Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/08111e-4a14-4835-aa3e-054a81fec4c8/1/JlY_r_6Vg--Mkbm-paQdza4RKZE.roa
File: JlY_r_6Vg--Mkbm-paQdza4RKZE.roa (raw, json)
Hash identifier: tdFdS0sv4cQ35r7iywTK3Hi72knUIfj1peE/nCxs2Zo=
Subject key identifier: 26:56:3F:AF:FE:95:83:EF:8C:91:B9:BE:A5:A4:1D:CD:AE:11:29:91
Certificate issuer: /CN=947d4e429078e59dd4183fedc15d6e3ce9eee6f6
Certificate serial: 01842DFACF71A0C296A12FBDF95F18931331
Authority key identifier: 94:7D:4E:42:90:78:E5:9D:D4:18:3F:ED:C1:5D:6E:3C:E9:EE:E6:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH1OQpB45Z3UGD_twV1uPOnu5vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/08111e-4a14-4835-aa3e-054a81fec4c8/1/JlY_r_6Vg--Mkbm-paQdza4RKZE.roa
Signing time: Mon 31 Oct 2022 12:18:42 +0000
ROA not before: Mon 31 Oct 2022 12:18:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206728
IP address blocks: 31.222.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2d:fa:cf:71:a0:c2:96:a1:2f:bd:f9:5f:18:93:13:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947d4e429078e59dd4183fedc15d6e3ce9eee6f6
Validity
Not Before: Oct 31 12:18:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26563faffe9583ef8c91b9bea5a41dcdae112991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:49:77:b3:81:59:06:fc:ef:14:1f:84:9a:95:
3d:9a:3a:24:e1:5e:83:30:37:0e:09:6d:02:1a:15:
7b:13:69:c4:2e:1e:65:8d:4a:ad:11:63:b4:11:51:
a8:5a:3f:7b:69:84:19:a4:d9:85:d1:27:1f:a6:02:
b7:da:dc:70:d4:d9:ee:33:b0:35:86:1c:04:02:e3:
8b:1d:cf:4d:88:6b:37:4a:55:b9:d1:c5:f6:be:8b:
b0:bf:e9:1d:71:c7:82:e0:e7:7d:19:13:0a:47:4b:
5d:71:19:1a:96:15:77:ea:7c:ae:02:25:35:45:75:
20:60:9d:16:4d:19:c0:cd:bb:06:39:a1:2a:46:78:
e1:e5:11:43:8d:3b:e6:82:79:2e:18:a6:b9:4c:71:
18:da:83:0e:52:61:01:a4:98:36:e2:c1:4f:1a:9c:
6a:fe:6d:1f:84:c8:90:81:67:e5:96:70:ed:47:10:
09:a8:6f:1c:a3:5d:f3:80:c7:9d:c1:0c:ce:29:e6:
5a:bd:aa:9a:30:fe:07:e4:b0:46:40:c5:6d:dd:93:
c0:15:04:98:21:b9:53:ec:ba:5e:1f:06:61:95:f1:
c9:e5:d7:77:b0:e9:c3:15:59:8e:5f:91:2f:e8:b2:
86:d7:56:1a:bd:e6:58:6f:15:c9:c7:14:92:19:d0:
cb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:56:3F:AF:FE:95:83:EF:8C:91:B9:BE:A5:A4:1D:CD:AE:11:29:91
X509v3 Authority Key Identifier:
keyid:94:7D:4E:42:90:78:E5:9D:D4:18:3F:ED:C1:5D:6E:3C:E9:EE:E6:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH1OQpB45Z3UGD_twV1uPOnu5vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/08111e-4a14-4835-aa3e-054a81fec4c8/1/JlY_r_6Vg--Mkbm-paQdza4RKZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/08111e-4a14-4835-aa3e-054a81fec4c8/1/lH1OQpB45Z3UGD_twV1uPOnu5vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.251.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:aa:77:63:f5:28:f3:40:9c:05:1c:39:0e:ad:1a:bd:de:94:
19:79:f4:bb:2a:eb:1e:5a:b7:63:a1:f4:ed:2a:c2:c3:55:36:
cc:ee:57:d3:36:4e:42:63:e7:54:18:97:49:68:81:7f:51:a3:
c7:cc:17:2b:38:65:04:c3:29:ed:30:f2:08:8c:26:b4:ab:70:
d7:a7:98:f9:4f:ee:b3:d4:2f:e9:f7:b6:ba:77:f6:f7:dc:fa:
90:4f:b2:c8:b6:86:e5:2a:c2:38:b3:c2:0b:e3:40:c6:42:d0:
92:bb:70:09:7b:23:d9:6d:5d:88:c5:74:3a:72:9a:f9:34:d1:
66:6e:9e:83:f1:cb:f2:4b:18:0e:06:1a:79:ed:08:6c:31:f1:
2a:62:56:91:0d:9b:7c:82:54:db:5b:d2:54:b9:71:f8:d3:23:
00:22:bb:ee:a3:41:ad:45:6e:6d:0e:85:1c:2d:40:9c:c0:79:
1b:2b:90:e5:e1:8f:48:81:e9:44:22:29:17:86:aa:b5:f0:ba:
dd:6a:21:e9:68:7d:0c:db:c3:d6:59:77:dd:70:84:c5:19:53:
a5:35:59:39:f7:7c:74:a2:cd:fd:86:75:68:33:de:ea:6e:8d:
31:a9:8e:c2:40:8d:c5:4e:68:71:72:23:f1:c1:13:6b:c7:14:
ea:f7:29:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:34 2024 by rpki-client on console-ams.rpki-client.org