Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/0Kpyq_GDsG8vSprUJVog55E7-4g.roa
File: 0Kpyq_GDsG8vSprUJVog55E7-4g.roa (raw, json)
Hash identifier: gJz6WY73rpee+xloDRBnoksZG6SpqqdWDrKJzhY3UxE=
Subject key identifier: D0:AA:72:AB:F1:83:B0:6F:2F:4A:9A:D4:25:5A:20:E7:91:3B:FB:88
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0181D40334B1F61C1CAF36B92CEB172B574B
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/0Kpyq_GDsG8vSprUJVog55E7-4g.roa
Signing time: Wed 06 Jul 2022 14:56:28 +0000
ROA not before: Wed 06 Jul 2022 14:56:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138687
IP address blocks: 141.11.100.0/24 maxlen: 24
141.11.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d4:03:34:b1:f6:1c:1c:af:36:b9:2c:eb:17:2b:57:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 6 14:56:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0aa72abf183b06f2f4a9ad4255a20e7913bfb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:76:c7:72:c3:b2:31:9a:5a:7d:85:06:59:f4:
49:b5:04:1d:c3:9b:5a:fb:80:74:7b:87:aa:ae:65:
10:63:59:ac:1f:b7:55:3b:3f:fa:a3:ca:e5:f8:68:
16:ed:7e:2a:c5:d4:51:f1:e8:5e:9c:4e:e6:99:34:
df:92:65:1f:4b:09:42:f1:27:fb:fe:52:0e:b0:d6:
b0:20:bf:04:2e:70:c7:00:84:a5:f6:6a:6c:30:d6:
c0:b2:d0:be:4d:84:77:6d:f7:61:b4:2c:9e:84:9b:
77:be:58:85:98:f7:86:fc:78:9d:04:57:c3:f6:b5:
c5:bc:cb:c1:86:f5:a9:30:cb:32:16:92:42:7c:1e:
5b:a7:cb:6a:fb:3b:c3:d9:d0:61:d8:57:42:55:52:
60:42:48:4f:28:cb:4a:e6:6c:34:ad:dc:43:81:bf:
a6:5c:c4:c9:60:ca:8c:9c:99:12:58:11:28:23:21:
39:c1:3a:ba:b1:a4:4b:68:65:ea:c1:82:e8:32:6f:
9f:a4:b9:55:9a:1e:a0:55:3d:7f:22:6d:21:bf:1b:
78:7c:c6:a7:6d:72:19:8b:02:b4:bd:61:48:f6:20:
a4:74:8a:57:54:df:06:e1:67:bc:3f:c8:1a:ef:03:
c7:04:5d:dd:32:39:d5:1c:f0:61:f3:da:0c:23:ac:
60:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AA:72:AB:F1:83:B0:6F:2F:4A:9A:D4:25:5A:20:E7:91:3B:FB:88
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/0Kpyq_GDsG8vSprUJVog55E7-4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.100.0/24
141.11.107.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:c4:37:a0:3c:25:39:10:0e:a8:f0:75:ee:99:83:3d:51:e5:
52:57:b2:0f:a5:f1:d8:d3:d7:e3:34:09:65:52:9e:ee:e4:b6:
65:d6:6a:12:33:aa:fa:41:6b:27:da:76:e5:e9:03:3b:72:46:
7f:d3:97:5f:aa:50:20:d6:19:9b:49:79:a7:82:80:94:3f:02:
4f:37:e9:55:57:1b:83:b1:a4:0b:33:bd:f8:3f:31:d2:ad:4c:
c4:4a:81:3c:32:2a:3d:82:0d:14:0e:d0:7a:e9:58:ee:17:82:
1c:81:cc:b7:35:36:ea:22:fd:13:5d:a6:77:d5:14:f9:37:c3:
26:1c:a6:3d:e7:3c:4e:30:18:7b:cd:22:9e:13:9b:c8:51:86:
59:63:b3:d1:5e:dc:cc:7e:a3:2f:d5:36:8b:7a:f0:97:2b:66:
55:03:43:20:d4:a4:b8:66:60:df:ba:35:cd:4d:e4:e0:24:92:
a6:19:0d:a3:5e:88:11:32:57:3f:87:21:2c:3d:94:ea:21:df:
86:a1:6c:56:26:d6:73:32:98:47:c5:79:a3:3e:19:74:46:50:
e6:8d:21:c5:29:f4:1a:f9:e3:ce:66:35:e3:66:04:0d:f8:4e:
78:66:57:88:73:ec:29:11:72:7c:63:8f:80:98:50:bb:30:93:
1a:25:4b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:09 2023 by rpki-client on console-ams.rpki-client.org