Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/7gFw2ywgqYbEeB36zeAD-KMDp-U.roa
File: 7gFw2ywgqYbEeB36zeAD-KMDp-U.roa (raw, json)
Hash identifier: 3KCj6g3LeU25NmDE/aaBhoA5Hn3IaBgW/PthtNjEnzY=
Subject key identifier: EE:01:70:DB:2C:20:A9:86:C4:78:1D:FA:CD:E0:03:F8:A3:03:A7:E5
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01835B1F70C35B71F5A2119558F8A08BB787
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/7gFw2ywgqYbEeB36zeAD-KMDp-U.roa
Signing time: Tue 20 Sep 2022 13:38:50 +0000
ROA not before: Tue 20 Sep 2022 13:38:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 141.11.84.0/22 maxlen: 24
141.11.212.0/22 maxlen: 24
141.11.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5b:1f:70:c3:5b:71:f5:a2:11:95:58:f8:a0:8b:b7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 20 13:38:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee0170db2c20a986c4781dfacde003f8a303a7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e6:31:24:41:5c:c8:da:42:51:d8:c3:7f:62:
be:42:c1:be:da:ec:cf:3f:30:4c:03:9a:d0:91:0e:
60:74:ac:3f:e0:cd:03:80:1f:31:8f:c1:1f:0c:e1:
f5:3b:2c:e9:0a:03:a5:6e:cd:42:2a:ae:7c:21:a3:
44:ab:78:fd:d1:5b:02:11:cb:2e:50:b3:e2:b3:15:
55:a4:ba:58:35:f6:71:6e:9f:2e:e1:e3:d3:39:6e:
71:53:00:1e:b3:4d:e6:23:e5:45:e7:d0:83:fb:cc:
1a:bb:99:64:0c:c2:05:60:43:20:5b:5f:92:5e:83:
cc:67:3c:b9:6d:50:e0:92:c7:b3:ce:cf:72:0e:66:
24:6a:4f:0d:16:e7:54:4e:a8:98:05:d3:c3:90:29:
c4:e9:4a:e3:dd:2c:72:b8:7f:86:d6:31:f0:3e:16:
2b:76:56:ea:fc:cb:f2:40:b7:08:65:77:f9:ad:92:
be:df:67:47:65:e5:97:19:c3:48:23:53:ed:7e:85:
4d:de:23:c8:ee:00:70:13:91:ed:bc:4e:88:7e:f3:
cd:71:18:72:a2:c1:20:5d:ab:45:e5:5e:bf:d0:00:
61:01:1b:03:df:22:3c:8d:76:b3:ce:35:68:e6:69:
3f:64:f6:7e:dd:ac:b0:f1:e9:61:2e:32:82:f3:f6:
84:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:01:70:DB:2C:20:A9:86:C4:78:1D:FA:CD:E0:03:F8:A3:03:A7:E5
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/7gFw2ywgqYbEeB36zeAD-KMDp-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.84.0/22
141.11.212.0/22
141.11.236.0/22
Signature Algorithm: sha256WithRSAEncryption
72:04:b8:c9:b8:16:59:d9:d0:75:79:89:3d:d4:39:d9:12:8f:
bc:c0:db:a6:2a:71:a7:2a:60:1e:04:fe:99:99:f9:18:74:59:
b8:f4:83:2b:e9:24:b3:45:74:4e:f4:70:9d:f8:9a:90:c9:68:
03:44:87:5c:70:67:4f:4f:fe:b1:80:5f:f9:29:87:98:28:bc:
6c:e9:5b:1c:1e:5c:c9:c8:4f:08:17:fb:4c:9c:93:0d:dc:ea:
f5:82:69:87:20:9a:43:e4:f6:d5:1e:c2:99:d7:d9:0a:c6:f3:
76:4a:f3:52:d9:a2:2c:0d:3e:4f:67:d0:25:74:37:75:d8:fb:
b9:74:27:40:57:dd:cc:fa:c7:68:a7:bb:7a:4b:77:ae:7d:29:
ca:da:3b:4c:b0:4d:4f:01:8b:c0:06:95:18:c4:c7:66:64:45:
96:95:8b:8b:df:2c:e1:7b:2c:bf:56:ce:4d:df:c2:b7:00:bd:
a7:e1:7a:79:73:33:94:87:ac:d9:35:06:f1:6b:a8:af:3d:a0:
4f:a3:39:d3:49:ab:0e:a1:a0:eb:25:10:2e:d6:b6:16:70:4d:
93:aa:d1:e8:58:95:6c:22:68:df:3b:3e:d0:fb:42:e9:3b:44:
90:78:d3:e0:27:ea:11:60:71:e5:e0:30:33:62:a6:c6:42:01:
a5:fd:60:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:14 2023 by rpki-client on console-fra.rpki-client.org