Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/6x7JAtx_sO0_e078GYmOM9RWO7Y.roa
File: 6x7JAtx_sO0_e078GYmOM9RWO7Y.roa (raw, json)
Hash identifier: OZJkrZBtZvkcchj4AYuTT5+6hWGlIde+PFfWgjKFeGA=
Subject key identifier: EB:1E:C9:02:DC:7F:B0:ED:3F:7B:4E:FC:19:89:8E:33:D4:56:3B:B6
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 018435C4078A3B818CFBB5014C43234BDF48
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/6x7JAtx_sO0_e078GYmOM9RWO7Y.roa
Signing time: Wed 02 Nov 2022 00:35:50 +0000
ROA not before: Wed 02 Nov 2022 00:35:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205431
IP address blocks: 141.11.103.0/24 maxlen: 24
141.11.100.0/24 maxlen: 24
141.11.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:35:c4:07:8a:3b:81:8c:fb:b5:01:4c:43:23:4b:df:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 2 00:35:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb1ec902dc7fb0ed3f7b4efc19898e33d4563bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:69:53:ce:59:5a:48:a9:eb:8e:f3:10:de:60:
00:f1:75:f3:07:60:15:d5:9f:f3:a7:c6:9c:a1:53:
ef:18:61:51:05:6f:1b:fd:c8:ba:43:79:2a:7e:c0:
97:bb:0d:0a:38:d6:e7:13:ef:1f:da:e0:43:9d:fb:
9d:74:f2:66:0b:3f:a0:dd:38:e8:53:5f:df:d9:62:
14:2c:7e:a1:af:04:9a:9e:ba:60:23:8a:67:31:5b:
c7:f8:a0:eb:69:7d:37:86:75:0b:8c:86:74:01:5d:
e4:c5:12:8a:26:a8:7e:f3:85:1d:b7:3e:28:91:3b:
ee:28:c8:11:9f:83:80:c3:4a:1d:08:9d:36:e7:3f:
88:8c:1a:5e:bd:da:21:53:76:b1:83:12:bb:16:9c:
8d:d5:7d:1a:fd:5c:21:c4:30:c9:d5:8b:cb:7b:35:
93:7f:96:6d:8a:83:41:15:14:e5:5a:7a:dc:20:60:
04:b9:fb:14:9d:6b:b2:8d:c8:1d:28:84:98:c7:7c:
f7:22:18:24:36:2b:92:e0:dd:b1:3c:d1:8d:db:d4:
2f:83:35:0d:e5:70:c0:a0:be:fd:78:f5:0d:fe:e3:
38:98:24:4b:ff:b5:1d:33:ab:36:9a:08:09:e2:6f:
91:9c:02:13:ec:52:66:9e:d2:8b:13:3f:9e:40:1f:
ad:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1E:C9:02:DC:7F:B0:ED:3F:7B:4E:FC:19:89:8E:33:D4:56:3B:B6
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/6x7JAtx_sO0_e078GYmOM9RWO7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.100.0/24
141.11.103.0/24
141.11.107.0/24
Signature Algorithm: sha256WithRSAEncryption
90:6b:de:67:04:8d:23:01:8d:e5:9a:ad:11:42:d6:94:c3:6a:
ed:5c:a4:03:b0:ed:8c:7f:81:ce:02:59:4e:c3:0c:14:8e:2d:
dd:4d:50:68:90:79:ac:65:2d:33:4b:52:35:9f:db:67:43:15:
b2:17:5b:03:1c:dd:07:a5:89:41:32:3b:6a:bb:21:12:d5:03:
f5:7d:3a:29:1e:e9:88:2a:56:4b:28:6e:1a:2e:3e:36:b5:1d:
9d:17:50:a9:ab:d3:f1:b4:48:f2:64:ce:3a:c2:3c:34:e2:6a:
b4:cd:fb:da:4a:7c:09:7f:90:4a:ed:2b:a9:78:5a:2c:fb:db:
d5:54:07:62:87:d7:9d:e0:61:a6:a5:17:b1:41:08:29:a6:00:
fa:29:8b:fd:3f:22:71:e7:1f:c9:4f:e4:59:25:77:e6:3b:70:
cf:f3:1a:25:50:70:08:b5:3d:0c:2e:43:f8:6e:5c:61:39:bb:
ed:d1:ca:e7:0d:79:c6:3a:6c:68:ac:c6:65:ae:ce:d4:4c:f2:
05:3c:50:af:d4:36:86:d3:22:38:27:c7:f9:77:28:ff:68:e1:
67:70:ac:05:07:53:8c:a1:c6:9a:69:14:0e:6a:40:70:f3:2c:
0c:74:ab:83:a3:35:59:95:b4:38:1e:95:20:86:e1:f8:ec:9a:
3b:1d:c5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org