Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/s0mqZaLKObQh310XyRtXg7jSDmw.roa
File: s0mqZaLKObQh310XyRtXg7jSDmw.roa (raw, json)
Hash identifier: siO4OLd5DVe08yGJhpxTdRkwq234hqeG8oMWO+Y2jL0=
Subject key identifier: B3:49:AA:65:A2:CA:39:B4:21:DF:5D:17:C9:1B:57:83:B8:D2:0E:6C
Certificate issuer: /CN=9173a7bb8dd405fd01bc2c8dc3c2c13267fa06e5
Certificate serial: 018220823FCE90D0ED000D653F7E3C61FEA0
Authority key identifier: 91:73:A7:BB:8D:D4:05:FD:01:BC:2C:8D:C3:C2:C1:32:67:FA:06:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXOnu43UBf0BvCyNw8LBMmf6BuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/s0mqZaLKObQh310XyRtXg7jSDmw.roa
Signing time: Thu 21 Jul 2022 11:26:23 +0000
ROA not before: Thu 21 Jul 2022 11:26:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 31.222.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:82:3f:ce:90:d0:ed:00:0d:65:3f:7e:3c:61:fe:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9173a7bb8dd405fd01bc2c8dc3c2c13267fa06e5
Validity
Not Before: Jul 21 11:26:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b349aa65a2ca39b421df5d17c91b5783b8d20e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:29:47:a8:59:c9:9a:ab:02:f1:ae:58:c8:62:
60:42:34:b8:03:de:68:6d:a1:9a:ba:4f:64:76:a2:
dd:c2:c7:35:e3:51:14:20:24:ce:25:b4:82:1c:a5:
d0:a5:b9:5e:59:ad:71:96:10:59:15:be:64:6b:8e:
68:16:f2:d6:cd:52:59:f7:b8:a4:2f:b4:6b:b7:24:
37:fa:71:1e:dc:8e:88:47:c1:a8:e1:e6:e7:c6:8b:
61:51:f9:31:e7:d5:10:2c:b4:55:ca:3b:90:12:42:
ff:a1:ff:8f:15:3d:1f:aa:0c:6e:68:85:a3:98:1a:
77:16:00:e6:5b:4b:e0:7d:fe:fd:04:93:c5:7c:5e:
c0:db:3c:d3:63:a8:07:42:f4:2e:da:5c:9b:a7:a7:
14:8e:21:84:d1:8f:bf:e3:46:c7:24:f7:21:1a:fd:
3f:a1:ab:43:ef:ad:b3:93:54:6b:36:15:2d:1d:03:
cd:ab:4e:d7:2b:d8:28:84:80:06:e5:d0:e6:dc:b8:
d5:1d:b4:28:8f:32:9b:5f:26:23:37:b8:e4:e8:b0:
11:5a:25:a6:70:f0:9a:af:a9:5e:d4:1a:69:e5:27:
da:b5:1b:bc:f9:af:4a:0e:33:26:1a:69:b2:98:af:
a6:94:8a:2f:0c:d3:c2:0d:a1:0c:e5:e7:f3:65:81:
25:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:49:AA:65:A2:CA:39:B4:21:DF:5D:17:C9:1B:57:83:B8:D2:0E:6C
X509v3 Authority Key Identifier:
keyid:91:73:A7:BB:8D:D4:05:FD:01:BC:2C:8D:C3:C2:C1:32:67:FA:06:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXOnu43UBf0BvCyNw8LBMmf6BuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/s0mqZaLKObQh310XyRtXg7jSDmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/kXOnu43UBf0BvCyNw8LBMmf6BuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.234.0/24
Signature Algorithm: sha256WithRSAEncryption
97:35:ed:2d:95:bb:09:29:45:05:75:82:df:c4:b4:54:8a:61:
66:60:30:1d:37:c0:75:da:b4:da:8b:6e:8e:a9:91:8d:09:79:
60:04:6c:7c:cb:96:43:25:b1:48:5b:07:95:b5:a4:72:60:7f:
fe:51:ce:5f:8a:2b:2b:cc:7f:c2:47:90:3d:5b:5f:5d:da:bc:
9f:3e:87:d9:07:35:45:81:82:10:db:f1:1d:36:0c:eb:a0:7b:
61:c1:c7:5a:69:5a:47:2d:1b:9c:e2:7a:2a:a8:10:01:b7:f6:
9d:eb:07:0a:38:ed:d3:34:4a:4b:b4:af:57:c2:b3:ad:6d:e9:
02:77:9b:dc:c1:f3:92:bf:b4:c8:e6:65:7f:e5:77:64:ba:92:
9b:a6:2e:97:a5:1b:a3:da:97:e4:7e:8d:1d:3f:82:b4:3f:bb:
fc:67:dd:28:3b:85:0d:f9:40:7f:b4:61:5b:c8:90:ca:a2:82:
b4:53:a0:97:5e:26:ea:27:0f:6d:8e:af:bc:88:f6:fa:95:73:
7c:d7:3e:1d:7a:32:48:5e:84:92:a1:cf:53:c5:be:a6:95:bf:
bc:35:db:c8:cf:e9:13:49:41:75:6a:d1:e4:a6:99:f5:6e:18:
d8:a8:a3:ab:3e:27:f5:86:04:64:86:8b:62:fc:ad:cf:68:4e:
6a:31:7c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:28 2024 by rpki-client on console-ams.rpki-client.org