Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d5b440-b533-4359-b59e-c16e03d625a0/1/8FF6wyJxia3gjzI6OrDAbXJtAEM.roa
File: 8FF6wyJxia3gjzI6OrDAbXJtAEM.roa (raw, json)
Hash identifier: QOVVSVTTNdUHvJf6Cpc2K4zEWprcts7gcL7lktiBpSE=
Subject key identifier: F0:51:7A:C3:22:71:89:AD:E0:8F:32:3A:3A:B0:C0:6D:72:6D:00:43
Certificate issuer: /CN=ea6c52b913c6dc7ffa070318354e885b62b6ad93
Certificate serial: 0ABD3E3B
Authority key identifier: EA:6C:52:B9:13:C6:DC:7F:FA:07:03:18:35:4E:88:5B:62:B6:AD:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6mxSuRPG3H_6BwMYNU6IW2K2rZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d5b440-b533-4359-b59e-c16e03d625a0/1/8FF6wyJxia3gjzI6OrDAbXJtAEM.roa
Signing time: Sat 01 Jan 2022 14:08:31 +0000
ROA not before: Sat 01 Jan 2022 14:08:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20900
IP address blocks: 31.217.232.0/21 maxlen: 24
185.182.252.0/22 maxlen: 24
213.190.64.0/19 maxlen: 24
91.231.175.0/24 maxlen: 24
2001:1b08::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180174395 (0xabd3e3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea6c52b913c6dc7ffa070318354e885b62b6ad93
Validity
Not Before: Jan 1 14:08:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0517ac3227189ade08f323a3ab0c06d726d0043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d2:b5:b6:e6:9d:1f:05:3b:b6:8f:79:41:a9:
d5:c6:c1:54:99:c0:bb:d6:78:b2:ed:fa:5b:6a:de:
3e:8a:11:6d:06:6c:70:5f:44:08:8e:73:f8:26:41:
4f:d8:b2:18:e6:7d:b0:08:2f:8a:76:4b:77:2d:2e:
fa:72:a3:b6:85:28:34:c3:75:f5:59:88:8b:b5:8a:
d1:ca:f9:d5:4f:65:38:4d:2b:34:0c:51:ca:d2:f2:
1a:cc:1e:ed:7d:fb:61:e9:ce:16:ff:41:45:32:4a:
53:09:f8:86:09:4a:15:20:89:ae:a4:c9:c4:f6:f4:
80:f7:4f:68:4b:ee:5b:fa:bf:ed:07:91:e0:23:b8:
99:76:b7:5e:91:a7:93:01:bf:6b:76:ad:e5:be:d4:
66:d0:b3:5c:05:b5:0e:38:03:cd:fb:c8:a3:3a:0e:
d6:be:1f:c0:99:c3:84:7d:d3:cc:7f:91:4e:37:98:
f5:2c:66:d3:6b:e7:b7:dc:bf:fa:c8:7f:e1:20:32:
a0:aa:e3:b0:bd:5d:7f:4f:4c:8b:93:38:db:e3:bc:
e9:10:e2:60:b1:b5:9a:4f:71:7c:1b:80:ea:62:76:
f4:4b:00:b3:5e:d6:71:05:87:ab:ab:ec:4c:ce:84:
d4:65:7e:84:76:c5:9d:eb:5d:ce:0d:ae:4c:58:a2:
94:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:51:7A:C3:22:71:89:AD:E0:8F:32:3A:3A:B0:C0:6D:72:6D:00:43
X509v3 Authority Key Identifier:
keyid:EA:6C:52:B9:13:C6:DC:7F:FA:07:03:18:35:4E:88:5B:62:B6:AD:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6mxSuRPG3H_6BwMYNU6IW2K2rZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d5b440-b533-4359-b59e-c16e03d625a0/1/8FF6wyJxia3gjzI6OrDAbXJtAEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d5b440-b533-4359-b59e-c16e03d625a0/1/6mxSuRPG3H_6BwMYNU6IW2K2rZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.232.0/21
91.231.175.0/24
185.182.252.0/22
213.190.64.0/19
IPv6:
2001:1b08::/32
Signature Algorithm: sha256WithRSAEncryption
b5:ff:e1:7a:5d:3a:cb:65:53:8c:40:76:5e:b2:dc:88:18:5e:
8e:de:eb:e8:b2:48:f9:84:73:8b:ab:d0:c7:fb:dc:65:78:67:
c3:c3:85:74:52:b9:0d:7d:e6:33:c5:34:2b:aa:10:9d:01:a0:
74:eb:d7:f6:d6:30:05:29:52:f6:ca:6c:76:6f:67:e9:8e:5f:
ce:d6:46:d3:7e:b7:e2:29:1c:5e:d8:c5:a7:a9:f4:b6:22:8b:
7a:79:6e:28:ca:40:bb:6f:74:26:1c:9b:1f:59:98:8a:07:01:
08:78:78:41:22:41:f5:50:20:fb:e5:38:0b:42:f7:c3:0d:e8:
aa:1b:e8:55:91:35:d2:7a:63:6b:d2:b4:e5:6a:bc:2d:2f:2c:
29:e7:bb:e9:24:80:ad:60:d7:dc:20:16:66:0f:9b:48:64:7d:
85:33:ac:1b:4e:98:b4:fa:2f:d6:fc:a2:86:01:4c:31:7f:5c:
0b:90:03:6e:0d:c9:9b:88:da:39:dd:00:69:dd:9b:55:de:d9:
c4:6e:77:41:6e:8b:35:96:c5:9f:d6:a0:a2:59:d9:96:ae:3a:
36:f6:0d:4b:a2:7a:ae:9c:db:82:2a:38:f8:47:66:7c:b3:a8:
d1:51:db:59:cb:81:7c:28:d4:43:5a:c8:e5:79:65:31:5a:c2:
36:9e:08:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:23 2023 by rpki-client on console-fra.rpki-client.org