Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/AkM4oUzwZveM3hnJVD9MaFy5eI4.roa
File: AkM4oUzwZveM3hnJVD9MaFy5eI4.roa (raw, json)
Hash identifier: er5WIzDHsxMb6EvOYShLN/2LI84QyIrlt122v3+zSCA=
Subject key identifier: 02:43:38:A1:4C:F0:66:F7:8C:DE:19:C9:54:3F:4C:68:5C:B9:78:8E
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0183363E84E2C6507ACBC067E71EEF9DE15E
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/AkM4oUzwZveM3hnJVD9MaFy5eI4.roa
Signing time: Tue 13 Sep 2022 09:46:50 +0000
ROA not before: Tue 13 Sep 2022 09:46:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 141.11.68.0/24 maxlen: 24
141.11.69.0/24 maxlen: 24
141.11.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:36:3e:84:e2:c6:50:7a:cb:c0:67:e7:1e:ef:9d:e1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 13 09:46:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=024338a14cf066f78cde19c9543f4c685cb9788e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d7:5f:29:9c:28:cb:e0:66:99:90:a6:3c:05:
81:9e:68:20:11:f6:50:7b:4e:85:13:b5:05:ef:03:
e9:e9:a9:5e:d2:cb:d7:08:38:fc:17:37:21:28:c3:
e9:45:03:01:99:b3:f8:2d:7d:51:1e:5b:7f:c1:8d:
52:81:6b:05:e6:18:46:f4:ed:d7:fd:12:1f:b6:41:
7a:17:c1:c1:e5:0c:2d:55:e3:c6:b5:35:c7:91:b9:
b7:87:4c:2c:c3:35:a8:07:e2:3c:01:2a:1d:65:3c:
65:3e:78:37:ef:86:c7:bc:bd:09:ae:87:33:bb:ec:
c7:5f:16:18:f2:ca:d0:60:71:16:da:8d:57:ea:6a:
f7:49:63:24:d6:3c:48:7d:7a:9f:e3:ef:4f:58:e6:
04:4e:46:4c:7e:e8:5c:a9:e1:15:b5:66:68:1f:a7:
ef:9f:af:43:4c:85:5b:49:bf:04:c9:c5:e7:d9:dd:
5f:aa:ab:fe:a6:b8:51:8e:6f:cc:19:c2:ef:78:40:
d0:ea:a7:1b:47:14:9d:55:98:46:b6:4c:cd:e8:0f:
71:69:69:f3:64:b7:4e:17:8a:e4:27:42:6e:c0:63:
a0:4b:79:14:dd:24:f4:65:86:3c:4b:db:1b:09:f8:
5e:1c:a2:3b:d1:73:90:28:b8:ff:f1:23:fa:8f:24:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:43:38:A1:4C:F0:66:F7:8C:DE:19:C9:54:3F:4C:68:5C:B9:78:8E
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/AkM4oUzwZveM3hnJVD9MaFy5eI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.20.0/24
141.11.68.0/23
Signature Algorithm: sha256WithRSAEncryption
84:94:fc:d2:73:fd:56:5a:5b:93:cc:6a:c3:95:54:21:1e:25:
06:88:64:ad:23:2a:e3:7d:91:bb:aa:51:60:4b:e5:5c:e8:39:
9a:e6:a1:2c:a0:04:70:6b:99:9d:28:5c:29:e3:6a:e4:2d:48:
06:14:f6:f2:e4:ae:41:cb:36:8c:31:1f:cf:36:af:72:09:34:
8b:84:fb:24:1f:77:c9:4d:1b:fc:70:87:92:5d:af:72:11:48:
1e:03:c7:eb:75:62:52:82:a4:79:ec:5e:ba:e7:82:93:36:31:
ce:a7:86:4d:ae:fe:33:c1:57:22:13:04:ec:06:67:9c:59:88:
6a:85:4b:8f:00:04:15:e4:0a:43:0f:a4:9b:8f:51:8d:7b:47:
22:b6:17:c5:08:7f:f4:4f:2c:a5:bb:e2:26:fc:57:a3:19:81:
50:5b:3f:14:46:be:da:79:21:cd:1d:9f:07:4e:82:2a:3a:41:
57:71:86:32:f9:6d:8b:9f:64:45:83:69:53:5d:f8:4a:94:f5:
24:10:39:7e:7f:46:57:1c:c4:b2:7b:44:ef:0c:42:d9:8b:4d:
e8:95:26:71:a7:de:7c:0e:f2:c4:29:38:5f:93:71:44:89:9f:
c3:70:c0:24:4d:cf:0d:d6:9f:86:2a:52:09:18:ee:ad:4b:73:
78:e8:35:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org