Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b8c851-16ec-476f-9918-a62473abaa91/1/_4rEul_qoR_4cATXjngnqVjgG-Q.roa
File: _4rEul_qoR_4cATXjngnqVjgG-Q.roa (raw, json)
Hash identifier: 2Ms7Foz8MuG+l4YUWLMJkva8YDsEi5Sxt9Sal+Ns874=
Subject key identifier: FF:8A:C4:BA:5F:EA:A1:1F:F8:70:04:D7:8E:78:27:A9:58:E0:1B:E4
Certificate issuer: /CN=d1f5d55a1bb009d181992e241851d5f9939237cc
Certificate serial: 01887BE3A7EF660E994BA4D2559FE5AA96BB
Authority key identifier: D1:F5:D5:5A:1B:B0:09:D1:81:99:2E:24:18:51:D5:F9:93:92:37:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fXVWhuwCdGBmS4kGFHV-ZOSN8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b8c851-16ec-476f-9918-a62473abaa91/1/_4rEul_qoR_4cATXjngnqVjgG-Q.roa
Signing time: Fri 02 Jun 2023 11:34:57 +0000
ROA not before: Fri 02 Jun 2023 11:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44053
IP address blocks: 31.15.16.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7b:e3:a7:ef:66:0e:99:4b:a4:d2:55:9f:e5:aa:96:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f5d55a1bb009d181992e241851d5f9939237cc
Validity
Not Before: Jun 2 11:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff8ac4ba5feaa11ff87004d78e7827a958e01be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:ea:fb:ca:89:79:8f:33:85:26:93:d4:81:
78:95:08:d7:0e:d8:a3:c0:d1:d6:16:ba:74:42:95:
d0:cb:9e:75:bd:a7:ec:ed:c5:44:29:e9:4b:81:3a:
de:b8:7d:97:4e:95:a7:2c:f1:cc:f9:a0:e2:07:d7:
0d:fe:5c:a9:e1:4b:11:e9:e7:ec:2f:f9:25:cf:2c:
88:34:19:c3:92:11:6b:bb:32:8d:f5:d8:0a:2c:63:
ec:48:04:7a:47:dd:47:5d:5e:0a:59:16:c3:7f:bc:
b6:33:9a:92:b5:90:06:86:61:d4:2e:e3:af:65:7f:
49:d4:c7:c0:e5:4f:b5:2c:d0:7b:8d:7e:c1:0e:2a:
eb:9f:66:8f:98:f9:3b:e5:23:1b:8b:dd:2a:6d:6a:
81:b3:a1:aa:53:bc:5c:7f:61:1d:db:39:01:d8:03:
45:b0:46:1e:19:03:8c:8c:0e:19:eb:12:34:04:10:
69:af:90:b0:30:c1:0a:0c:fb:59:7b:db:cc:3f:75:
45:9c:c0:dd:de:ff:91:92:f2:bd:c1:cd:ea:24:5c:
89:a1:e2:21:49:e0:2f:e1:6f:b1:3c:f0:22:0d:0e:
2a:83:01:0c:50:3b:73:99:a3:f6:2d:16:ca:e4:c9:
47:10:67:e4:53:48:5b:ea:bc:9a:d5:ee:e2:57:3c:
aa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8A:C4:BA:5F:EA:A1:1F:F8:70:04:D7:8E:78:27:A9:58:E0:1B:E4
X509v3 Authority Key Identifier:
keyid:D1:F5:D5:5A:1B:B0:09:D1:81:99:2E:24:18:51:D5:F9:93:92:37:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fXVWhuwCdGBmS4kGFHV-ZOSN8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8c851-16ec-476f-9918-a62473abaa91/1/_4rEul_qoR_4cATXjngnqVjgG-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8c851-16ec-476f-9918-a62473abaa91/1/0fXVWhuwCdGBmS4kGFHV-ZOSN8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.16.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:6e:f3:36:af:43:39:88:fc:6a:58:81:01:34:46:ff:ed:40:
82:ce:2d:b1:c8:e1:24:b8:ec:74:0f:bd:3d:7b:1e:2a:79:0c:
20:61:0c:65:da:15:62:26:9f:ac:0d:b7:a5:7f:c2:8c:8c:9a:
2d:0e:90:bf:92:1c:00:a5:03:a2:26:c5:21:ef:c7:be:25:b5:
e4:0e:68:8a:39:75:7e:e7:53:98:8d:e5:5f:de:4d:e6:55:04:
1e:ed:8a:81:d7:3a:4d:2e:cf:9f:b8:17:c0:09:a6:1b:3a:fd:
e7:3b:ff:92:bc:b8:cf:d0:f6:e7:c3:77:7f:bb:39:12:a5:9c:
f0:d7:70:0d:43:55:76:8f:39:16:c3:58:df:db:fa:44:2f:c9:
cd:fa:36:fe:b4:a0:2b:83:27:88:e3:69:9a:5e:f5:34:68:12:
8b:dd:34:fb:61:50:48:86:d0:77:f6:8c:e3:f6:ae:3c:89:cb:
79:da:ea:44:eb:2c:25:29:03:2a:34:9f:a0:f6:fa:58:c2:bd:
96:b0:9e:f3:dc:9c:f8:6f:9a:b9:c1:41:a6:be:6e:f1:55:ca:
6a:26:94:3c:59:af:6b:cd:aa:7a:a4:8f:7f:5a:b1:b7:0b:d5:
6f:30:20:81:b1:71:cb:c7:16:24:ae:87:50:16:47:09:b8:be:
fd:47:e6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:58 2024 by rpki-client on console-fra.rpki-client.org