Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/BXYf2S0qngomWVxjx8uFR6TM38E.roa
File: BXYf2S0qngomWVxjx8uFR6TM38E.roa (raw, json)
Hash identifier: kIqk2F31b2kZJsUPIcm7YqPBlJ15Zshz+5rf6YlgITM=
Subject key identifier: 05:76:1F:D9:2D:2A:9E:0A:26:59:5C:63:C7:CB:85:47:A4:CC:DF:C1
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 018321ED4DE22B54C8D10819F3DD25CE95F1
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/BXYf2S0qngomWVxjx8uFR6TM38E.roa
Signing time: Fri 09 Sep 2022 11:05:43 +0000
ROA not before: Fri 09 Sep 2022 11:05:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 141.11.92.0/23 maxlen: 24
141.11.244.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:21:ed:4d:e2:2b:54:c8:d1:08:19:f3:dd:25:ce:95:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 9 11:05:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05761fd92d2a9e0a26595c63c7cb8547a4ccdfc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e5:83:16:4b:51:d2:be:ab:44:08:c6:9a:6d:
2f:76:ae:59:7a:88:92:ef:b9:81:38:eb:8a:53:17:
a7:e3:eb:98:ce:ec:8d:c2:1e:01:84:03:ff:41:b4:
e8:7d:01:58:c8:ae:ed:da:60:ac:14:6b:4b:08:36:
f9:21:01:01:21:5c:05:0e:85:dc:33:54:7f:bf:fe:
40:86:8c:f0:b6:48:ab:7b:e8:ad:6b:c2:dc:0f:6e:
14:97:8f:a5:77:d6:40:7f:03:0b:39:cb:8a:86:1b:
6b:e7:5d:fa:a0:6f:73:fb:a3:48:d8:bd:44:c0:3e:
02:2c:2b:ab:2a:44:6c:82:ba:8d:bf:89:8f:85:ec:
11:19:21:3e:24:0e:5c:f6:b2:9b:ce:12:29:3c:66:
74:19:43:d2:a9:93:5e:05:53:20:5f:99:a4:14:34:
04:37:14:03:bf:aa:9b:88:45:f5:87:36:90:19:eb:
61:01:40:89:74:48:08:3d:b4:69:38:b0:f1:4d:3c:
d6:7b:81:f4:15:44:9c:cc:03:f1:e8:50:7a:33:8d:
be:f1:08:dc:ae:ba:ed:4e:7b:1c:7c:24:a2:52:47:
f6:6b:1d:19:7d:d2:72:54:a6:48:be:f9:7b:b6:10:
9b:56:24:da:3c:79:8a:e5:21:1a:f2:2a:7f:f0:d8:
b0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:76:1F:D9:2D:2A:9E:0A:26:59:5C:63:C7:CB:85:47:A4:CC:DF:C1
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/BXYf2S0qngomWVxjx8uFR6TM38E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.92.0/23
141.11.244.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:60:b8:74:3c:bc:00:99:a7:7f:ef:4a:23:cf:b2:41:79:ed:
49:27:44:c7:94:29:d1:99:fc:b3:83:5a:da:5e:17:a5:fc:31:
7d:5c:15:69:23:ef:34:eb:35:84:d2:43:c6:df:e1:2b:c5:b5:
bb:2a:d4:e0:5d:df:ad:13:91:11:c4:b0:e4:ad:a2:b7:1e:96:
88:02:46:3a:37:c1:6b:11:d8:f8:ec:66:41:69:51:a0:ed:69:
5d:95:e0:f3:73:a8:52:54:97:24:c6:37:a8:a1:63:1c:5f:87:
87:6f:6b:5a:59:cf:71:ef:0b:c5:e5:00:cc:b7:b2:14:e1:20:
36:d3:f5:a5:c0:de:fa:91:fc:53:20:e2:74:c8:ef:55:83:0b:
8a:3c:20:e6:89:e1:2a:23:7d:4c:f7:33:3a:db:65:a9:33:a0:
5c:3b:10:41:49:62:f3:96:3e:53:31:ed:cd:5b:bb:31:f2:07:
31:ad:c5:a5:07:d4:bc:26:6a:7a:49:2e:c8:15:6a:63:25:39:
d9:67:40:ed:1b:fc:31:bf:3e:b3:6c:95:28:97:3b:dc:d2:38:
cb:c4:c1:bd:a9:1f:ba:19:7d:e8:21:91:1d:18:56:9e:dc:4d:
12:e9:65:b0:91:9a:e5:e6:77:69:d1:f9:90:53:cb:6e:60:54:
70:b5:35:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:14 2023 by rpki-client on console-fra.rpki-client.org