Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/9CZ3PPlzWUQwg8y8zGbeJrbXes8.roa
File: 9CZ3PPlzWUQwg8y8zGbeJrbXes8.roa (raw, json)
Hash identifier: d5torB3+xbNH6eD3Gz6FGnrxkWn3TjT0UAsC2SMZXyw=
Subject key identifier: F4:26:77:3C:F9:73:59:44:30:83:CC:BC:CC:66:DE:26:B6:D7:7A:CF
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04406F5A
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/9CZ3PPlzWUQwg8y8zGbeJrbXes8.roa
Signing time: Thu 28 Apr 2022 10:55:36 +0000
ROA not before: Thu 28 Apr 2022 10:55:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141158
IP address blocks: 141.11.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71331674 (0x4406f5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 28 10:55:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f426773cf97359443083ccbccc66de26b6d77acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:41:e6:2a:1e:fd:d6:c2:c7:31:7d:0b:2f:c7:
40:ae:01:85:aa:cb:39:8b:16:f8:26:0d:6e:6c:72:
bb:de:7e:f7:49:f2:0a:dc:eb:fd:a0:59:f5:8d:f2:
dd:ff:22:96:43:8e:9b:dc:18:aa:9e:78:da:70:41:
58:3b:31:8f:64:8e:f9:fb:42:65:74:df:b7:96:72:
41:20:07:90:b4:1f:b2:c0:7b:73:f5:74:bd:87:39:
2d:23:11:a7:6b:67:f5:1d:5c:78:41:d0:8b:e7:65:
5d:76:9b:7a:b0:d8:4a:36:07:9f:72:f1:4f:ab:d3:
1d:d4:b3:2b:01:51:84:16:5a:ff:be:4e:6f:e1:d8:
5f:85:a1:a4:07:bf:b6:a0:6f:99:54:74:c7:1f:38:
31:35:70:29:75:f5:8b:25:3d:83:fb:0c:4f:3f:6d:
91:ce:56:9e:18:1a:ef:3e:37:6f:62:f6:e7:fa:15:
02:47:fa:2e:ef:00:29:dc:7a:a0:9a:99:28:6f:12:
0b:57:08:c4:f3:aa:3d:48:c0:39:d8:e8:04:59:bf:
53:f1:3e:38:ef:86:db:26:21:94:50:62:81:5e:54:
cf:a5:06:1a:3b:7c:7c:87:13:3d:0d:26:78:79:c6:
77:cf:b6:44:51:a1:c7:a2:9f:c5:f0:ff:db:37:17:
ce:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:26:77:3C:F9:73:59:44:30:83:CC:BC:CC:66:DE:26:B6:D7:7A:CF
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/9CZ3PPlzWUQwg8y8zGbeJrbXes8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.101.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f9:f8:8e:94:24:06:c1:55:11:fe:56:44:b3:00:5d:01:7a:
92:70:85:a6:1b:2a:9c:2d:7a:e3:5f:0f:31:56:fb:47:26:20:
6d:61:33:c4:1f:c9:b4:d3:0e:a7:43:35:24:6e:68:ab:9b:7b:
e5:ae:b3:1a:bb:d1:73:51:5d:55:c5:15:fc:d4:fe:10:81:ad:
e0:64:75:e3:2f:c9:2f:19:de:87:3f:68:44:3f:38:a9:f8:5c:
10:c2:de:48:62:58:b9:9c:9d:3d:c9:bf:5b:fb:8d:d7:2b:23:
10:1e:d4:da:3c:a6:cb:6b:4d:51:f4:e0:04:c8:c3:66:64:65:
c5:6d:ae:a5:3c:80:2e:be:f7:78:55:c0:1d:3b:a7:0a:99:09:
4c:aa:73:06:4b:63:0a:00:6d:2f:06:e4:a3:fd:c3:dd:f4:a7:
a9:74:af:20:5a:99:b4:68:3e:e7:7f:05:49:84:21:81:74:93:
e3:80:4e:74:95:c4:9e:ae:3d:0e:e2:86:70:4c:5b:af:ec:9a:
a9:be:4d:13:2c:a8:1a:aa:4e:44:19:d3:ba:54:02:5a:3d:b8:
4a:bb:3c:7d:58:70:2c:dd:f5:65:75:01:90:e5:df:5a:9c:40:
ed:2a:8c:d6:7d:31:a4:26:a5:73:71:d1:57:d8:e7:32:55:30:
3a:0d:16:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org