Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b8932a-0879-4751-988c-6ee3f5007eab/1/AJIVW_otPAsL61SKmR82asMFrCo.roa
File: AJIVW_otPAsL61SKmR82asMFrCo.roa (raw, json)
Hash identifier: wdh931xmm3+tGq671AkQ9KHSGx84ND+TNDrDNwsddSY=
Subject key identifier: 00:92:15:5B:FA:2D:3C:0B:0B:EB:54:8A:99:1F:36:6A:C3:05:AC:2A
Certificate issuer: /CN=9eb5e717cef9f6644cd8849b8a18d41dc74f408a
Certificate serial: 35230729
Authority key identifier: 9E:B5:E7:17:CE:F9:F6:64:4C:D8:84:9B:8A:18:D4:1D:C7:4F:40:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrXnF8759mRM2ISbihjUHcdPQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b8932a-0879-4751-988c-6ee3f5007eab/1/AJIVW_otPAsL61SKmR82asMFrCo.roa
Signing time: Sat 01 Jan 2022 01:57:09 +0000
ROA not before: Sat 01 Jan 2022 01:57:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199575
IP address blocks: 31.172.163.0/24 maxlen: 24
212.18.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 891488041 (0x35230729)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb5e717cef9f6644cd8849b8a18d41dc74f408a
Validity
Not Before: Jan 1 01:57:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0092155bfa2d3c0b0beb548a991f366ac305ac2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e4:fa:be:54:dd:8f:55:15:f8:00:eb:fa:f6:
d5:e8:83:b6:24:7a:fe:fa:16:2f:3d:93:83:42:9b:
61:bf:fb:54:cf:67:04:59:6e:7a:ed:fa:b1:92:b9:
87:89:5c:95:24:65:b5:50:3e:bf:96:5a:62:2c:b9:
c8:a2:c1:7a:b3:53:e2:f3:9c:74:40:b9:37:03:44:
cb:f0:63:85:09:c6:94:2a:bd:12:17:31:a3:4d:8c:
ac:d3:7e:43:73:c6:5b:2d:3c:c5:11:8d:ea:d5:0a:
f3:ea:39:a9:7c:40:18:fd:9b:1d:49:d2:71:a4:96:
01:fe:7d:51:25:e0:c8:3d:aa:3a:fb:ff:cb:1b:2d:
7e:33:c4:da:94:86:22:15:3b:95:38:c7:03:73:e1:
31:dc:9a:ef:16:d4:56:26:a9:ea:a7:09:9a:08:23:
a3:23:37:9c:ef:7c:e3:ba:4a:a6:6f:a3:9e:c8:dd:
5b:93:cb:fb:96:0e:63:14:0e:b4:1f:a6:2e:6c:86:
20:ac:34:90:f8:54:48:da:51:84:ed:c3:a3:05:ca:
ad:de:1c:9c:12:e1:36:c6:35:9c:24:82:e0:b6:8a:
ec:00:26:62:93:9f:fa:76:ff:8e:e1:23:7d:b8:cb:
20:80:ab:9e:c2:07:2c:b0:81:cd:85:db:6d:71:6a:
26:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:92:15:5B:FA:2D:3C:0B:0B:EB:54:8A:99:1F:36:6A:C3:05:AC:2A
X509v3 Authority Key Identifier:
keyid:9E:B5:E7:17:CE:F9:F6:64:4C:D8:84:9B:8A:18:D4:1D:C7:4F:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrXnF8759mRM2ISbihjUHcdPQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b8932a-0879-4751-988c-6ee3f5007eab/1/AJIVW_otPAsL61SKmR82asMFrCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b8932a-0879-4751-988c-6ee3f5007eab/1/nrXnF8759mRM2ISbihjUHcdPQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.163.0/24
212.18.246.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:bb:c0:68:c5:2b:83:7e:3b:bb:cb:01:b9:b1:3c:8e:d6:36:
f9:92:65:a3:1f:52:bf:81:67:47:95:06:00:a6:0b:0b:ca:22:
49:c0:d5:cd:46:06:7e:d7:b8:e3:d5:60:bd:36:ac:95:42:52:
27:03:f3:ae:dd:b1:b5:3e:f9:32:94:de:90:3a:fd:19:76:d0:
e7:d1:98:da:f4:59:f7:83:3a:62:b5:36:ef:c1:0f:10:a5:ff:
6a:a3:8e:8a:39:a2:41:d8:97:b8:ef:66:fc:b4:e7:e1:55:3b:
96:b0:95:3b:10:97:27:65:89:a0:57:47:eb:fd:b0:3c:98:26:
c6:6e:93:92:98:e5:9b:22:be:4c:03:c0:32:42:f5:5c:e6:7a:
37:90:09:c0:13:0e:49:66:6c:2b:35:24:85:32:8f:38:d3:bb:
a3:fa:c6:65:e2:0d:4a:a0:25:8e:51:9d:28:d3:d2:ce:91:57:
27:16:30:d4:a6:62:db:a5:d4:d5:77:5d:6f:51:ae:05:e7:dd:
33:ac:ca:3e:f1:8d:9d:a3:98:64:a5:3d:ae:e0:94:f5:33:97:
ef:23:f5:8d:90:60:e1:bc:ec:44:58:8b:8c:71:f9:69:4c:b1:
84:1c:36:33:e3:0a:83:bb:e1:e7:e1:57:c8:56:d5:23:31:5e:
32:d3:1f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:38 2024 by rpki-client on console-ams.rpki-client.org