Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/IYNoNxReANx5piu1Gs4UpVBX3zw.roa
File: IYNoNxReANx5piu1Gs4UpVBX3zw.roa (raw, json)
Hash identifier: GN6IwJk8/cLJTgAqm8mHd+Xgf5sP9Rul0Hbh6kPUXqU=
Subject key identifier: 21:83:68:37:14:5E:00:DC:79:A6:2B:B5:1A:CE:14:A5:50:57:DF:3C
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 018210F900D0CC0287E847CBB8AFB706D0BA
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/IYNoNxReANx5piu1Gs4UpVBX3zw.roa
Signing time: Mon 18 Jul 2022 11:02:10 +0000
ROA not before: Mon 18 Jul 2022 11:02:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 141.11.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:10:f9:00:d0:cc:02:87:e8:47:cb:b8:af:b7:06:d0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 18 11:02:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21836837145e00dc79a62bb51ace14a55057df3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7f:97:63:73:76:d1:b4:45:24:7e:46:e7:cb:
cc:2d:8c:c4:1a:93:36:d3:74:69:fd:2f:e0:82:39:
a6:98:7a:59:76:ec:38:47:4c:ab:6c:d8:2d:32:ef:
9a:58:54:69:2b:04:07:68:ce:01:5b:23:dc:a6:f2:
73:94:69:97:ad:c0:69:da:59:2d:22:7e:4e:e2:01:
f2:c4:51:73:90:78:1c:29:eb:9d:f3:b1:c8:17:ae:
a4:66:ec:e0:b8:e5:86:78:b2:e4:02:97:cb:41:ac:
86:d3:7d:cd:0b:c3:48:53:bf:45:ac:f2:69:18:3f:
be:d2:70:d7:8f:23:8b:24:63:9b:81:16:75:2f:25:
89:64:13:47:33:44:98:83:a6:f7:37:b6:46:69:df:
4a:ce:54:8a:42:8c:b6:1a:db:d4:43:a8:94:2a:70:
8c:3c:28:b1:e3:db:1f:fc:1f:e4:dd:37:41:68:a6:
e4:c0:7b:fa:97:b4:11:d4:7e:3f:3a:56:00:f5:12:
5b:88:09:e5:ae:53:3e:44:3f:85:00:12:b2:fa:73:
09:3d:63:90:d4:1c:3c:e2:74:15:22:b1:60:d3:5c:
ac:17:d6:0d:a1:54:c8:a1:3e:ef:48:3c:90:74:da:
42:96:30:90:81:14:fc:0b:1f:ff:ce:7a:2c:e4:0f:
15:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:83:68:37:14:5E:00:DC:79:A6:2B:B5:1A:CE:14:A5:50:57:DF:3C
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/IYNoNxReANx5piu1Gs4UpVBX3zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.12.0/22
Signature Algorithm: sha256WithRSAEncryption
61:0c:f7:fe:92:b9:34:37:ab:db:d3:9d:f3:6b:4e:33:48:b1:
5f:6e:a4:23:6e:89:8d:db:95:39:8b:a2:24:fe:02:d5:25:6a:
15:33:ab:31:63:61:c6:b7:59:6a:17:f9:27:1e:34:2f:2d:19:
7e:b5:1c:a2:b2:02:21:5e:e8:ba:84:fa:e1:27:b3:87:f7:68:
b5:68:1d:2f:30:02:97:1c:21:2d:c2:22:75:b4:fa:0e:71:97:
ae:05:8c:c2:09:f0:89:f5:f4:df:61:af:66:45:37:bf:aa:d5:
46:e8:76:f8:60:31:ff:a9:f6:7d:e9:65:a9:a7:42:d3:e3:82:
4b:7b:9f:c2:c6:7e:ee:e3:b4:d4:e4:d5:dc:c3:49:56:cc:99:
87:9b:13:1a:c8:a8:11:a0:cd:33:91:00:66:39:48:b3:91:e4:
58:93:11:22:d4:08:0b:43:b5:ab:71:9a:1d:c4:ad:49:21:a5:
21:4d:c2:21:82:9c:bb:4a:31:bc:31:a2:45:7a:4a:f2:84:6a:
63:50:f6:78:e1:0d:38:82:95:bd:1f:e2:e7:2f:b7:28:fe:36:
be:28:9a:6c:33:02:e9:1d:dd:0b:cc:be:c3:6a:10:34:b6:93:
5c:1a:cc:81:8a:27:8e:b4:30:ee:c6:d4:c1:54:a5:20:39:a8:
4c:a1:d0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org