Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/91b98e-12ae-4d4b-9c1c-e261bd2806e9/1/R3nsC-B-wUtRVvwihWnjtVvNxnc.roa
File: R3nsC-B-wUtRVvwihWnjtVvNxnc.roa (raw, json)
Hash identifier: TRF3/nsvRdjrVbJr4+HwESJx2SaE9khBBt0myRYl7QI=
Subject key identifier: 47:79:EC:0B:E0:7E:C1:4B:51:56:FC:22:85:69:E3:B5:5B:CD:C6:77
Certificate issuer: /CN=66991c0122d0ec2595cf3afb16ead873180ae091
Certificate serial: 03A304E7
Authority key identifier: 66:99:1C:01:22:D0:EC:25:95:CF:3A:FB:16:EA:D8:73:18:0A:E0:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpkcASLQ7CWVzzr7FurYcxgK4JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/91b98e-12ae-4d4b-9c1c-e261bd2806e9/1/R3nsC-B-wUtRVvwihWnjtVvNxnc.roa
Signing time: Sat 01 Jan 2022 10:05:04 +0000
ROA not before: Sat 01 Jan 2022 10:05:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57789
IP address blocks: 31.135.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61015271 (0x3a304e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66991c0122d0ec2595cf3afb16ead873180ae091
Validity
Not Before: Jan 1 10:05:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4779ec0be07ec14b5156fc228569e3b55bcdc677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:76:6f:ff:55:17:aa:a6:bf:fc:35:e8:69:47:
c9:02:42:6c:35:1d:32:c6:12:ab:24:0a:33:5b:91:
17:34:a1:86:47:74:d5:e0:7f:d4:3b:6f:fd:52:6a:
56:05:89:47:c1:b9:65:93:42:b7:10:7b:22:6d:1e:
15:7d:25:80:07:80:e1:ee:05:41:d6:ea:2f:b8:6a:
ec:6d:2b:4d:ce:11:b2:dc:d2:be:36:0f:5f:0f:c0:
c2:38:5e:f0:8c:e8:4b:67:e7:e3:e3:45:df:36:ff:
2a:9c:75:4d:66:88:5f:f2:e7:26:ae:88:41:41:7f:
73:39:89:41:d6:45:fa:5e:27:d0:1b:27:d3:d3:5e:
70:c6:4b:b6:51:7b:f7:77:c5:10:a7:ea:07:bc:7b:
1d:51:9d:a4:6b:07:9b:92:4e:c4:b3:3f:4e:9c:ea:
c0:0c:f9:9c:84:ce:5e:b0:87:14:30:11:19:f9:a0:
66:d7:79:58:6b:1b:2a:a0:0e:96:f2:f4:5d:ef:ff:
db:15:17:0c:e0:2b:57:a5:30:5b:9c:aa:ee:56:f1:
63:10:40:0a:fd:ca:6f:a1:1b:a3:61:c8:8e:2e:c1:
dc:06:76:83:53:96:ad:fe:4b:ec:19:5c:cb:74:75:
b5:b0:ee:36:39:fb:20:56:b3:4d:3d:ab:b5:11:61:
b2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:79:EC:0B:E0:7E:C1:4B:51:56:FC:22:85:69:E3:B5:5B:CD:C6:77
X509v3 Authority Key Identifier:
keyid:66:99:1C:01:22:D0:EC:25:95:CF:3A:FB:16:EA:D8:73:18:0A:E0:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpkcASLQ7CWVzzr7FurYcxgK4JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/91b98e-12ae-4d4b-9c1c-e261bd2806e9/1/R3nsC-B-wUtRVvwihWnjtVvNxnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/91b98e-12ae-4d4b-9c1c-e261bd2806e9/1/ZpkcASLQ7CWVzzr7FurYcxgK4JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.192.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:10:01:f7:c6:24:e0:66:41:eb:98:63:0f:84:a8:99:76:9a:
a9:31:be:d6:3a:a4:98:14:cf:79:66:90:02:65:13:75:f1:6b:
2a:6d:f5:46:26:56:b0:b1:92:5c:fc:72:09:e9:3a:c5:da:f1:
eb:42:89:e0:99:a1:33:0a:6b:6c:24:34:54:41:f9:9c:a9:7a:
b2:49:84:79:0b:36:db:7f:8d:6d:b6:45:c4:60:98:a8:0a:92:
62:e4:f7:6d:73:b0:20:b2:0b:65:25:fb:68:81:bb:12:c3:ac:
ba:07:16:db:03:9e:5f:60:c6:e7:05:21:40:da:f2:5c:ad:48:
65:6e:54:16:e9:e4:5f:df:7f:38:af:87:2e:d9:6f:e9:41:12:
30:68:c8:0f:95:d4:e2:ab:62:ba:b0:7f:d9:6c:76:bb:57:f2:
0c:4f:cf:83:66:78:04:7e:02:26:ab:8c:9d:32:2d:7d:d6:86:
0b:f3:f8:61:06:08:e6:b7:8d:cb:44:f3:f3:46:66:c9:d9:5f:
48:ef:52:1c:c9:8f:62:c2:34:1a:18:6e:6d:fd:d4:ad:40:28:
7f:28:56:32:ef:e2:22:bb:be:d2:c9:04:d0:90:2c:9d:4d:f5:
03:59:46:31:0a:21:85:8f:94:ad:31:5d:60:e8:6e:d8:bc:0c:
8d:a8:e3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:16 2024 by rpki-client on console-ams.rpki-client.org