Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d5b440-b533-4359-b59e-c16e03d625a0/1/M5fYIpk-DaRKi3iRuGhqm_CCgkY.roa
File: M5fYIpk-DaRKi3iRuGhqm_CCgkY.roa (raw, json)
Hash identifier: 4gKMwokJcwBYTt5bpCfiYlqPfRDrwv7eZr5hJhMkGkI=
Subject key identifier: 33:97:D8:22:99:3E:0D:A4:4A:8B:78:91:B8:68:6A:9B:F0:82:82:46
Certificate issuer: /CN=ea6c52b913c6dc7ffa070318354e885b62b6ad93
Certificate serial: 0ABD5F84
Authority key identifier: EA:6C:52:B9:13:C6:DC:7F:FA:07:03:18:35:4E:88:5B:62:B6:AD:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6mxSuRPG3H_6BwMYNU6IW2K2rZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d5b440-b533-4359-b59e-c16e03d625a0/1/M5fYIpk-DaRKi3iRuGhqm_CCgkY.roa
Signing time: Sat 01 Jan 2022 14:08:31 +0000
ROA not before: Sat 01 Jan 2022 14:08:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48196
IP address blocks: 31.217.232.0/21 maxlen: 21
213.190.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180182916 (0xabd5f84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea6c52b913c6dc7ffa070318354e885b62b6ad93
Validity
Not Before: Jan 1 14:08:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3397d822993e0da44a8b7891b8686a9bf0828246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:28:ad:23:e1:58:3e:42:a9:53:2e:f2:98:
55:af:8b:19:46:3d:75:7f:9e:66:67:1b:9a:ef:89:
7c:04:11:98:18:7a:b3:c9:30:e7:72:29:f5:ec:a3:
f4:a5:12:59:de:7e:82:b8:fd:39:0a:8b:40:36:ef:
d0:71:a3:23:8b:f0:1e:75:f5:05:8a:a5:bf:b0:f0:
12:88:39:0c:a1:2b:b1:e1:d1:6e:7b:ee:d5:c4:6d:
3f:85:0c:fd:c0:c5:94:15:5f:7b:52:25:87:84:37:
72:5a:8b:ad:5d:a8:3f:a9:8d:8d:eb:a8:ac:18:71:
6d:ec:af:8a:e6:a8:49:30:93:54:5f:e6:a3:b5:fb:
65:f4:9f:d7:e2:0e:34:ae:37:d9:6b:00:04:47:06:
22:4e:52:77:ae:cf:a0:1f:46:51:3a:07:79:ff:c5:
22:91:dd:71:d8:c8:4e:da:e1:ac:f0:94:09:0c:f8:
ea:d4:95:f0:cc:b0:a4:91:89:a5:11:a6:88:1f:e7:
90:78:7e:ef:57:0d:6f:7c:32:33:2f:9e:20:fd:0d:
ea:8f:37:49:29:a2:31:64:68:c4:08:97:b3:c8:07:
81:9a:22:b0:61:1f:a2:a5:b0:9c:a3:45:4e:06:72:
98:6a:07:ec:e4:a5:40:28:67:d1:e5:f9:f4:89:9c:
73:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:97:D8:22:99:3E:0D:A4:4A:8B:78:91:B8:68:6A:9B:F0:82:82:46
X509v3 Authority Key Identifier:
keyid:EA:6C:52:B9:13:C6:DC:7F:FA:07:03:18:35:4E:88:5B:62:B6:AD:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6mxSuRPG3H_6BwMYNU6IW2K2rZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d5b440-b533-4359-b59e-c16e03d625a0/1/M5fYIpk-DaRKi3iRuGhqm_CCgkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d5b440-b533-4359-b59e-c16e03d625a0/1/6mxSuRPG3H_6BwMYNU6IW2K2rZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.232.0/21
213.190.64.0/19
Signature Algorithm: sha256WithRSAEncryption
6f:88:51:23:8d:54:5a:5b:95:e1:79:a3:9d:15:b7:fc:59:91:
97:b5:1d:39:74:70:35:77:91:64:f3:c7:b5:19:2d:c3:8e:12:
16:2e:af:0b:a7:0e:e3:08:a4:1b:c1:ac:54:9f:58:fe:39:0e:
1f:1c:fe:c5:8b:e7:c1:a4:74:6c:a6:c4:9d:f7:e9:2a:e1:28:
04:25:63:e6:df:a4:aa:2c:da:f8:1b:bf:e4:f8:42:62:07:0d:
79:b5:62:64:02:20:b1:e6:5d:8a:1f:b5:ed:94:e9:99:37:68:
82:59:54:ac:37:8c:6b:b9:dd:a5:1d:06:1e:8d:19:05:14:02:
9a:9b:df:fd:2b:5b:1b:08:aa:01:ba:87:94:02:67:46:1a:ee:
a4:93:d4:ef:39:b5:48:06:49:ac:8f:b0:37:3a:91:86:76:5a:
b0:4f:4e:8b:bc:34:b9:8c:fb:31:34:c8:18:f6:58:5c:aa:f7:
72:1f:94:18:d9:bd:7f:1a:33:0b:33:33:fb:de:19:4b:6f:af:
4b:e3:03:c9:14:d7:4f:62:61:cb:f2:8c:a4:1f:a6:c3:f2:5a:
ea:0e:b0:7b:83:d6:d5:a1:98:af:51:be:f2:87:45:b6:24:d3:
69:25:4e:11:82:51:5d:69:cd:cd:ba:1b:10:fd:84:94:92:9b:
ba:60:a9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:17 2023 by rpki-client on console-ams.rpki-client.org