BF:B2:E3:D8:59:5A:80:DD:F7:DA
Certificate issuer: /CN=af651eb6a9e64793d3605f42983c43a52af89175
Certificate serial: 01856E1416A1F0463E92E3281955582A0CFC
Authority key identifier: AF:65:1E:B6:A9:E6:47:93:D3:60:5F:42:98:3C:43:A5:2A:F8:91:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2UetqnmR5PTYF9CmDxDpSr4kXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f890ca-6309-410d-9525-b43891b28edc/1/_UNNAQnP35ykWL-y49hZWoDd99o.roa
Signing time: Sun 01 Jan 2023 16:04:48 +0000
ROA not before: Sun 01 Jan 2023 16:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136787
IP address blocks: 31.222.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:16:a1:f0:46:3e:92:e3:28:19:55:58:2a:0c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af651eb6a9e64793d3605f42983c43a52af89175
Validity
Not Before: Jan 1 16:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd434d0109cfdf9ca458bfb2e3d8595a80ddf7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5d:22:5e:76:53:0a:6e:78:db:35:83:f0:51:
5a:18:69:82:3a:31:6e:11:90:67:20:59:98:3c:41:
19:d3:4e:c5:9b:df:ab:91:e1:d0:56:28:ee:df:de:
97:06:57:9d:a5:b5:0b:4b:ff:a8:42:95:e5:0d:96:
08:7d:a1:11:3e:ac:ca:8c:4c:6f:c1:46:be:b5:fd:
67:57:96:2c:77:a9:2f:ba:18:1f:fb:4c:3c:c2:fb:
f9:19:33:35:47:70:67:50:6a:ad:4b:04:34:cd:ca:
39:6b:70:11:e7:00:24:eb:c6:c4:21:f8:b6:f7:1a:
f4:30:6b:17:2f:97:ad:c1:1a:e4:56:7e:1d:81:a0:
1e:f5:96:e2:89:a0:00:05:95:c0:6e:63:29:95:9c:
65:93:97:81:e3:67:52:13:c0:9d:04:9b:a9:13:72:
f7:06:ab:b4:04:16:f1:ff:f1:43:e7:4c:c6:de:d5:
94:bc:0d:e8:08:64:f0:83:f8:9f:16:88:98:5a:a9:
76:e0:32:83:4f:3c:50:12:29:25:63:17:7f:76:72:
43:a6:90:2b:bb:33:21:7d:74:bb:b8:ba:2e:0c:4f:
05:e1:74:22:12:42:19:f9:45:67:e0:3a:b1:82:c2:
5e:2d:ac:b3:5c:4e:30:33:30:8f:1d:78:81:20:7c:
cc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:43:4D:01:09:CF:DF:9C:A4:58:BF:B2:E3:D8:59:5A:80:DD:F7:DA
X509v3 Authority Key Identifier:
keyid:AF:65:1E:B6:A9:E6:47:93:D3:60:5F:42:98:3C:43:A5:2A:F8:91:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2UetqnmR5PTYF9CmDxDpSr4kXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f890ca-6309-410d-9525-b43891b28edc/1/_UNNAQnP35ykWL-y49hZWoDd99o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f890ca-6309-410d-9525-b43891b28edc/1/r2UetqnmR5PTYF9CmDxDpSr4kXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.254.0/24
Signature Algorithm: sha256WithRSAEncryption
99:f3:7b:a4:1b:81:6a:ba:69:26:82:7b:44:ba:15:2c:27:d2:
b5:82:1a:e8:89:1e:11:ab:bd:39:4f:59:4a:f2:23:67:4f:fb:
03:f1:17:c5:59:de:c7:72:ba:5e:46:cd:c2:fe:cc:83:e0:3e:
11:f4:42:23:42:47:b6:da:d2:13:2d:32:b2:0e:ad:d0:90:0b:
f9:21:07:f3:14:dd:e8:35:de:e2:e5:4c:df:78:1c:86:2c:4f:
d1:21:7f:fa:1a:42:c8:37:5e:9f:c3:35:9d:17:24:55:f1:eb:
d8:f3:49:b1:3f:e9:75:34:77:6b:ae:23:a9:ea:13:24:23:bd:
b7:c7:f7:12:79:2f:e3:62:fa:15:1f:ec:ae:d7:5c:39:a5:5c:
8b:e4:92:dc:b8:f4:c5:f8:17:f6:ef:e7:93:11:a0:19:15:8a:
77:21:b3:3a:71:e4:c4:a5:95:c9:49:48:2e:f1:7c:bb:3f:b5:
b0:c6:14:b3:39:78:8b:a2:de:60:65:45:66:50:33:6c:c3:76:
c3:4b:c6:d5:80:c9:ee:b8:d8:35:d8:38:a3:c3:01:d6:4e:b3:
9b:b3:04:ca:a8:d5:43:98:35:2a:d5:b6:04:d8:12:26:4b:f5:
80:65:1d:c6:a3:c0:ef:27:c1:d2:12:e2:14:57:b2:b4:e9:b4:
e6:9b:ec:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:32 2024 by rpki-client on console-ams.rpki-client.org