Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/FWX3qxbwIfEkx6124z1YshO35t4.roa
File: FWX3qxbwIfEkx6124z1YshO35t4.roa (raw, json)
Hash identifier: cimSHAbZJ/+t3YFOKReaU1Hbis73lIeZieCq6CRLs6c=
Subject key identifier: 15:65:F7:AB:16:F0:21:F1:24:C7:AD:76:E3:3D:58:B2:13:B7:E6:DE
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0183C25643F867F69093BAC5495D60B7C482
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/FWX3qxbwIfEkx6124z1YshO35t4.roa
Signing time: Mon 10 Oct 2022 14:39:36 +0000
ROA not before: Mon 10 Oct 2022 14:39:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205431
IP address blocks: 141.11.100.0/24 maxlen: 24
141.11.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c2:56:43:f8:67:f6:90:93:ba:c5:49:5d:60:b7:c4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Oct 10 14:39:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1565f7ab16f021f124c7ad76e33d58b213b7e6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:21:fb:42:d4:04:97:91:46:0d:36:90:ac:d2:
a2:e0:c4:02:44:f3:9c:e2:e3:bd:78:c5:d9:a6:15:
9a:7d:45:82:6f:c9:a5:dc:89:6b:8f:07:a4:e7:df:
fb:7a:a1:59:60:fc:14:bd:9f:6b:fc:8d:bb:65:5f:
a3:a9:4b:7b:7b:87:27:3d:7c:4e:e3:73:36:bc:37:
35:6b:5d:95:8d:ba:69:92:16:3a:b5:36:c7:ca:64:
5a:40:51:3e:01:28:e2:d2:ff:4d:8c:bc:e2:c8:9e:
08:3f:33:b5:9f:31:1c:7e:35:50:72:f7:d5:45:05:
14:46:ed:e9:50:58:cd:17:79:9f:25:b4:71:4f:58:
96:b6:bc:68:51:b0:c2:de:6b:29:dc:96:b2:68:22:
10:2a:14:6a:4c:32:2d:4a:14:26:3c:da:a2:d1:09:
27:aa:ad:95:b2:39:4b:a9:0c:31:0f:01:de:e2:1b:
b5:7a:aa:34:72:bf:28:91:c4:6c:7c:4a:86:c0:53:
c9:f0:b5:e7:68:b1:51:91:73:7a:4a:d2:a7:da:fe:
00:d3:1c:b3:b5:99:2f:83:a7:fa:a6:91:48:eb:ad:
f8:0d:aa:1e:1b:a2:a2:1f:e6:9d:ae:07:43:14:c2:
3b:59:f5:89:cf:a3:0a:e3:20:3d:9b:32:5c:f6:f2:
51:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:65:F7:AB:16:F0:21:F1:24:C7:AD:76:E3:3D:58:B2:13:B7:E6:DE
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/FWX3qxbwIfEkx6124z1YshO35t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.100.0/24
141.11.107.0/24
Signature Algorithm: sha256WithRSAEncryption
53:4e:8c:8b:1c:95:77:26:e8:b4:2c:80:54:35:ed:f9:36:df:
7d:0a:14:d0:40:7e:de:3e:8f:03:55:e5:f6:33:5e:af:80:1f:
c3:fe:c9:c2:95:17:0a:d9:a4:af:05:47:40:13:91:b9:b6:e9:
9b:05:3b:86:7e:70:ec:10:68:ca:f9:f4:ab:e1:5b:43:a4:d8:
9d:4c:ae:e2:3a:1a:e2:8d:4d:2f:e7:5e:97:e2:ce:69:85:e1:
bf:5a:d6:5d:54:6a:3e:6e:8c:aa:86:3b:95:ce:f0:bd:7c:2c:
eb:44:30:bc:61:11:5d:04:5e:ae:f8:ff:c4:7b:79:f5:28:4e:
19:90:c0:a1:1f:de:f8:84:88:00:4e:d4:3f:ef:a3:31:e8:eb:
f1:0e:e3:cd:27:73:8f:8d:22:f4:36:78:32:31:1a:b4:5c:bb:
b4:1f:09:ca:6e:4e:40:ed:9a:c2:bf:67:26:47:ea:96:b8:a3:
24:6f:aa:c8:fe:5a:81:7c:25:bc:a4:67:c2:d1:53:c2:9a:32:
19:33:da:66:54:04:68:15:2e:55:bd:09:67:12:34:7b:22:2b:
5a:fc:e3:e2:06:b5:f5:00:f3:5f:f4:70:26:a3:0f:55:b2:b9:
d9:9b:31:16:56:1a:1d:9c:64:a1:bc:04:3e:49:0d:1d:cf:d8:
ab:c7:09:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:14 2023 by rpki-client on console-fra.rpki-client.org