Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/6r4PmJHCdStbyCfIZm9MONlXtkU.roa
File: 6r4PmJHCdStbyCfIZm9MONlXtkU.roa (raw, json)
Hash identifier: r8hjyhWLD1vEV8gDUkqsBhhgr8GWO2qjZAOKrM2xDW0=
Subject key identifier: EA:BE:0F:98:91:C2:75:2B:5B:C8:27:C8:66:6F:4C:38:D9:57:B6:45
Certificate issuer: /CN=83306a3a8d8bcba39f92ef1ac49a559b0bce8a58
Certificate serial: 0199CD81
Authority key identifier: 83:30:6A:3A:8D:8B:CB:A3:9F:92:EF:1A:C4:9A:55:9B:0B:CE:8A:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzBqOo2Ly6Ofku8axJpVmwvOilg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/6r4PmJHCdStbyCfIZm9MONlXtkU.roa
Signing time: Sat 05 Feb 2022 20:21:37 +0000
ROA not before: Sat 05 Feb 2022 20:21:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 31.41.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26856833 (0x199cd81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83306a3a8d8bcba39f92ef1ac49a559b0bce8a58
Validity
Not Before: Feb 5 20:21:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eabe0f9891c2752b5bc827c8666f4c38d957b645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:54:9c:f2:c6:04:d3:ad:f0:0f:d8:e7:cf:96:
07:04:1d:b8:41:44:05:20:1e:7b:b5:cb:85:f8:f2:
f0:97:51:c0:09:8b:fc:0b:60:2b:29:b6:9a:89:f6:
26:fc:17:09:37:91:fe:a9:b7:2c:19:1e:aa:0e:2a:
4f:21:85:e7:51:50:3f:5b:2e:b1:ae:a3:6b:a7:4f:
d3:f8:12:4f:28:83:80:05:76:91:09:52:d4:30:64:
c9:a1:bf:28:74:29:de:5e:7b:43:d3:97:05:03:d9:
91:27:18:e3:39:2a:91:b3:50:30:ce:2b:6e:75:dc:
3e:03:47:be:6d:b6:d3:d2:7e:84:96:3e:6a:13:ef:
b0:cb:6e:26:3f:77:7b:8a:ea:b1:cb:ae:9b:af:90:
c2:d3:e1:a7:c7:28:49:0d:0e:19:d6:d4:c4:0a:11:
d3:86:17:84:28:53:c7:f8:31:4c:f4:f6:9c:5d:cf:
4a:39:22:dc:45:85:80:31:76:d1:7e:b2:f9:2e:7c:
ac:90:83:25:0c:9f:2f:77:0a:ff:85:d5:a2:b0:14:
f7:9f:94:db:36:a2:b2:5b:2c:9b:cb:1b:b4:de:4d:
84:ab:42:45:96:91:11:be:a5:4f:30:c6:f3:67:2d:
4d:c5:86:17:93:8c:be:4b:9b:4b:97:93:80:ce:c5:
27:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BE:0F:98:91:C2:75:2B:5B:C8:27:C8:66:6F:4C:38:D9:57:B6:45
X509v3 Authority Key Identifier:
keyid:83:30:6A:3A:8D:8B:CB:A3:9F:92:EF:1A:C4:9A:55:9B:0B:CE:8A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzBqOo2Ly6Ofku8axJpVmwvOilg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/6r4PmJHCdStbyCfIZm9MONlXtkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/gzBqOo2Ly6Ofku8axJpVmwvOilg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.248.0/24
Signature Algorithm: sha256WithRSAEncryption
09:49:c6:17:40:a9:9b:53:af:f7:21:32:5f:18:60:0c:f4:f8:
e7:ca:96:da:78:30:b8:72:70:95:02:b5:69:77:d8:da:54:5e:
1a:68:bf:97:73:e3:a2:a1:90:f8:f4:d7:3e:8e:8e:65:3b:45:
4a:ae:a0:89:bd:22:79:c3:71:bd:9f:d7:11:cb:7a:1d:e2:c9:
a6:ef:04:80:9f:d0:46:a2:cb:95:30:f6:cf:52:a7:5e:b3:9f:
69:d0:51:21:44:f0:c3:db:08:9b:c4:69:86:7c:55:89:8e:34:
4e:b3:b6:13:26:cb:e6:f6:3b:97:fc:0c:ed:95:b6:2f:5b:d3:
29:5e:ea:01:02:34:57:cb:c2:c0:ac:86:90:3a:28:29:a7:c2:
17:db:7a:ae:c4:97:ab:2f:9e:9d:f3:0d:54:d5:d0:ff:60:9b:
ea:ed:18:9b:4c:32:09:62:f2:c8:2c:3f:d4:12:aa:3e:72:c9:
be:37:0c:a7:38:23:a3:74:83:51:56:e8:55:b0:85:73:b6:81:
7c:25:0e:07:7f:21:a9:83:a9:8a:48:9f:c1:0b:74:40:38:1b:
c2:71:5f:ab:8a:60:63:55:ba:67:16:b8:41:3c:19:41:11:79:
86:30:23:2f:66:c2:bb:d6:46:a9:c2:eb:33:a8:da:2a:6d:7f:
85:28:d4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:29 2023 by rpki-client on console.sobornost.net