Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/2AkZY8AGK4ADmbp9mgyQhL9NJ5Y.roa
File: 2AkZY8AGK4ADmbp9mgyQhL9NJ5Y.roa (raw, json)
Hash identifier: u0M81UYLkP4aeWgiId3f8a2h66LaKB6i8EozvnfgKlg=
Subject key identifier: D8:09:19:63:C0:06:2B:80:03:99:BA:7D:9A:0C:90:84:BF:4D:27:96
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 018201D62022B059DD14D18FF04210A5F05B
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/2AkZY8AGK4ADmbp9mgyQhL9NJ5Y.roa
Signing time: Fri 15 Jul 2022 12:29:46 +0000
ROA not before: Fri 15 Jul 2022 12:29:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 141.11.103.0/24 maxlen: 24
141.11.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:01:d6:20:22:b0:59:dd:14:d1:8f:f0:42:10:a5:f0:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 15 12:29:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8091963c0062b800399ba7d9a0c9084bf4d2796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9e:e7:75:f4:ac:81:ad:60:42:db:f5:7d:3b:
c7:0b:02:6e:42:9a:e9:78:b5:c3:73:19:6e:d9:3e:
f8:4a:22:cb:f5:92:da:af:7e:07:4a:8d:85:4b:2c:
b5:b5:05:67:9d:93:7c:9b:0a:2b:bb:05:8b:57:f1:
74:46:45:05:68:5c:15:96:de:d4:a2:b3:f2:0b:9f:
5b:0a:ec:b8:e3:f1:f2:03:1a:ab:2a:8d:52:54:d7:
31:54:0b:5a:92:92:19:6c:a0:43:4d:d7:9e:16:89:
60:45:6c:ee:c7:18:b3:07:fb:07:81:41:f8:a3:8f:
dc:6c:0b:f6:02:11:d4:fd:6b:6b:d4:69:d4:8d:0d:
27:93:fd:bd:b6:3a:62:9f:57:01:d1:ed:b6:fc:c5:
fb:15:43:5e:83:f3:da:ca:84:55:48:a7:7a:b6:6e:
74:68:f1:d7:ca:cf:05:cf:23:75:f4:73:e2:ba:cf:
63:06:b0:f5:83:f3:ca:b2:8c:5a:29:19:d0:37:3a:
1c:84:55:54:ea:77:2b:41:8d:18:de:56:ee:24:01:
20:35:00:79:46:81:13:80:a1:1f:9c:28:c3:88:4b:
84:86:fb:10:18:c3:de:e2:09:f3:19:0c:33:d4:72:
e9:44:6e:cd:80:e0:11:ad:15:d5:a9:a4:83:2b:22:
ec:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:09:19:63:C0:06:2B:80:03:99:BA:7D:9A:0C:90:84:BF:4D:27:96
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/2AkZY8AGK4ADmbp9mgyQhL9NJ5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.34.0/24
141.11.103.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:b3:c3:10:d7:8b:d9:ef:19:df:26:c0:71:4a:e0:01:2d:0f:
a4:42:97:6b:e7:d4:a3:04:e1:20:f5:0e:49:70:a0:1d:25:f3:
53:d0:ae:5a:c2:9e:84:dd:7b:6a:b9:cf:b6:34:0b:cd:cb:33:
87:e4:e8:90:b4:ef:dc:7e:dd:49:db:cb:6f:6e:b4:ba:f3:3e:
dd:c3:d9:1e:93:59:db:e6:5e:99:0f:f4:c6:0b:38:64:bd:5b:
1c:50:68:17:8d:38:ae:85:c3:77:db:8a:91:4c:3a:21:b0:5e:
30:27:72:b6:d7:0f:74:bb:6d:00:9a:10:46:c0:93:05:d3:b4:
ef:fc:f4:9b:01:16:25:b8:67:28:9d:a9:d7:93:a0:17:1b:86:
25:3e:5a:f8:97:52:90:06:82:7a:a3:25:a8:21:87:d1:7c:48:
09:82:21:62:47:ac:4e:63:c7:d5:4b:5e:30:87:35:1d:0c:03:
95:7a:2a:bb:1a:f0:44:23:a6:18:d9:66:bd:5f:19:52:49:3d:
d0:3e:00:66:96:c7:e9:50:c0:5e:d8:1a:2b:98:3f:4e:46:fc:
61:dc:c5:38:09:bb:fd:7f:b1:2b:95:35:b8:81:18:53:26:3f:
e4:16:3d:e9:82:f9:b0:fc:e0:08:be:24:87:0d:e8:a8:0c:12:
bf:9e:34:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:14 2023 by rpki-client on console-fra.rpki-client.org