Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/CvYiCPrbQFtFNx8rlacMjw5aaU8.roa
File: CvYiCPrbQFtFNx8rlacMjw5aaU8.roa (raw, json)
Hash identifier: 7lVwLiocdqQf8UkjZ7LvKOMQAnhMZyIktx52AP3NLqk=
Subject key identifier: 0A:F6:22:08:FA:DB:40:5B:45:37:1F:2B:95:A7:0C:8F:0E:5A:69:4F
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0182C63AC96EA3D43FD000B69F747CEBC01C
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/CvYiCPrbQFtFNx8rlacMjw5aaU8.roa
Signing time: Mon 22 Aug 2022 15:45:17 +0000
ROA not before: Mon 22 Aug 2022 15:45:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 141.11.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c6:3a:c9:6e:a3:d4:3f:d0:00:b6:9f:74:7c:eb:c0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Aug 22 15:45:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0af62208fadb405b45371f2b95a70c8f0e5a694f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5e:a5:fd:92:3a:db:7d:67:ba:4d:b7:cc:43:
c4:14:0a:5a:82:d2:e3:b4:8d:51:22:bb:96:62:ec:
4a:83:0f:da:1d:15:b0:73:3d:63:89:78:27:3a:bc:
d8:52:12:49:b5:c6:17:81:c5:17:0a:04:5b:07:fa:
f0:30:97:26:4f:3c:30:57:c4:60:55:73:82:35:59:
e1:e3:ca:1d:95:6d:06:4f:84:05:ea:f1:20:3f:3c:
09:e8:84:75:b2:6d:9b:d4:d5:82:5a:0a:1e:eb:c6:
e2:95:ca:ad:3e:56:16:5e:32:92:03:a6:6e:17:28:
a1:05:b4:ad:d9:64:26:73:3b:96:4e:39:a3:d6:5c:
23:af:7a:73:2c:bd:7b:48:d2:68:23:ae:c4:4b:a1:
0f:9f:ce:fe:fa:d6:e6:0d:a4:da:b5:b6:3b:c6:0c:
c0:02:c7:5e:0f:e3:97:77:28:cd:84:c8:15:3a:2b:
a8:9d:f3:4c:3d:f3:d4:b1:38:ce:ad:d2:c3:d2:22:
5b:cd:f8:64:e3:6c:0c:e5:17:55:56:de:5f:96:16:
79:6f:3a:e6:9b:fa:82:4b:5f:81:a4:f2:65:a9:eb:
a0:1e:bf:7e:ad:4d:61:57:2e:92:41:58:ea:c7:f0:
55:81:6b:51:9f:54:6a:cb:a5:45:ca:9a:cd:41:2e:
0b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F6:22:08:FA:DB:40:5B:45:37:1F:2B:95:A7:0C:8F:0E:5A:69:4F
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/CvYiCPrbQFtFNx8rlacMjw5aaU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.16.0/24
Signature Algorithm: sha256WithRSAEncryption
32:70:bf:5e:dc:9d:fd:c1:ff:d4:78:33:bd:d1:0d:9b:9b:ef:
54:41:0e:9b:9d:ec:77:2a:22:45:4b:e7:9b:e6:1d:52:b9:aa:
fe:7f:c6:11:a2:e0:fd:31:b8:05:f3:b1:49:a4:fe:a3:6e:46:
1c:5b:cc:19:7f:c8:0a:df:42:76:25:16:f8:b7:1d:da:99:f9:
30:36:db:9a:e4:87:3a:18:dc:fb:67:d6:1c:ea:ef:39:0a:6e:
28:2a:b1:1a:0e:0e:e7:b4:df:fe:c8:95:e4:e7:e2:b2:5c:4d:
79:97:3c:68:38:60:44:6c:a0:a9:1b:db:e7:c9:ff:bf:3c:c1:
c3:75:a8:af:5d:e4:1e:33:98:cc:aa:b0:13:a0:47:9c:24:1d:
bf:cd:5b:01:7d:dd:88:77:c5:ce:ee:72:27:85:5d:d5:5c:98:
9d:c1:7d:5c:25:ee:77:ba:5a:b7:64:cb:94:5d:9c:5c:17:46:
c2:36:a0:f5:88:01:77:c1:0d:de:00:69:45:39:f7:c0:78:95:
17:9c:15:36:37:da:de:d7:eb:24:c8:1a:74:2f:47:04:38:92:
14:d2:ee:83:82:d9:ef:08:d7:65:83:b1:e7:be:01:ab:4c:f1:
bf:38:7b:4a:10:a1:08:a6:8e:97:ff:a6:78:fc:06:d0:a8:45:
7b:7e:17:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org