Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/H6wdRrstzKD-AG6FzEh3WglMnLg.roa
File: H6wdRrstzKD-AG6FzEh3WglMnLg.roa (raw, json)
Hash identifier: AoRP/C4T3h6mOjogy98OLStrpWXuKLTo8lr8bxdKxZM=
Subject key identifier: 1F:AC:1D:46:BB:2D:CC:A0:FE:00:6E:85:CC:48:77:5A:09:4C:9C:B8
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 02D21BD0
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/H6wdRrstzKD-AG6FzEh3WglMnLg.roa
Signing time: Sun 30 Jan 2022 12:25:57 +0000
ROA not before: Sun 30 Jan 2022 12:25:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 141.11.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47324112 (0x2d21bd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jan 30 12:25:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fac1d46bb2dcca0fe006e85cc48775a094c9cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:9b:b5:e2:49:c1:85:b8:93:b3:52:15:ea:
1f:ea:80:50:3a:b4:8d:28:b1:35:7e:0a:27:04:8d:
36:d8:06:ff:b9:48:39:2a:05:87:89:6f:d4:b1:79:
02:d7:f6:26:d4:d6:f8:86:44:c0:17:04:02:63:24:
92:9a:c7:b9:25:da:71:e1:cc:2c:14:e2:23:45:21:
c6:d1:dd:f4:98:c3:51:d3:ba:90:67:31:c0:f3:cf:
8c:d1:57:76:49:56:8f:f7:83:00:9f:0d:fc:c1:57:
2c:e6:a9:64:69:30:e4:03:14:75:ce:77:0a:a9:b5:
c7:e4:0b:fb:10:d5:fe:cc:6a:df:20:66:c3:51:43:
34:95:38:08:92:ff:bb:d5:e6:45:d9:a0:61:3c:e5:
26:c7:05:b5:cb:b0:41:ae:60:90:f1:db:71:68:a7:
1b:a1:e4:98:60:32:11:fc:67:94:ac:ac:3a:a5:0d:
08:34:72:db:a5:f1:16:68:4b:4c:86:29:71:2f:b5:
ad:e3:c7:f1:e5:ff:b5:d9:d0:8d:37:6f:c2:02:a1:
9a:6d:1e:d9:0c:eb:66:9c:00:02:42:4d:45:e3:54:
9d:24:41:59:71:2f:8a:fc:9b:f6:f6:1d:36:65:fc:
fc:1d:43:68:bd:66:46:db:23:5f:f1:26:9a:ae:fc:
13:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AC:1D:46:BB:2D:CC:A0:FE:00:6E:85:CC:48:77:5A:09:4C:9C:B8
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/H6wdRrstzKD-AG6FzEh3WglMnLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.28.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:aa:3a:d7:99:f9:df:e7:0a:3e:95:d4:db:41:b8:d2:63:0c:
11:90:cc:ad:d9:21:91:83:a5:8c:13:12:4d:84:77:ec:4a:ec:
ba:f7:35:dc:b5:65:ed:dd:bb:23:55:3a:90:d2:d9:4d:78:53:
8a:ac:e1:71:52:a4:f3:ba:df:30:18:dc:33:a7:94:3d:67:0c:
02:62:a8:77:5d:e3:df:7b:9a:d9:3e:c4:11:25:03:c9:a3:2a:
9d:5b:98:82:34:76:dd:1a:f0:6d:ca:11:e3:78:8a:80:e1:fa:
ec:ad:0c:c2:14:cc:6e:f3:a5:34:cf:71:55:95:3f:cb:d4:f7:
1a:cb:f0:59:c8:bb:00:84:5e:cb:b0:a7:8f:dc:87:6b:1d:50:
7d:bf:2c:4a:3c:b1:6c:09:00:1f:f9:06:f4:aa:35:67:39:53:
e4:40:8f:a4:f3:25:1d:41:75:41:a7:7b:68:9c:ed:fa:e2:dd:
35:09:29:48:9b:df:73:6f:e9:95:26:86:bc:59:dd:ae:78:da:
a0:a1:42:58:74:21:1d:5e:85:8a:7a:f7:c1:c2:b2:5f:80:4b:
5b:fb:ec:76:ad:23:a5:2e:f5:d6:27:db:04:a2:2a:cb:5c:31:
07:e9:82:7e:59:2f:b1:01:81:75:d1:ba:30:57:a3:e6:9a:98:
83:3d:79:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org