Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/2buZvM64mcw8ewc8_o8aLxjBf3c.roa
File: 2buZvM64mcw8ewc8_o8aLxjBf3c.roa (raw, json)
Hash identifier: Lv0bDSTB2a5ezDZjPJdglmx73MK7kChqz9UUezN1Wfs=
Subject key identifier: D9:BB:99:BC:CE:B8:99:CC:3C:7B:07:3C:FE:8F:1A:2F:18:C1:7F:77
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 018414DC808B821F24D99961D1ABB6A30D7C
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/2buZvM64mcw8ewc8_o8aLxjBf3c.roa
Signing time: Wed 26 Oct 2022 15:15:05 +0000
ROA not before: Wed 26 Oct 2022 15:15:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60117
IP address blocks: 141.11.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:dc:80:8b:82:1f:24:d9:99:61:d1:ab:b6:a3:0d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Oct 26 15:15:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9bb99bcceb899cc3c7b073cfe8f1a2f18c17f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:64:e9:ce:57:62:b2:4d:b8:c1:e7:1a:22:5d:
b5:98:a1:0b:7d:48:92:30:d0:1e:89:10:03:73:9b:
f0:ee:1f:ac:21:05:04:b0:e4:87:1f:ac:7a:24:a5:
1e:10:38:60:e2:0a:58:26:72:f4:b3:1c:88:21:12:
23:ef:f5:1f:84:a4:93:71:02:20:8c:6e:67:45:99:
87:76:31:70:55:85:b9:c7:28:53:80:e0:39:90:52:
9c:c2:b5:40:24:d2:3d:8d:fc:e2:8c:d8:29:a7:a4:
8c:f2:d5:e2:d9:41:18:07:92:24:ed:6d:34:cd:83:
a3:5d:cb:6b:33:6a:07:b8:cf:6c:b4:1d:6d:dd:15:
7a:28:40:6f:bc:f1:bb:26:bc:a7:f3:b2:33:09:e0:
f0:c8:55:27:81:86:e3:1e:37:af:45:d0:c6:33:a4:
9e:13:49:ab:da:b5:35:b0:39:97:72:7e:5f:07:48:
3e:82:83:0d:89:94:21:d3:17:bd:f3:36:f7:3a:66:
c8:02:5d:8e:e1:f2:0d:91:0b:48:ba:f3:43:e3:c3:
f9:0d:e0:f9:74:e5:e9:c3:aa:6c:94:5b:5b:94:e0:
52:58:56:1b:0e:ac:41:c7:24:2c:fa:3c:56:5f:b4:
1d:a0:41:39:d9:44:28:26:7c:af:6a:84:aa:bd:d4:
31:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BB:99:BC:CE:B8:99:CC:3C:7B:07:3C:FE:8F:1A:2F:18:C1:7F:77
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/2buZvM64mcw8ewc8_o8aLxjBf3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.132.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:63:4b:e7:f4:75:36:2d:93:8f:87:f7:76:ae:72:ec:d0:70:
52:13:0f:58:86:d2:22:0a:e2:3c:bc:3d:2e:50:44:da:16:55:
4c:1a:b8:f3:34:09:b4:5c:01:74:e3:dd:13:dd:c4:e5:0b:74:
72:0f:ad:c4:6a:18:86:dc:70:32:a9:36:98:85:ce:b4:7c:e2:
73:a4:37:8c:fc:0a:c4:dc:a5:85:dd:ae:69:da:7c:88:b6:1b:
a2:7b:fa:d0:02:bd:4d:b4:93:24:81:44:08:a9:c4:33:bf:eb:
f5:e2:9f:aa:79:b4:ad:6a:67:23:7f:cf:a2:1b:18:ae:93:d0:
c8:38:ed:07:91:c8:fb:b9:28:b8:05:46:7c:71:97:8a:a4:c8:
fb:8a:91:9b:a4:7c:57:9f:fe:63:07:e1:12:b5:4a:03:e2:94:
22:18:fa:66:f0:9d:0b:16:fe:a9:58:29:33:6e:0e:8b:1c:1c:
dc:7c:f1:07:c4:38:fc:5c:56:bd:65:68:d7:38:06:53:5b:5f:
ed:b0:62:f5:2e:2e:81:0f:63:e4:81:89:4f:d8:ca:92:de:2e:
07:39:37:9e:59:5c:74:e6:dd:c6:79:d2:07:ea:ba:74:1d:72:
ff:e0:f9:a5:2b:2f:96:eb:95:44:22:bc:5f:30:66:f5:d6:11:
cc:fb:f3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:14 2023 by rpki-client on console-fra.rpki-client.org