Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/vpwX6X1hkVUPbL5f1ydIgRerDhQ.roa
File: vpwX6X1hkVUPbL5f1ydIgRerDhQ.roa (raw, json)
Hash identifier: /Tu4hgsR8YyogGVyARRvmzRzjkYznKUpPWrsW5CWxv8=
Subject key identifier: BE:9C:17:E9:7D:61:91:55:0F:6C:BE:5F:D7:27:48:81:17:AB:0E:14
Certificate issuer: /CN=83306a3a8d8bcba39f92ef1ac49a559b0bce8a58
Certificate serial: 018571B9FC614B8EC116CA4896E4E48E9214
Authority key identifier: 83:30:6A:3A:8D:8B:CB:A3:9F:92:EF:1A:C4:9A:55:9B:0B:CE:8A:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzBqOo2Ly6Ofku8axJpVmwvOilg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/vpwX6X1hkVUPbL5f1ydIgRerDhQ.roa
Signing time: Mon 02 Jan 2023 09:04:52 +0000
ROA not before: Mon 02 Jan 2023 09:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 31.41.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b9:fc:61:4b:8e:c1:16:ca:48:96:e4:e4:8e:92:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83306a3a8d8bcba39f92ef1ac49a559b0bce8a58
Validity
Not Before: Jan 2 09:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be9c17e97d6191550f6cbe5fd727488117ab0e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c1:27:58:db:f6:d7:15:69:a6:4a:49:bb:60:
be:d8:3f:7a:a1:41:89:1c:59:22:9a:d9:ee:33:c4:
18:de:8f:d7:46:04:61:8d:ca:1b:66:0a:a1:69:53:
10:47:0d:32:fa:78:34:d4:0d:ab:ab:43:56:be:96:
be:8d:68:05:07:89:bd:c5:50:b7:9f:67:f0:ed:1c:
9d:7a:40:56:48:4e:d7:35:34:e7:94:f8:da:fb:a1:
a3:e0:69:b9:81:4a:bf:cd:1d:10:b5:48:08:7e:7f:
1b:a5:6d:f9:cf:1e:42:dd:63:62:2c:2d:71:97:b2:
b4:1c:d6:ae:61:58:87:b6:97:d3:20:a4:f6:49:16:
03:5d:72:7e:95:b1:3c:8c:be:9c:36:83:c4:22:dd:
53:cf:4e:b0:e8:99:07:b6:63:d0:c1:f8:f4:46:6d:
1f:bf:3c:a7:cd:be:8c:a7:ac:b2:78:f7:f5:13:b9:
ab:2e:4e:16:aa:4c:e9:31:b4:f0:3e:cc:06:75:7c:
af:af:48:32:ef:c9:89:fe:ff:cb:e5:86:c1:5c:8a:
e5:01:92:ab:cc:c2:be:70:83:5b:57:b8:42:7d:82:
2d:be:a8:82:d8:21:00:19:5c:83:4d:5b:4f:5d:65:
4a:7c:83:59:c7:bd:87:df:8e:65:50:28:04:7c:76:
f7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9C:17:E9:7D:61:91:55:0F:6C:BE:5F:D7:27:48:81:17:AB:0E:14
X509v3 Authority Key Identifier:
keyid:83:30:6A:3A:8D:8B:CB:A3:9F:92:EF:1A:C4:9A:55:9B:0B:CE:8A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzBqOo2Ly6Ofku8axJpVmwvOilg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/vpwX6X1hkVUPbL5f1ydIgRerDhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/gzBqOo2Ly6Ofku8axJpVmwvOilg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.248.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:d2:87:df:eb:51:5d:27:74:1a:e2:a5:d7:d2:91:78:8d:34:
63:b9:02:7e:12:a8:38:96:8b:74:77:48:12:b2:06:c0:14:62:
41:b7:87:0e:3a:38:dd:33:8f:3d:ce:7f:80:ad:80:11:9c:02:
4b:73:3f:9c:7c:23:0c:62:23:3f:db:f3:68:f6:a3:dc:f7:48:
d2:17:e5:b1:6e:07:13:8b:d4:26:6d:ba:00:69:7d:4b:f4:f4:
52:e1:3c:08:4d:7e:5a:10:1b:42:26:17:e7:b4:c9:c9:bd:ea:
6b:83:dd:e2:63:d7:9d:35:9d:58:77:a0:c8:20:3c:41:6b:7d:
27:b1:31:bd:a1:75:88:52:bf:c7:92:a0:8a:fe:58:26:c4:a8:
02:2d:33:93:d0:7f:34:68:46:5a:4d:be:fe:7e:b6:94:74:7a:
4e:9a:87:e1:e1:0f:d7:0f:dd:32:a3:b3:c3:b7:b3:9c:05:81:
84:c9:70:80:9c:8c:a4:ba:db:09:d4:95:1e:ae:ed:31:c7:b3:
79:d3:54:24:3c:82:83:ab:61:cf:46:dc:ea:cf:5d:90:b9:28:
57:f7:0f:2c:e2:2f:45:e9:76:a0:80:3d:29:f1:7a:b8:59:45:
a1:f0:15:af:0e:f4:ce:1d:f8:5e:d0:a4:dd:a1:87:97:26:5b:
c3:eb:f6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:29 2023 by rpki-client on console.sobornost.net