Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/C4IlDgQL2EryQ7y6_DDthpN1ZFc.roa
File: C4IlDgQL2EryQ7y6_DDthpN1ZFc.roa (raw, json)
Hash identifier: AAZYsKC6/x/Ud1KEYzihmwqMzx4lIVoPVOrzboJUfaY=
Subject key identifier: 0B:82:25:0E:04:0B:D8:4A:F2:43:BC:BA:FC:30:ED:86:93:75:64:57
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01850735A3C7EABA9228BFE9E056157D1C9B
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/C4IlDgQL2EryQ7y6_DDthpN1ZFc.roa
Signing time: Mon 12 Dec 2022 16:40:33 +0000
ROA not before: Mon 12 Dec 2022 16:40:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210439
IP address blocks: 141.11.109.0/24 maxlen: 24
141.11.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:07:35:a3:c7:ea:ba:92:28:bf:e9:e0:56:15:7d:1c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Dec 12 16:40:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b82250e040bd84af243bcbafc30ed8693756457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:62:55:ad:6d:e8:ca:6d:47:7f:d0:a4:fa:f9:
e2:ba:bc:29:ae:f3:d2:d3:10:b5:c9:a2:44:8d:a5:
69:09:ad:a9:ff:ab:8e:92:a4:2d:7d:f3:50:c6:d5:
6d:bb:2a:bf:d2:f2:5e:54:14:73:87:6c:15:90:70:
ab:67:0f:e9:a1:9e:7e:1c:9c:d3:76:22:5e:61:a1:
dc:18:7c:ba:99:cc:df:5d:0c:27:b0:ff:e2:f4:5c:
f8:0e:44:a9:b9:57:d7:52:9c:6c:69:06:a2:ce:82:
56:76:be:4a:88:42:22:53:20:71:8a:1d:07:7a:cf:
2c:64:b7:75:e4:6d:54:60:20:84:0e:3f:57:cf:ac:
7f:b8:e1:e0:96:dd:50:43:55:a3:20:37:f2:01:2b:
e8:9e:af:c5:49:d1:41:b1:b4:b2:08:bf:13:81:20:
f4:29:b7:99:4f:5b:fd:79:57:9d:7f:e5:c9:e9:e9:
cf:7c:22:4f:06:a4:3c:1e:aa:1a:8d:50:0d:20:8a:
1c:5a:bb:89:4b:b1:b4:ba:9d:d4:08:89:97:08:da:
2f:e4:4b:e4:01:da:e2:7b:30:96:ab:e8:d1:2b:c7:
d7:da:b8:21:66:c5:60:b1:a7:6e:de:01:c9:7f:c1:
e0:46:83:de:b7:ab:26:8a:bc:6d:38:99:02:ba:20:
77:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:82:25:0E:04:0B:D8:4A:F2:43:BC:BA:FC:30:ED:86:93:75:64:57
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/C4IlDgQL2EryQ7y6_DDthpN1ZFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.109.0/24
141.11.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:37:b7:4c:2c:48:c3:a8:d9:70:c3:3c:5a:bc:ef:b8:12:95:
5a:0d:5a:7f:a8:57:63:fb:5f:c8:ce:0a:4a:7e:84:4e:f0:97:
68:7d:25:5e:48:0d:96:03:42:34:ac:3d:74:c9:60:5b:f1:98:
a6:7d:ec:0d:42:87:2d:12:da:aa:09:33:7a:76:94:18:0c:cb:
5e:e8:a8:1c:38:fb:5f:0c:26:26:8b:3a:ae:5b:70:50:02:34:
ff:e8:d5:3d:6a:97:f7:2d:89:a3:ab:11:fd:76:4d:c4:ed:69:
24:1c:c7:8d:61:11:4d:5e:8a:98:5c:c7:b0:86:cb:16:9b:d1:
34:6a:97:dc:88:6b:31:64:81:59:fd:89:cd:f8:54:6f:2f:6d:
a5:7d:1c:a2:59:1d:00:23:53:fb:a0:2b:f4:f1:2d:fa:ce:3d:
0e:15:c4:48:1a:47:04:07:0e:38:fb:37:bf:f8:4b:24:64:d2:
c0:39:3a:e3:2f:84:c2:62:00:8e:54:33:d1:5d:7f:04:b1:0e:
c7:51:97:2f:43:30:af:5e:cf:8d:ac:22:61:fc:4e:76:76:82:
d1:75:a0:be:b4:2b:8e:c4:cb:f3:69:ab:b2:4f:cf:f4:ba:c9:
a1:c3:4c:4b:ba:79:9f:88:b9:61:b4:dd:12:01:5b:28:32:9f:
28:c3:c0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org