Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/2O4WwVLolmOEIeKsfJbCX7vpMv4.roa
File: 2O4WwVLolmOEIeKsfJbCX7vpMv4.roa (raw, json)
Hash identifier: s9PN8W03hmuwkpMWjH0lALu5b1G7LeFXCXA1zmv33Gc=
Subject key identifier: D8:EE:16:C1:52:E8:96:63:84:21:E2:AC:7C:96:C2:5F:BB:E9:32:FE
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 018476092E7497519BE2EA45666186217F6A
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/2O4WwVLolmOEIeKsfJbCX7vpMv4.roa
Signing time: Mon 14 Nov 2022 12:07:03 +0000
ROA not before: Mon 14 Nov 2022 12:07:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212384
IP address blocks: 141.11.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:09:2e:74:97:51:9b:e2:ea:45:66:61:86:21:7f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 14 12:07:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8ee16c152e896638421e2ac7c96c25fbbe932fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:06:a4:d4:ae:bc:50:f7:f9:62:20:ec:31:4d:
ca:c6:62:41:e8:15:a3:dd:71:93:be:cf:4d:cd:46:
6e:43:14:2d:bf:32:36:6a:c9:80:b9:84:15:5b:34:
c0:f2:7d:7d:86:ab:fd:72:84:dd:90:5f:98:fd:c5:
91:87:22:d1:f6:5e:6f:c4:30:fb:53:4d:37:03:0d:
8a:e4:1b:32:75:b6:40:80:a8:d2:85:68:d9:10:49:
0a:cd:a0:79:37:e5:06:bc:f9:28:1e:99:24:f8:be:
fd:fb:9a:fa:a3:2a:b9:ff:65:7f:41:be:81:36:fe:
f8:37:97:4b:39:33:d2:4f:06:ed:f8:93:37:c5:57:
16:f2:01:43:36:65:68:ea:07:ab:db:1f:ba:7f:c9:
3c:d5:5d:6f:74:3b:fa:fe:1f:2a:51:85:3a:ca:d7:
93:0c:44:e1:92:91:d1:23:10:ea:f2:85:58:56:aa:
16:0e:38:41:fc:81:59:81:da:52:f2:c1:a3:4b:74:
ce:ac:2e:cd:f7:99:7e:0b:b1:de:8a:5f:8b:02:ab:
32:65:f2:59:74:97:af:c5:c6:e0:66:2b:41:9d:21:
42:2e:c8:4d:b0:0d:72:58:42:4a:4e:b6:53:b8:61:
35:7e:aa:8b:18:30:1f:23:34:9c:2b:7f:ef:9f:62:
a6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EE:16:C1:52:E8:96:63:84:21:E2:AC:7C:96:C2:5F:BB:E9:32:FE
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/2O4WwVLolmOEIeKsfJbCX7vpMv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.121.0/24
Signature Algorithm: sha256WithRSAEncryption
64:0f:1d:60:6d:6d:54:b5:4a:ab:f8:a5:9e:b2:04:a7:b7:8b:
bc:27:73:1e:a9:fd:e9:44:ce:25:6a:d4:fa:8c:83:b9:6e:f5:
3c:91:53:3f:70:e3:f5:88:51:3e:37:fd:a5:f4:3a:3f:ef:28:
44:18:bf:b4:88:4a:c9:a4:ea:5e:5f:d7:46:e0:01:24:a3:38:
a7:03:88:01:de:0c:a9:a0:0e:e0:a3:65:34:46:05:0d:de:53:
a9:0c:1a:ab:09:f5:36:c9:06:a9:43:3e:ab:cf:00:16:f8:1c:
51:37:d0:ca:9e:f2:5b:b1:95:5d:a2:e5:32:00:d7:9a:9a:f1:
18:24:11:de:a0:f1:ac:57:74:4a:38:13:9b:a3:00:c1:28:c6:
10:99:54:8b:cc:13:b0:e0:35:f6:63:5f:36:ce:c4:8b:51:fb:
b6:f9:95:f4:8c:96:f4:a4:61:73:e0:1d:b5:c3:70:c0:a4:69:
b6:50:1e:d7:32:4e:91:05:22:4f:5e:91:08:47:95:b1:a8:b9:
19:42:1e:19:aa:cd:ba:b5:98:4c:ed:d5:7f:17:37:b9:c9:fc:
d9:2d:c2:1c:6c:bf:30:24:e9:9d:08:d3:b6:53:37:e8:b3:f5:
d7:2e:ca:57:38:58:51:39:6f:77:bd:b2:7c:95:60:5a:b4:93:
c1:8e:f7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:14 2023 by rpki-client on console-fra.rpki-client.org