Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/NVE-bfZ4fiI-bl5u0vXeQLdQQhg.roa
File: NVE-bfZ4fiI-bl5u0vXeQLdQQhg.roa (raw, json)
Hash identifier: cIEIYOb3gKzkX3wngF5IZDAUe++aG2gPtNEUWV28k+Y=
Subject key identifier: 35:51:3E:6D:F6:78:7E:22:3E:6E:5E:6E:D2:F5:DE:40:B7:50:42:18
Certificate issuer: /CN=9173a7bb8dd405fd01bc2c8dc3c2c13267fa06e5
Certificate serial: BFAF33
Authority key identifier: 91:73:A7:BB:8D:D4:05:FD:01:BC:2C:8D:C3:C2:C1:32:67:FA:06:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXOnu43UBf0BvCyNw8LBMmf6BuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/NVE-bfZ4fiI-bl5u0vXeQLdQQhg.roa
Signing time: Sat 01 Jan 2022 02:53:31 +0000
ROA not before: Sat 01 Jan 2022 02:53:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 31.222.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12562227 (0xbfaf33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9173a7bb8dd405fd01bc2c8dc3c2c13267fa06e5
Validity
Not Before: Jan 1 02:53:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35513e6df6787e223e6e5e6ed2f5de40b7504218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ce:6f:71:ab:de:66:e0:ae:17:a5:cb:12:c4:
5f:09:34:a3:9c:27:61:97:5f:0d:ef:e5:a2:0a:9f:
dd:e9:1e:10:30:98:1a:90:69:8f:92:b4:eb:32:25:
29:10:69:00:a6:4e:b5:89:5f:00:49:db:c1:9f:af:
be:a1:e0:e2:6e:66:88:e7:20:a3:c0:8a:91:83:12:
69:e9:c5:90:2a:6c:94:1f:0d:2b:72:e9:06:49:a7:
2b:f0:5a:6c:54:fa:4b:fb:37:44:a6:b9:1d:8e:ee:
1e:79:06:10:93:f4:4a:1d:46:65:4c:ed:ea:bf:5a:
34:89:fd:42:f6:4a:c1:6d:2b:8c:62:aa:a1:f2:8a:
f5:87:01:e7:6f:4f:ea:73:ef:53:6b:d7:8c:53:df:
7e:87:6b:10:d1:7f:53:35:5a:ac:b3:b2:f5:44:a9:
41:df:b0:76:34:93:81:aa:80:e7:c5:0e:94:08:0a:
95:d8:49:46:b8:18:bc:05:f9:5d:1d:08:a7:1c:52:
57:1f:41:5a:37:13:86:87:0f:15:8e:d1:15:7d:aa:
16:77:40:45:ca:67:96:e7:b5:03:96:ee:da:09:45:
dd:20:59:5d:d8:7f:03:12:e8:e9:c0:4d:5f:a6:4a:
58:3d:a5:f2:84:e9:93:07:4b:2a:ab:eb:7b:7c:83:
aa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:51:3E:6D:F6:78:7E:22:3E:6E:5E:6E:D2:F5:DE:40:B7:50:42:18
X509v3 Authority Key Identifier:
keyid:91:73:A7:BB:8D:D4:05:FD:01:BC:2C:8D:C3:C2:C1:32:67:FA:06:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXOnu43UBf0BvCyNw8LBMmf6BuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/NVE-bfZ4fiI-bl5u0vXeQLdQQhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/kXOnu43UBf0BvCyNw8LBMmf6BuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.234.0/24
Signature Algorithm: sha256WithRSAEncryption
41:a9:38:c1:78:75:e0:3b:2b:c1:cd:94:16:fa:b7:6a:ac:60:
f2:6e:2b:2d:26:21:85:0c:f0:ef:fb:d2:1e:3f:10:1b:01:11:
af:92:36:52:b8:fc:8d:00:6f:66:5e:1b:86:ab:c9:2f:3c:ca:
ab:6c:b3:4f:f4:6c:62:f8:3c:eb:d8:c6:42:ec:6e:b6:cd:6f:
b6:79:0e:20:7b:d7:2e:9e:cf:b5:5c:b7:dc:1e:6b:4a:0e:65:
8b:ae:3e:a9:e4:48:72:ed:ab:a0:c2:29:b7:f6:de:52:35:4b:
d5:70:ff:ee:ef:cd:6f:e1:0a:63:5c:21:a4:b2:5d:9f:c7:61:
c2:cd:8a:96:45:08:73:93:ba:26:27:51:a9:36:4b:cb:72:69:
64:3c:aa:b2:22:15:02:ee:ba:c6:b0:33:68:fd:9e:6c:f8:09:
62:ee:61:80:06:dd:0d:79:89:e1:21:3b:f6:c2:1d:25:77:3a:
0c:90:f9:0f:97:d5:0f:74:b8:f1:0f:82:16:8c:d7:77:bd:47:
b6:ab:d2:c9:99:ab:77:1d:5f:20:f2:cc:50:ee:e1:91:67:1a:
b3:9d:f0:48:cf:b9:54:b9:9c:0b:ea:fc:45:ec:8e:7c:8e:95:
4f:e5:20:8b:24:90:a4:52:08:f6:d3:eb:7a:bd:04:df:36:01:
80:27:3c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:27 2024 by rpki-client on console-ams.rpki-client.org