Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a3ef3b-57a8-42a5-b340-f93743bbb8f0/1/c6Ndvpugc8tT_3KyvtPjuqSfqfg.roa
File: c6Ndvpugc8tT_3KyvtPjuqSfqfg.roa (raw, json)
Hash identifier: z+7JF+BwjqBExPz//gUQxiVqETywRJaehgXASze4yu8=
Subject key identifier: 73:A3:5D:BE:9B:A0:73:CB:53:FF:72:B2:BE:D3:E3:BA:A4:9F:A9:F8
Certificate issuer: /CN=6ca1bf52af2c9092cae2681ac64f8ca6cdb01594
Certificate serial: 01856D787D3B7BB49CC601F7389E1EF07EE8
Authority key identifier: 6C:A1:BF:52:AF:2C:90:92:CA:E2:68:1A:C6:4F:8C:A6:CD:B0:15:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKG_Uq8skJLK4mgaxk-Mps2wFZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a3ef3b-57a8-42a5-b340-f93743bbb8f0/1/c6Ndvpugc8tT_3KyvtPjuqSfqfg.roa
Signing time: Sun 01 Jan 2023 13:14:50 +0000
ROA not before: Sun 01 Jan 2023 13:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212667
IP address blocks: 31.222.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:7d:3b:7b:b4:9c:c6:01:f7:38:9e:1e:f0:7e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca1bf52af2c9092cae2681ac64f8ca6cdb01594
Validity
Not Before: Jan 1 13:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73a35dbe9ba073cb53ff72b2bed3e3baa49fa9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c9:96:81:9a:e6:aa:d3:26:44:da:e0:30:6a:
2b:ae:8e:fb:23:be:b9:1c:cc:bb:2b:18:ea:9d:c9:
2e:72:19:d0:37:72:47:85:30:06:de:d8:9e:22:76:
e0:a6:49:31:86:bd:ae:59:1f:09:68:5f:e5:3c:ec:
d0:b8:7a:5b:e6:be:e5:d4:66:81:62:57:07:f3:4b:
25:22:b6:d9:06:33:fe:e0:ed:18:ec:77:a5:e0:39:
99:1c:15:30:75:e3:9f:c0:62:96:11:ba:92:15:bb:
b1:fb:ff:6e:d5:d8:86:95:c5:9e:8c:2f:64:db:72:
c8:aa:fb:27:c5:45:ce:25:73:5b:51:0b:10:34:e6:
06:0e:7f:d4:8b:90:63:0e:70:ff:2f:8f:22:d7:de:
c1:d0:11:b9:7b:81:2e:e7:8c:b3:5d:c9:15:4f:b6:
2d:94:3b:65:ce:e6:11:f6:d8:b3:52:fd:b9:55:2d:
70:2f:31:02:0e:52:12:8d:44:97:de:48:ee:64:d9:
05:d8:04:33:a0:92:3a:d0:8f:8a:a2:2a:ab:3a:da:
b7:24:16:47:6c:1f:6d:8e:69:35:c6:b9:5c:9c:04:
d3:71:1c:23:16:8f:ed:29:94:5d:dc:82:a0:1d:ff:
32:fa:a9:5d:ec:31:c0:69:32:b7:1e:1f:ac:b2:4a:
a0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A3:5D:BE:9B:A0:73:CB:53:FF:72:B2:BE:D3:E3:BA:A4:9F:A9:F8
X509v3 Authority Key Identifier:
keyid:6C:A1:BF:52:AF:2C:90:92:CA:E2:68:1A:C6:4F:8C:A6:CD:B0:15:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKG_Uq8skJLK4mgaxk-Mps2wFZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a3ef3b-57a8-42a5-b340-f93743bbb8f0/1/c6Ndvpugc8tT_3KyvtPjuqSfqfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a3ef3b-57a8-42a5-b340-f93743bbb8f0/1/bKG_Uq8skJLK4mgaxk-Mps2wFZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.240.0/24
Signature Algorithm: sha256WithRSAEncryption
87:c2:d1:cf:0e:9d:0c:4d:0e:29:4f:84:f1:6d:cd:bb:3d:81:
69:3f:57:7c:e3:a2:e6:ef:a2:cc:f0:fc:29:7d:99:98:f3:38:
18:06:bc:4d:62:52:8b:0f:a3:b8:33:84:21:f3:bd:69:54:c3:
ed:ab:03:81:3f:79:7e:b5:80:72:31:40:3c:df:c0:c3:f5:ae:
fb:e0:e7:05:cd:c2:11:44:7d:79:dd:fc:c8:12:d5:59:5b:8e:
27:06:0c:74:4e:03:51:52:3e:e3:0c:24:27:3d:46:cf:a2:48:
c2:95:36:9c:bb:d0:ba:bb:d4:bb:31:21:1e:b9:0e:ed:3a:0c:
56:ab:e1:d9:31:82:44:1d:d1:40:73:66:e3:82:81:0b:77:16:
a5:5b:3d:cf:ca:9f:f4:89:00:3c:33:a6:b8:33:0e:bd:c8:2f:
2b:e7:fc:0c:5f:56:71:93:97:dd:d1:70:62:46:dd:41:33:49:
81:25:f6:72:5a:72:58:77:3f:a5:01:da:b2:72:10:9b:13:10:
54:39:3e:01:b2:cf:b5:8b:b0:f3:0c:b2:a1:d5:02:63:5c:ff:
80:f2:be:08:ae:27:88:ff:09:2e:db:22:35:b6:be:8e:6d:3d:
81:e3:7c:58:16:91:43:84:49:3f:e7:1d:f3:fa:a1:ae:69:3f:
b1:4e:1d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:58 2023 by rpki-client on console.sobornost.net