Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/dcdb34-4e2f-4e82-8535-16813a96cc88/1/6z3uz35S8NOvEq5J3_guFx1VqVQ.roa
File: 6z3uz35S8NOvEq5J3_guFx1VqVQ.roa (raw, json)
Hash identifier: T+Ex1syLI2Re3/G0ucc5ANDhfBQY6/Va0woHaGKOBF8=
Subject key identifier: EB:3D:EE:CF:7E:52:F0:D3:AF:12:AE:49:DF:F8:2E:17:1D:55:A9:54
Certificate issuer: /CN=9b6866d9af8f43bb0e9e1fc9c42d13b919e2eec7
Certificate serial: 0763AB54
Authority key identifier: 9B:68:66:D9:AF:8F:43:BB:0E:9E:1F:C9:C4:2D:13:B9:19:E2:EE:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2hm2a-PQ7sOnh_JxC0TuRni7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/dcdb34-4e2f-4e82-8535-16813a96cc88/1/6z3uz35S8NOvEq5J3_guFx1VqVQ.roa
Signing time: Sat 01 Jan 2022 10:01:23 +0000
ROA not before: Sat 01 Jan 2022 10:01:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42695
IP address blocks: 31.12.85.0/24 maxlen: 24
31.12.84.0/24 maxlen: 24
31.12.87.0/24 maxlen: 24
31.12.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123972436 (0x763ab54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b6866d9af8f43bb0e9e1fc9c42d13b919e2eec7
Validity
Not Before: Jan 1 10:01:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb3deecf7e52f0d3af12ae49dff82e171d55a954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:00:72:8d:62:d8:06:24:69:ee:65:3a:d2:
0b:f4:6a:21:d2:ec:18:d8:14:2f:ed:dc:60:91:c8:
52:51:da:8c:91:3e:a7:2d:1b:9f:41:91:5b:f7:7f:
a3:21:2c:67:bf:8b:b1:49:c1:2c:02:58:bf:e9:fa:
80:4b:52:58:35:6f:a0:dc:95:b3:a0:0b:e3:72:aa:
c0:4a:42:43:6a:6e:67:70:91:5a:32:b2:c2:8f:68:
77:40:b2:d4:00:1c:60:e3:18:2d:f5:c0:6e:13:df:
22:97:f2:4e:6f:7c:38:42:8f:bb:e0:da:f8:17:f6:
25:9b:e9:f4:5b:e8:4b:1e:13:12:b6:fd:13:ed:66:
e5:bd:cf:b9:cb:48:6a:a8:0d:77:22:af:46:57:74:
fd:07:11:85:b7:ae:8d:19:52:23:ab:d6:65:42:58:
98:13:90:11:8a:44:0e:c0:c8:98:ed:2e:da:93:49:
77:9e:aa:91:91:16:63:32:9f:91:53:28:9e:80:5d:
b6:14:b1:aa:39:30:0c:98:4b:70:80:f1:18:67:2f:
fa:cd:ec:db:2f:d3:2e:a9:eb:6c:08:4a:0c:ba:cc:
1b:e6:38:53:52:cf:46:18:de:9f:3a:9c:5f:5c:d4:
19:8a:62:30:7e:6b:20:14:f7:64:00:a9:bf:03:bb:
0f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3D:EE:CF:7E:52:F0:D3:AF:12:AE:49:DF:F8:2E:17:1D:55:A9:54
X509v3 Authority Key Identifier:
keyid:9B:68:66:D9:AF:8F:43:BB:0E:9E:1F:C9:C4:2D:13:B9:19:E2:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2hm2a-PQ7sOnh_JxC0TuRni7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dcdb34-4e2f-4e82-8535-16813a96cc88/1/6z3uz35S8NOvEq5J3_guFx1VqVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dcdb34-4e2f-4e82-8535-16813a96cc88/1/m2hm2a-PQ7sOnh_JxC0TuRni7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.12.84.0/22
Signature Algorithm: sha256WithRSAEncryption
21:da:4f:3e:d1:02:d2:1d:99:04:14:5a:61:02:f9:b4:e2:b3:
99:46:dc:5f:d1:a9:17:84:94:94:e0:06:7e:04:ee:81:f9:88:
14:57:a3:82:33:27:32:5b:12:95:c1:9c:b1:66:4c:38:48:49:
2c:44:72:05:93:79:e9:27:8a:d5:72:58:28:4a:04:5e:9a:32:
3a:20:b3:ac:6c:d3:9f:3a:fd:82:28:55:35:96:9d:90:db:6f:
ce:81:5f:8a:9e:5c:bd:fb:85:ff:d8:4c:57:83:5b:93:c9:ad:
8b:b2:59:09:af:a8:ab:97:07:7b:30:1f:80:6d:04:37:9b:8f:
70:f6:53:99:ea:7c:32:4c:e4:e4:9f:bf:5a:da:49:ca:22:31:
90:b0:b2:1d:3f:7e:4f:44:68:1d:8e:06:dc:8a:91:da:d1:80:
08:cd:62:47:b6:37:bc:2b:05:6a:4d:49:86:f7:30:58:a0:39:
5c:c7:87:1c:ea:69:38:f0:ef:5c:e3:04:9d:7e:e6:02:c8:6c:
d0:3e:ee:63:e1:0e:ec:df:78:b4:4a:0c:7f:51:e6:5c:a0:65:
ae:59:28:ee:32:66:26:ad:35:ff:94:f8:f0:4d:1f:56:7e:0b:
23:db:98:cf:07:bb:a7:87:fd:a1:fa:8d:97:3a:cf:4e:b5:a1:
7e:37:bc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:58 2023 by rpki-client on console.sobornost.net