Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/8ba8f4-5c46-4648-a0c9-1d8f37fe4739/1/a3aG5WSdlWbpgZzxcMgTE5yF1ew.roa
File: a3aG5WSdlWbpgZzxcMgTE5yF1ew.roa (raw, json)
Hash identifier: Pn3tihdzwTpepX7hcbjUZB6KNBvbZzp0YgSKwdjT6QE=
Subject key identifier: 6B:76:86:E5:64:9D:95:66:E9:81:9C:F1:70:C8:13:13:9C:85:D5:EC
Certificate issuer: /CN=31c4aa21f29036d202eece103154181712830636
Certificate serial: 14A251C0
Authority key identifier: 31:C4:AA:21:F2:90:36:D2:02:EE:CE:10:31:54:18:17:12:83:06:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/McSqIfKQNtIC7s4QMVQYFxKDBjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/8ba8f4-5c46-4648-a0c9-1d8f37fe4739/1/a3aG5WSdlWbpgZzxcMgTE5yF1ew.roa
Signing time: Sat 01 Jan 2022 15:55:56 +0000
ROA not before: Sat 01 Jan 2022 15:55:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31469
IP address blocks: 195.128.248.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346182080 (0x14a251c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c4aa21f29036d202eece103154181712830636
Validity
Not Before: Jan 1 15:55:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b7686e5649d9566e9819cf170c813139c85d5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f9:a2:77:9d:83:92:0f:d6:91:10:54:bf:11:
dd:7e:2d:06:7f:9c:41:3e:1f:d3:9a:5f:0d:59:17:
ec:d6:08:fa:d0:a3:fa:bf:16:2d:8c:15:5c:20:b4:
1f:1c:13:50:6b:62:eb:51:16:d8:df:86:af:65:1e:
b6:cb:e7:ab:5c:90:0a:5b:61:30:f5:d4:82:40:8e:
2c:e0:86:5b:03:f6:b9:88:fa:6a:9c:70:78:e1:4c:
8e:a6:a4:d3:25:dc:9b:6b:f0:cc:ad:3d:b8:55:84:
b0:34:cd:9b:b3:cd:6f:f9:00:72:7d:5f:3b:2c:e2:
8e:bd:28:38:a9:60:80:b1:7b:23:8f:1e:5a:b3:c2:
08:84:ab:a9:06:3e:49:65:ea:4d:ac:81:a7:69:a9:
b9:1c:b6:03:4a:d9:0a:a1:c3:6c:59:01:12:64:bc:
cd:52:33:7e:7e:d9:e7:97:bb:3d:e8:9b:ea:bb:b0:
e9:dc:1b:9a:62:28:b0:02:a7:02:00:f3:89:64:24:
84:1d:5e:f8:f2:81:53:1e:60:c3:f6:f2:74:58:7d:
74:23:2f:f6:09:cb:7b:ed:b0:6e:ef:9f:77:e0:b3:
a1:89:76:86:03:26:00:ac:89:1e:2d:0b:ed:a2:d0:
24:a9:94:e2:0d:96:42:fe:03:5c:f7:94:57:ce:77:
ce:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:76:86:E5:64:9D:95:66:E9:81:9C:F1:70:C8:13:13:9C:85:D5:EC
X509v3 Authority Key Identifier:
keyid:31:C4:AA:21:F2:90:36:D2:02:EE:CE:10:31:54:18:17:12:83:06:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McSqIfKQNtIC7s4QMVQYFxKDBjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/8ba8f4-5c46-4648-a0c9-1d8f37fe4739/1/a3aG5WSdlWbpgZzxcMgTE5yF1ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/8ba8f4-5c46-4648-a0c9-1d8f37fe4739/1/McSqIfKQNtIC7s4QMVQYFxKDBjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.248.0/23
Signature Algorithm: sha256WithRSAEncryption
02:26:da:b5:9b:eb:37:6b:47:d3:d2:73:21:da:46:14:5c:32:
da:30:09:73:08:3e:5f:bb:78:05:89:d9:16:b5:e6:65:15:79:
2e:7c:8f:ed:7b:97:c8:6e:51:e0:8b:f6:37:11:d6:4e:0f:ed:
01:a6:0e:19:d3:9d:e4:df:51:56:d3:62:31:21:7b:ad:69:e8:
2c:67:08:26:4b:f2:68:92:25:36:7d:38:a7:3d:e2:e8:e2:ab:
25:30:d9:a7:6a:2c:39:22:79:95:60:ba:20:e3:8e:24:c7:cd:
b4:7a:e7:f7:91:00:81:14:0d:fa:6c:23:92:be:b0:ca:bd:ca:
f4:18:16:02:9b:5f:47:2f:29:47:ce:bb:25:6d:d8:08:64:13:
42:81:85:c4:5a:c5:65:83:36:ae:0a:2c:c2:e7:10:68:d9:3d:
15:3f:7e:91:a2:48:7a:d7:03:51:0b:9b:2d:80:66:61:84:ff:
a8:79:43:11:5b:6a:92:2f:7c:40:cb:f1:1a:17:54:b9:c8:a2:
52:d1:3d:6d:24:f3:76:b0:8f:9b:20:a4:b2:20:b5:cd:44:02:
ad:fd:be:38:f1:56:7e:bc:16:ff:8b:7b:9e:30:8f:b7:31:fd:
84:2e:63:b6:73:11:18:8d:20:2b:fd:ce:09:ef:c5:e0:74:22:
dd:3c:2d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:39 2024 by rpki-client on console-fra.rpki-client.org