Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Cahs2SdDcsqOZuTgp5i_tRFtrNE.roa
File: Cahs2SdDcsqOZuTgp5i_tRFtrNE.roa (raw, json)
Hash identifier: Y2WIG5nSTLcrCkeei2K1p6KOU2uzH7pFGqfv83tvym8=
Subject key identifier: 09:A8:6C:D9:27:43:72:CA:8E:66:E4:E0:A7:98:BF:B5:11:6D:AC:D1
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01830D5BAD96A75E4FF79A8C49E6AE2A1FFD
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Cahs2SdDcsqOZuTgp5i_tRFtrNE.roa
Signing time: Mon 05 Sep 2022 11:14:15 +0000
ROA not before: Mon 05 Sep 2022 11:14:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 141.11.45.0/24 maxlen: 24
141.11.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0d:5b:ad:96:a7:5e:4f:f7:9a:8c:49:e6:ae:2a:1f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 5 11:14:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09a86cd9274372ca8e66e4e0a798bfb5116dacd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:61:8d:0e:62:91:49:2c:b3:15:b6:51:99:db:
07:a2:8e:dc:26:d2:8a:6d:dd:1b:01:35:3d:9c:87:
bd:ce:08:74:65:a2:36:54:af:eb:08:fc:a4:55:e9:
f4:5f:d9:d1:41:3b:4a:a6:18:53:ae:9c:83:53:73:
86:05:3e:e5:38:94:ac:fc:cb:ca:42:80:65:50:e1:
02:78:55:cb:2d:a6:8a:79:52:33:71:f3:02:43:4a:
c0:9c:17:6e:3b:a5:ce:51:83:4f:a6:fe:ca:27:24:
ad:f0:88:06:a2:e7:8c:6c:17:17:ca:ce:23:ae:42:
a6:89:b3:50:63:c3:a2:17:2c:11:20:12:e2:61:ff:
25:91:56:02:e0:b0:40:81:2d:9d:22:94:4f:18:b7:
33:42:b9:51:bb:28:f7:a9:b6:9e:67:13:7f:65:ac:
41:6d:74:84:29:63:14:e2:e6:5b:5a:74:3a:14:2e:
e8:73:05:c1:96:56:8f:cc:74:5b:32:ba:54:c1:ab:
37:d6:60:ab:b7:76:f0:36:52:58:2e:be:d5:fb:d6:
5c:ed:b9:aa:1f:56:31:21:71:40:3d:cc:46:18:e7:
77:86:6f:bf:8b:1e:98:6a:23:f4:11:de:a7:19:34:
ef:21:01:4e:ef:39:4f:e6:91:1f:32:6b:ee:48:e6:
d0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A8:6C:D9:27:43:72:CA:8E:66:E4:E0:A7:98:BF:B5:11:6D:AC:D1
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Cahs2SdDcsqOZuTgp5i_tRFtrNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.45.0/24
141.11.121.0/24
Signature Algorithm: sha256WithRSAEncryption
21:71:fd:bf:03:b3:bd:c9:69:e2:27:bc:2f:e0:eb:45:6c:fa:
e2:74:07:02:4a:b1:bb:b5:12:3e:9d:b9:dc:2c:69:4f:a0:a4:
53:b3:b5:d9:0c:f5:bb:2d:11:59:d7:75:6e:20:2e:50:e7:df:
08:49:3f:f0:8f:89:a7:a9:63:87:87:d1:db:cb:a3:6b:01:67:
74:1c:c6:dd:55:8d:44:d4:1c:6d:05:6d:b5:61:5a:67:46:28:
21:4b:c1:8e:c2:b3:2d:68:15:91:e6:ba:96:c0:e6:f3:a2:dd:
1d:72:6e:a7:42:6a:6e:0e:ef:3d:b4:cf:e1:00:53:fc:0a:74:
20:33:0c:97:66:6d:a9:fd:ad:1b:d7:75:77:a1:f1:b6:58:a8:
e0:51:f8:b1:1b:52:97:5b:02:0d:43:cc:b0:66:64:d2:47:9b:
c1:c4:f8:cf:b8:cc:65:13:23:04:87:6b:e9:2a:2c:36:54:09:
c6:0b:33:c5:bd:69:70:5e:83:be:e9:1f:e9:ed:85:2f:e1:fd:
d7:46:08:fd:96:65:39:87:ee:8d:bc:8e:b1:bf:6c:e2:86:ca:
03:be:ed:04:bd:26:ba:7a:d4:dc:78:c9:97:16:fe:c6:44:49:
44:ab:03:22:b6:29:d0:82:22:08:27:be:37:c1:0c:f8:04:e9:
3a:2f:22:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:14 2023 by rpki-client on console-fra.rpki-client.org