Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/Nw6OES8yERfBlrxpzmqz3ygd-ig.roa
File: Nw6OES8yERfBlrxpzmqz3ygd-ig.roa (raw, json)
Hash identifier: EgbWGaey9UaAlrhafiJHi8NXQOY0MByvZCwv7meaAE8=
Subject key identifier: 37:0E:8E:11:2F:32:11:17:C1:96:BC:69:CE:6A:B3:DF:28:1D:FA:28
Certificate issuer: /CN=9173a7bb8dd405fd01bc2c8dc3c2c13267fa06e5
Certificate serial: BDA6F2
Authority key identifier: 91:73:A7:BB:8D:D4:05:FD:01:BC:2C:8D:C3:C2:C1:32:67:FA:06:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXOnu43UBf0BvCyNw8LBMmf6BuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/Nw6OES8yERfBlrxpzmqz3ygd-ig.roa
Signing time: Sat 01 Jan 2022 02:53:31 +0000
ROA not before: Sat 01 Jan 2022 02:53:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 31.222.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12429042 (0xbda6f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9173a7bb8dd405fd01bc2c8dc3c2c13267fa06e5
Validity
Not Before: Jan 1 02:53:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=370e8e112f321117c196bc69ce6ab3df281dfa28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:72:f1:aa:41:f0:85:06:26:de:d0:88:09:19:
a1:c0:74:67:bb:c9:69:c5:c9:51:1a:d6:de:0e:45:
a7:9a:f2:d4:f2:7d:94:c7:0b:a7:56:b6:ed:ed:19:
6b:79:df:86:8b:24:78:db:ba:7c:04:44:bd:24:f6:
dd:d9:00:18:3e:97:ee:ca:89:7b:b9:71:9c:d2:d5:
96:c6:cb:a3:fd:b9:c0:27:af:bf:25:52:37:5b:dd:
ee:05:e0:70:e3:aa:ce:eb:8d:fd:5f:c1:4a:35:b1:
5f:82:f1:5f:20:46:79:27:46:ee:6b:3a:29:84:0c:
25:9f:08:80:15:50:c6:d4:66:63:29:aa:9e:27:5b:
9c:a5:e8:73:49:94:47:3e:79:a0:bf:b2:fc:91:14:
ac:73:1b:45:fb:60:60:ed:e1:80:50:5b:7f:6c:18:
b7:1f:dd:01:43:1f:9a:2b:16:6b:c5:1a:d1:7e:61:
7c:c0:74:58:f3:ca:c3:41:a6:79:bc:90:af:13:ec:
1b:58:31:34:47:4c:81:ab:22:38:cd:b0:f1:4b:ee:
15:60:38:83:36:95:14:7b:34:bb:8f:15:ac:e3:1c:
01:ad:f1:6c:b7:db:3c:37:d7:5e:a6:0f:47:7c:f2:
80:7f:59:b8:d9:3e:d5:dd:39:4e:78:c0:fa:4e:dd:
fe:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0E:8E:11:2F:32:11:17:C1:96:BC:69:CE:6A:B3:DF:28:1D:FA:28
X509v3 Authority Key Identifier:
keyid:91:73:A7:BB:8D:D4:05:FD:01:BC:2C:8D:C3:C2:C1:32:67:FA:06:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXOnu43UBf0BvCyNw8LBMmf6BuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/Nw6OES8yERfBlrxpzmqz3ygd-ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/kXOnu43UBf0BvCyNw8LBMmf6BuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.234.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:8d:09:49:97:95:5d:d4:6a:bd:cc:e6:c3:0e:a3:cb:dd:d8:
b6:73:de:19:33:82:1b:28:f1:7b:c5:31:34:26:4c:b5:89:e6:
ca:2b:58:11:64:da:3c:db:74:bb:51:a9:cb:aa:89:50:d7:92:
bc:33:88:72:cf:24:17:06:f2:32:c2:42:0d:2a:96:1f:ca:2d:
9c:e2:47:60:9e:5f:07:e9:de:66:22:e8:27:43:9d:1f:bf:19:
91:dc:68:20:49:4d:5d:8a:16:5f:e6:80:1b:a8:55:cc:ed:eb:
03:a5:cf:24:b5:b5:ed:46:0f:4f:34:89:ba:17:18:90:94:56:
29:56:44:af:ff:db:8c:03:5b:b3:79:c0:d0:60:f9:0e:a7:6b:
c3:50:3c:e6:60:c6:e8:8c:2c:c6:dd:c3:83:41:b4:be:24:36:
76:ff:1c:4e:32:b6:a7:04:b4:68:2e:1b:a3:ce:d7:45:d7:9f:
1c:df:8b:39:8e:6d:c1:94:3f:a3:70:bd:1d:5c:f1:97:87:c7:
23:f5:a8:9c:72:6d:5c:e8:85:25:05:0c:82:90:67:4b:ca:fe:
a5:89:ed:b4:1c:0b:35:ee:d0:6c:52:60:20:3c:71:4a:20:29:
1e:00:41:ef:d9:7b:8f:f8:ca:e5:5d:0c:3c:58:85:99:ac:94:
01:16:b4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:06 2024 by rpki-client on console-fra.rpki-client.org