Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f7c4f1-341a-445e-8e33-50cb88276ae6/1/xjl9LcMPAWtCDR4dQVLA_ipSAVY.roa
File: xjl9LcMPAWtCDR4dQVLA_ipSAVY.roa (raw, json)
Hash identifier: 5CJS0EsYIkF5q0IWqGLBoFkbsUSPtzbPH3JaFhuE8T4=
Subject key identifier: C6:39:7D:2D:C3:0F:01:6B:42:0D:1E:1D:41:52:C0:FE:2A:52:01:56
Certificate issuer: /CN=23daf57a212bb7f320a2246f97959575d0e68ce3
Certificate serial: D34293
Authority key identifier: 23:DA:F5:7A:21:2B:B7:F3:20:A2:24:6F:97:95:95:75:D0:E6:8C:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9r1eiErt_MgoiRvl5WVddDmjOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f7c4f1-341a-445e-8e33-50cb88276ae6/1/xjl9LcMPAWtCDR4dQVLA_ipSAVY.roa
Signing time: Fri 28 Jan 2022 14:22:37 +0000
ROA not before: Fri 28 Jan 2022 14:22:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 176.116.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13845139 (0xd34293)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23daf57a212bb7f320a2246f97959575d0e68ce3
Validity
Not Before: Jan 28 14:22:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6397d2dc30f016b420d1e1d4152c0fe2a520156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e3:e6:d2:7f:2f:ff:01:c8:71:3a:e0:b2:1a:
7b:76:c1:fd:ab:6c:d7:90:2e:73:9a:13:a1:36:6b:
df:4e:66:8d:f9:eb:9e:49:b4:94:76:4d:11:fb:88:
f3:a1:ad:15:d2:ba:69:1b:7f:81:79:0d:72:c2:13:
81:52:f9:2f:2a:eb:1d:49:9e:6f:48:25:2e:cc:49:
c3:6d:5b:45:7e:f4:0e:b5:d8:de:fc:13:5c:a8:51:
a7:c4:8b:df:aa:1d:44:73:57:55:e0:2a:07:58:f6:
db:73:d5:f3:59:9e:6f:6d:d9:92:52:1f:4c:2e:d0:
58:c5:44:30:7c:e0:b1:d3:dd:24:2b:43:94:4a:83:
35:95:5a:c5:8a:3d:35:d5:6a:00:b6:58:e8:f3:f7:
c9:b1:d6:0b:db:30:23:bf:12:f2:a8:6f:ec:79:b9:
36:e5:a0:e5:86:f4:9b:e6:d7:22:62:fc:46:05:16:
0e:43:4f:e9:ab:da:80:2a:06:e8:90:67:c5:3f:a2:
e6:c7:2d:c2:a8:a5:bf:90:4b:e9:85:c6:d3:be:be:
e9:f7:51:7a:06:0d:6f:5f:61:24:23:db:68:b1:3e:
46:4d:1c:31:8d:de:07:1b:ff:ea:f6:11:f6:09:f4:
be:49:e7:bc:8c:ba:16:c0:03:6b:58:8e:66:22:e5:
6a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:39:7D:2D:C3:0F:01:6B:42:0D:1E:1D:41:52:C0:FE:2A:52:01:56
X509v3 Authority Key Identifier:
keyid:23:DA:F5:7A:21:2B:B7:F3:20:A2:24:6F:97:95:95:75:D0:E6:8C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9r1eiErt_MgoiRvl5WVddDmjOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f7c4f1-341a-445e-8e33-50cb88276ae6/1/xjl9LcMPAWtCDR4dQVLA_ipSAVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f7c4f1-341a-445e-8e33-50cb88276ae6/1/I9r1eiErt_MgoiRvl5WVddDmjOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.31.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:b4:c2:9f:c5:20:10:7c:7e:a9:c0:12:11:e8:65:bd:d8:e6:
a3:bc:d8:68:9f:de:e5:e7:58:89:4a:72:4f:40:ea:83:b3:78:
4a:9e:b1:3c:91:b2:c4:cb:66:82:28:f2:fd:6b:13:42:ff:21:
d3:3f:f3:5c:b9:be:19:13:2d:c1:01:16:9c:75:d9:8f:e9:32:
92:51:6c:46:3c:be:06:0c:8b:17:24:02:34:2f:51:d3:e0:f2:
96:be:85:e8:b2:6a:da:a5:c8:c9:0f:29:1e:ca:2e:32:5f:f6:
32:5d:7d:af:db:88:b3:e1:2b:3f:c7:c6:6f:73:a9:64:c4:89:
19:e4:26:54:6b:f0:be:97:1a:93:07:91:2e:5f:67:17:d9:5c:
03:63:33:10:7a:65:6c:85:8f:83:f8:42:c4:b5:f5:07:de:02:
ac:f6:d8:ca:56:c1:97:67:59:70:ec:f5:39:d0:d8:fa:8c:fa:
f8:83:21:aa:ab:98:98:05:1b:5c:11:f1:59:e6:c2:25:3f:10:
92:5f:57:05:01:16:f6:8c:1a:69:15:ad:e7:75:9a:1d:b0:89:
c1:00:eb:7a:9d:83:16:4b:d1:23:dc:0d:68:68:0f:5c:fe:86:
f6:e0:2f:b7:fe:90:4d:d0:77:02:78:71:fb:a4:5b:bf:cd:23:
90:b0:27:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:31 2024 by rpki-client on console-ams.rpki-client.org