Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/8OAph5InGtaA3A2GA9mcGXzNkhg.roa
File: 8OAph5InGtaA3A2GA9mcGXzNkhg.roa (raw, json)
Hash identifier: Y14gC2rI6K38ZM+SrpIZ+Aj9Xih3VJPOBdHBpL8Dxac=
Subject key identifier: F0:E0:29:87:92:27:1A:D6:80:DC:0D:86:03:D9:9C:19:7C:CD:92:18
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0184E1CEFB464960FD5529D7B0FD3EC939B1
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/8OAph5InGtaA3A2GA9mcGXzNkhg.roa
Signing time: Mon 05 Dec 2022 10:22:28 +0000
ROA not before: Mon 05 Dec 2022 10:22:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 141.11.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e1:ce:fb:46:49:60:fd:55:29:d7:b0:fd:3e:c9:39:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Dec 5 10:22:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0e0298792271ad680dc0d8603d99c197ccd9218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f4:7c:2a:86:0a:30:b0:12:40:bc:1a:c2:b1:
63:6e:13:05:81:56:cd:51:2e:98:97:6c:e1:aa:af:
9d:1b:e2:e0:0c:f0:28:2b:94:70:fa:33:3a:b5:26:
ef:c4:18:21:81:d8:2b:31:01:32:e4:46:d7:a8:2b:
4d:59:4d:9b:34:f9:88:b8:9d:84:e8:c8:cf:f7:17:
24:72:3c:a1:20:a6:0f:b3:83:70:86:4b:8f:b1:e8:
be:73:3c:30:4a:0e:5b:02:43:61:9c:8b:35:d4:ac:
62:a7:fb:bd:04:79:0d:7c:51:9c:be:8d:e9:7c:a7:
70:64:be:d4:32:2b:fe:d8:b5:7c:a7:db:d6:32:f2:
df:9a:c1:e6:bd:e0:53:5f:ec:0a:4b:4f:fe:a8:12:
15:42:3c:86:c6:92:64:50:29:c2:93:04:bb:64:25:
89:3b:13:e5:19:b6:b6:6b:a7:b9:90:c8:7b:23:0f:
ea:ec:88:32:8a:f3:78:36:63:12:97:97:af:48:60:
47:21:02:a5:6a:55:c3:40:30:83:9f:e1:bf:79:e2:
1c:fc:79:bb:d7:70:66:95:6a:3d:03:c4:e5:22:04:
9a:e5:60:df:e2:ef:5a:19:23:1e:38:ef:ac:37:fa:
19:f2:50:e0:ea:9d:63:66:97:a5:b4:a2:97:a9:3d:
51:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E0:29:87:92:27:1A:D6:80:DC:0D:86:03:D9:9C:19:7C:CD:92:18
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/8OAph5InGtaA3A2GA9mcGXzNkhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.124.0/24
Signature Algorithm: sha256WithRSAEncryption
71:41:e6:9b:64:aa:28:11:6e:be:3e:91:1b:d3:d7:50:b7:c7:
04:99:fe:d7:fa:f4:b9:12:6f:cd:ff:fe:e1:87:d6:04:ea:a4:
63:be:70:5a:7b:b1:4a:6f:99:08:0e:86:da:e4:8c:c7:bf:ba:
4a:0e:11:6e:f5:30:c2:2e:33:b9:da:2d:64:5d:47:cf:63:0a:
50:07:a2:53:5e:ca:72:95:8c:76:0e:df:34:b3:07:f1:45:67:
b8:d9:b4:02:1e:d4:ab:86:d3:f9:26:30:0d:b9:bc:dd:2f:3a:
e2:0f:4a:b8:a6:4d:86:b7:8d:f4:60:68:03:62:ad:fc:0b:e9:
59:50:c3:50:2a:c6:7f:72:12:c5:c7:3e:1c:b3:9d:41:0d:c3:
ae:16:b7:05:a9:63:86:31:90:98:5a:9f:ce:1f:82:19:9f:7f:
90:2a:78:59:a3:35:6c:fa:9c:b6:79:5f:0d:f2:21:7b:12:6a:
b6:b4:72:f0:87:40:82:ae:c9:ee:1e:c7:14:a0:a5:70:42:18:
b7:93:47:62:81:ea:b4:8b:df:a7:ef:0b:fe:a6:b8:0b:27:39:
d8:59:03:0e:ce:71:59:66:8a:5a:a9:38:34:fb:ee:1b:e2:f2:
e7:78:a5:cf:ba:ad:e5:d0:52:8b:a7:4c:50:2a:45:ff:3c:80:
83:45:f6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org