Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/hOpqT-yzaUBFjd-n8bBekHKXnYI.roa
File: hOpqT-yzaUBFjd-n8bBekHKXnYI.roa (raw, json)
Hash identifier: FiWVWJ5ZdhPPwEHkn5fA2XmgDEhd3peFD6wV5b9uw+s=
Subject key identifier: 84:EA:6A:4F:EC:B3:69:40:45:8D:DF:A7:F1:B0:5E:90:72:97:9D:82
Certificate issuer: /CN=91bbc51e4541cfbb504ff5ef2a396df6a54b5e6d
Certificate serial: 020DC5B8
Authority key identifier: 91:BB:C5:1E:45:41:CF:BB:50:4F:F5:EF:2A:39:6D:F6:A5:4B:5E:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbvFHkVBz7tQT_XvKjlt9qVLXm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/hOpqT-yzaUBFjd-n8bBekHKXnYI.roa
Signing time: Sat 01 Jan 2022 01:01:30 +0000
ROA not before: Sat 01 Jan 2022 01:01:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43160
IP address blocks: 31.222.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34457016 (0x20dc5b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91bbc51e4541cfbb504ff5ef2a396df6a54b5e6d
Validity
Not Before: Jan 1 01:01:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84ea6a4fecb36940458ddfa7f1b05e9072979d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:31:b7:62:3c:82:fc:9e:70:fd:d3:a9:67:
c6:d8:3e:6e:09:9b:25:f3:d7:80:aa:13:e1:10:c9:
43:05:f3:09:f0:f1:8e:a0:e8:ab:37:34:b8:37:71:
61:5a:a9:c1:d1:13:9c:63:d2:bf:35:67:ee:fe:34:
3a:b8:1f:1e:0f:b1:6b:2c:dd:c6:34:69:0f:b9:30:
43:5b:e3:e2:72:17:cc:09:64:5d:f9:b6:0f:24:f2:
0a:6d:08:07:99:08:ae:47:59:ac:e4:88:e0:02:8d:
b6:e7:c5:1c:2b:3b:27:4d:6a:e9:1f:df:6a:75:da:
eb:ea:6a:10:4d:88:bd:09:a7:a2:f0:8f:c2:a6:ee:
f9:8a:d5:27:db:e9:a2:46:72:3d:f7:f0:f2:9e:81:
5d:53:e6:9e:b6:37:b2:71:16:60:3d:b9:4d:02:7b:
2b:0b:cb:a9:d1:aa:b1:bb:38:fa:dc:5d:ca:69:5a:
3e:6d:b7:f4:f6:06:0e:43:e3:9b:b5:f0:1e:b3:6f:
cd:02:ee:6e:f0:3a:b3:39:26:21:39:5b:b3:b8:9d:
d3:b9:c4:f9:5a:3e:e8:f6:57:fd:72:35:db:58:48:
3b:90:46:09:f9:9d:4b:a4:1a:68:dd:e3:46:f8:31:
14:8e:6d:57:d4:55:87:c4:0e:9d:97:be:e1:ba:6f:
e6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EA:6A:4F:EC:B3:69:40:45:8D:DF:A7:F1:B0:5E:90:72:97:9D:82
X509v3 Authority Key Identifier:
keyid:91:BB:C5:1E:45:41:CF:BB:50:4F:F5:EF:2A:39:6D:F6:A5:4B:5E:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbvFHkVBz7tQT_XvKjlt9qVLXm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/hOpqT-yzaUBFjd-n8bBekHKXnYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/kbvFHkVBz7tQT_XvKjlt9qVLXm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.123.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:9a:a4:59:bf:97:99:2a:d9:85:88:90:60:5f:3b:7e:52:b8:
12:50:86:be:6f:65:1f:1e:77:57:88:7a:90:2a:2b:7f:87:a7:
52:b2:35:95:a8:21:d4:2a:0d:96:12:7a:99:d5:2e:c5:35:f8:
c0:fe:f5:01:ea:6c:de:c3:53:44:c2:3e:a1:92:73:77:28:d6:
7f:fc:1a:b3:60:e1:d9:8d:28:b5:01:b6:36:8f:b3:2a:31:7a:
9c:55:26:a2:d9:d0:8e:d2:a1:5f:bf:67:56:23:20:2a:ce:0a:
90:6c:fb:12:05:82:01:f1:10:8a:65:37:19:b9:1a:6c:ba:79:
14:a8:ee:28:2b:a4:65:a3:ca:e0:6d:d2:fc:d2:21:4f:60:00:
99:81:33:d1:c2:c9:49:e7:50:45:a5:0b:2d:cf:7c:41:ff:19:
e3:82:ae:cd:a5:86:77:6f:b0:2c:c9:00:8d:c6:e7:3d:ea:a5:
2e:06:41:6d:61:62:28:2d:11:01:15:33:dc:d2:18:56:81:80:
0e:57:ad:08:bc:68:3c:fe:95:de:7c:1b:89:30:57:08:49:63:
5d:67:d9:90:52:1b:9b:8c:69:7c:ee:14:77:1b:43:2f:25:86:
91:1b:aa:59:ff:d1:4b:e8:2d:68:6a:41:c2:d5:0d:72:cf:25:
f2:4a:dc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:04 2023 by rpki-client on console.sobornost.net