Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/3oHh1qYXXqCsS4VbgzitOH9r7tc.roa
File: 3oHh1qYXXqCsS4VbgzitOH9r7tc.roa (raw, json)
Hash identifier: 52CEZEjdOgFGqsq2qegFMfyGce0doTofFJ+YABn8Tn4=
Subject key identifier: DE:81:E1:D6:A6:17:5E:A0:AC:4B:85:5B:83:38:AD:38:7F:6B:EE:D7
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0184CE67840E8117F1944F624D4E73006E8E
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/3oHh1qYXXqCsS4VbgzitOH9r7tc.roa
Signing time: Thu 01 Dec 2022 15:56:41 +0000
ROA not before: Thu 01 Dec 2022 15:56:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201120
IP address blocks: 141.11.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ce:67:84:0e:81:17:f1:94:4f:62:4d:4e:73:00:6e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Dec 1 15:56:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de81e1d6a6175ea0ac4b855b8338ad387f6beed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:d6:cb:04:7b:74:9c:c6:3a:96:f2:50:61:
dd:68:84:d8:44:76:9c:cd:84:5f:5a:d8:55:22:90:
b8:0c:54:59:46:2b:44:a2:01:4b:d5:ec:f9:ac:be:
3a:57:d2:71:49:15:fa:57:3d:be:27:1a:61:9f:a4:
1e:1f:b4:92:98:a9:fa:b1:e6:d8:f9:6b:21:bf:9c:
6f:d1:5b:3a:8d:be:37:2f:16:94:d1:7c:61:c2:17:
d8:7d:f9:f9:55:f1:41:53:05:09:46:f4:67:1d:53:
99:e7:b4:95:44:7a:94:1f:7e:cd:55:cc:15:09:a7:
dc:da:5b:cd:c9:75:41:e8:41:51:2a:ba:2b:92:57:
bb:e4:62:0c:17:1e:21:22:21:ce:1d:50:2e:da:a9:
4a:18:86:a1:bf:26:fd:1f:ab:7d:2b:b0:9b:52:be:
38:31:e1:d4:66:d2:44:46:85:f2:27:b4:5b:f6:58:
65:13:da:08:a9:34:d3:2c:88:1b:55:8b:3a:f0:86:
99:57:d7:fe:d0:2a:2f:d2:a6:79:d8:2a:69:4b:ce:
63:79:c1:31:9f:aa:0e:c8:64:ca:31:5d:67:25:6c:
44:e0:fc:cf:af:ff:30:e3:13:48:fc:a1:ef:8a:20:
3c:e4:34:b1:f6:29:eb:8b:19:d6:7f:c9:7b:5e:f0:
09:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:81:E1:D6:A6:17:5E:A0:AC:4B:85:5B:83:38:AD:38:7F:6B:EE:D7
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/3oHh1qYXXqCsS4VbgzitOH9r7tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.243.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ca:09:12:f5:a2:b6:5b:eb:ba:e9:be:e5:90:16:02:66:6e:
23:3b:a8:07:5d:61:d0:40:28:88:ca:56:e2:21:8c:03:7f:5b:
4e:a5:22:01:88:f2:e8:ed:d9:1a:fa:b3:d7:c0:a8:c0:86:b3:
0a:11:1c:fd:32:20:f0:18:a2:54:57:d3:ed:82:7e:33:12:77:
3e:b6:0c:3a:c4:a4:fd:0b:32:bb:65:5b:53:0d:61:dc:6b:e3:
fc:b4:84:6d:6d:5f:56:30:dc:36:84:be:45:66:06:b1:e1:b6:
ea:bb:af:9c:26:91:e8:b9:b5:54:5f:c1:bc:73:12:56:de:b3:
88:bb:16:2a:13:65:46:8f:c4:6a:19:5a:9e:4d:70:68:a7:a0:
1d:e9:9c:ad:68:74:16:53:f7:c1:38:02:11:9c:b2:ca:80:65:
6f:a4:a7:f2:db:5b:34:81:ff:43:29:3d:a3:6b:9b:0d:38:39:
e5:6d:73:29:9a:c2:5d:03:fd:db:e0:85:db:a7:69:f8:f1:85:
c2:82:53:1f:32:eb:2c:d5:ef:74:ca:45:70:ed:2f:90:9e:0c:
45:f4:2f:a5:42:76:1e:b0:33:e1:d6:03:b7:e2:d8:22:94:03:
be:30:6a:92:ab:62:af:19:94:ea:66:bb:c6:55:5e:c0:c9:fc:
a9:c5:06:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:14 2023 by rpki-client on console-fra.rpki-client.org