Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/F_af6u-D3cJCifKEjVNAMuRNljc.roa
File: F_af6u-D3cJCifKEjVNAMuRNljc.roa (raw, json)
Hash identifier: +DWN68mykxMURCAYH1+A4nR2Ywbkfi1ZsmfFPJ+rx4g=
Subject key identifier: 17:F6:9F:EA:EF:83:DD:C2:42:89:F2:84:8D:53:40:32:E4:4D:96:37
Certificate issuer: /CN=9173a7bb8dd405fd01bc2c8dc3c2c13267fa06e5
Certificate serial: C099EC
Authority key identifier: 91:73:A7:BB:8D:D4:05:FD:01:BC:2C:8D:C3:C2:C1:32:67:FA:06:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXOnu43UBf0BvCyNw8LBMmf6BuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/F_af6u-D3cJCifKEjVNAMuRNljc.roa
Signing time: Sat 01 Jan 2022 02:53:32 +0000
ROA not before: Sat 01 Jan 2022 02:53:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 31.222.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12622316 (0xc099ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9173a7bb8dd405fd01bc2c8dc3c2c13267fa06e5
Validity
Not Before: Jan 1 02:53:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17f69feaef83ddc24289f2848d534032e44d9637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:69:99:ea:30:d1:eb:39:ff:0c:b5:e3:e4:
5c:7d:72:0f:1d:95:16:bb:a5:7c:30:05:0b:02:1e:
63:d0:6a:5b:70:e9:60:41:23:42:bf:a8:b8:82:85:
9b:b7:b8:8c:13:6c:89:15:df:6b:5c:bb:a5:9e:6e:
87:15:cc:12:6b:24:e2:65:37:ed:55:a1:5d:6e:32:
a5:65:f6:6a:61:bb:ad:f3:07:0a:dc:1e:27:bd:bb:
fb:3a:29:c0:42:64:d1:b8:d6:29:4d:fc:3e:71:bc:
26:5b:34:b8:99:dc:1f:e5:8a:e9:b8:2c:81:dd:85:
bf:b2:b9:fa:82:cb:0a:4a:c8:01:6c:d6:9c:f3:3c:
03:38:0e:b2:de:23:f9:70:af:f7:1c:fd:e4:cd:b9:
58:dc:48:ea:75:32:f2:3b:23:3e:16:8c:4f:e5:21:
84:7d:1c:7d:eb:9e:7d:a1:a3:8d:e5:ef:65:e1:f4:
5b:3d:c7:1e:fb:44:83:1a:6d:0b:82:eb:cd:b7:0d:
b1:4a:e7:e6:42:66:bb:95:db:98:3a:e8:41:62:9b:
b3:38:8f:d0:47:bf:82:df:58:99:a9:86:5e:7c:6b:
00:4f:a9:94:18:41:26:dc:ff:5f:92:ea:10:0e:a1:
4d:89:5a:ef:1c:e6:35:4a:b0:1b:92:7b:4d:f9:ed:
91:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F6:9F:EA:EF:83:DD:C2:42:89:F2:84:8D:53:40:32:E4:4D:96:37
X509v3 Authority Key Identifier:
keyid:91:73:A7:BB:8D:D4:05:FD:01:BC:2C:8D:C3:C2:C1:32:67:FA:06:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXOnu43UBf0BvCyNw8LBMmf6BuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/F_af6u-D3cJCifKEjVNAMuRNljc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/kXOnu43UBf0BvCyNw8LBMmf6BuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.234.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:45:26:7f:61:c1:dc:b9:c0:a8:ab:7f:cd:1a:11:95:f7:cc:
6e:50:44:97:a8:16:db:ea:da:21:57:bb:c2:e3:a4:5a:06:94:
d4:2c:0d:c9:c1:12:85:df:9e:ce:a5:7d:e8:6c:cb:ac:d6:5f:
0a:9d:d0:51:a3:cd:ba:93:9c:a0:48:3e:51:25:5f:26:85:b5:
78:d7:68:fb:67:8e:8f:6d:13:ac:0d:59:eb:09:6d:f3:b8:6e:
08:a2:22:99:6b:dd:cf:c1:50:3a:af:44:02:ff:d9:38:82:92:
5f:f1:52:9d:d6:43:f4:dc:33:06:2e:ee:8b:69:2c:34:f4:71:
f7:26:69:d2:9c:c7:bc:b9:d0:72:e6:f2:b0:aa:b5:a6:da:d8:
52:51:ca:82:ad:a3:80:32:b8:ba:8b:9d:86:ed:a3:f3:f5:1b:
23:7b:84:b5:a4:d0:92:bb:ee:31:34:28:cd:b6:46:55:b7:ce:
c1:74:0a:55:17:74:5e:a5:bd:0f:ed:ab:14:54:91:26:3e:df:
05:83:fb:20:e9:f8:d7:fd:47:78:7d:4e:50:59:66:e4:3e:76:
4e:a5:17:65:10:04:80:74:e5:22:78:f2:6f:e2:e6:c0:6b:ee:
ba:9a:b2:01:6c:3c:a3:d4:7c:d4:3e:45:de:cb:3a:dc:c7:a4:
25:2c:60:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:27 2024 by rpki-client on console-ams.rpki-client.org