Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/3vXarkaSnq1scUdhNw_9ax1ooHk.roa
File: 3vXarkaSnq1scUdhNw_9ax1ooHk.roa (raw, json)
Hash identifier: w01Wv4FK0W2WdAOCswevy9VXt96vRuU6gMf6SxydQXg=
Subject key identifier: DE:F5:DA:AE:46:92:9E:AD:6C:71:47:61:37:0F:FD:6B:1D:68:A0:79
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01852B216273DEA1F3A9901C65533E0D836C
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/3vXarkaSnq1scUdhNw_9ax1ooHk.roa
Signing time: Mon 19 Dec 2022 16:04:46 +0000
ROA not before: Mon 19 Dec 2022 16:04:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 141.11.96.0/24 maxlen: 24
141.11.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2b:21:62:73:de:a1:f3:a9:90:1c:65:53:3e:0d:83:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Dec 19 16:04:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=def5daae46929ead6c714761370ffd6b1d68a079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:05:82:36:81:8c:5e:4d:35:1a:48:c0:c2:fe:
61:19:1b:b6:c1:28:b2:81:47:fd:d6:05:f6:10:54:
fa:20:f6:26:e6:93:b1:51:38:ad:08:ec:19:98:5c:
67:3d:6b:50:86:e0:9f:ec:00:a9:22:ad:8d:6c:6a:
91:af:5a:e2:82:ae:8f:eb:95:8b:08:28:f9:0b:c2:
f1:ae:83:db:69:43:a1:f0:06:89:33:63:61:bb:f2:
85:9b:96:0f:3f:9d:1b:2c:c5:d2:6d:02:eb:e7:9d:
99:9e:5b:9f:e7:74:5b:e5:2b:c6:aa:fa:c1:8e:06:
3d:26:44:7f:a6:be:de:6f:5a:1f:aa:74:9b:08:37:
7b:b8:fd:72:7f:0e:07:92:a2:a5:b9:8a:51:82:14:
a7:e9:55:fe:fe:fa:a9:d4:93:9d:d5:70:18:8a:49:
cd:ad:55:bb:e2:68:10:4b:91:e8:72:e0:45:5c:ef:
d4:e1:be:81:2d:9a:61:fd:26:2d:f3:9c:70:7a:d2:
59:26:5e:d8:a1:66:e0:ea:cf:51:4f:7c:86:fd:68:
49:c5:b3:0f:a3:5c:8f:f3:f8:74:47:45:03:17:2f:
11:71:c3:d0:ae:eb:c9:17:b6:54:78:23:2a:0d:98:
ea:39:bc:31:a8:14:67:81:80:ff:48:5f:6f:2a:43:
66:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F5:DA:AE:46:92:9E:AD:6C:71:47:61:37:0F:FD:6B:1D:68:A0:79
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/3vXarkaSnq1scUdhNw_9ax1ooHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.96.0/24
141.11.124.0/24
Signature Algorithm: sha256WithRSAEncryption
14:72:1c:6e:ab:4f:aa:1a:de:70:42:ea:f9:97:23:5b:5d:99:
cc:d2:f0:56:50:0a:e4:4c:07:c0:51:a0:25:02:e1:f0:ef:ee:
d2:c5:5a:40:51:44:71:b9:b0:34:e2:1a:d4:9c:80:9c:07:e7:
f5:a4:df:e7:1e:4c:cf:3f:4e:51:2d:f5:92:60:ef:e9:0e:69:
79:b0:09:d2:da:f7:74:a1:6e:12:ec:88:cd:67:38:82:53:24:
30:fd:1d:5b:2c:b2:be:e1:a7:af:9e:49:e8:ec:7a:67:5f:98:
1a:1e:7a:70:a0:c3:ed:98:da:c8:3c:81:80:53:9f:1c:a3:64:
ac:cf:c9:27:1d:ee:9b:0f:71:50:d9:ea:24:6c:a9:07:17:6f:
cd:a4:77:5b:74:72:f5:0b:56:1b:c0:89:f7:bf:61:34:60:e2:
68:d4:a8:af:5e:b9:d5:62:77:65:94:7b:65:fc:df:ac:26:8b:
70:d1:1d:fa:a7:18:ad:9a:89:e3:4d:9a:fc:5d:79:e7:51:c7:
5e:7d:a2:82:6a:a5:90:4e:c0:98:1e:e5:c3:1d:40:00:ef:41:
9a:d4:ea:83:ba:04:79:c0:95:99:ca:cf:64:1d:8f:59:b2:08:
19:6e:a2:ce:e1:83:6b:ce:a0:25:37:73:4b:8f:1f:30:8e:e3:
a7:d2:fa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org