Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/J5iH71rsuuNM2dRM4xEq8LuIwJw.roa
File: J5iH71rsuuNM2dRM4xEq8LuIwJw.roa (raw, json)
Hash identifier: OZ5YQteMNUPua7IAP8l2Tju89VLDHgbaBPxn94xqA/s=
Subject key identifier: 27:98:87:EF:5A:EC:BA:E3:4C:D9:D4:4C:E3:11:2A:F0:BB:88:C0:9C
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0261BA1E
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/J5iH71rsuuNM2dRM4xEq8LuIwJw.roa
Signing time: Sat 01 Jan 2022 08:03:19 +0000
ROA not before: Sat 01 Jan 2022 08:03:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 141.11.5.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39959070 (0x261ba1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jan 1 08:03:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=279887ef5aecbae34cd9d44ce3112af0bb88c09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b6:8d:7b:10:88:da:db:b1:04:b4:c3:04:8e:
93:33:0f:a9:93:92:ea:6c:8b:6e:95:36:1d:3f:4e:
bd:0f:d7:07:df:b2:88:29:6c:48:4f:d6:40:d4:32:
6e:83:88:04:be:a1:9e:02:35:b3:fd:4d:bb:c5:2e:
de:a4:f0:4e:3c:b3:b7:3c:c8:51:45:6b:80:37:1f:
21:03:fe:7f:64:96:0b:a6:78:62:6c:4d:7a:ea:c5:
dc:dd:03:64:51:95:27:25:92:0c:19:9c:da:c1:a9:
8d:2b:3d:40:19:72:f1:cb:08:a7:1b:80:59:38:1a:
74:dd:cf:ee:7d:79:b2:80:c7:c0:71:c6:7a:e4:50:
52:ea:23:39:4b:b4:91:a4:a9:5f:91:42:42:ed:27:
30:23:f5:30:12:61:6d:21:7e:ac:2d:ab:41:63:c8:
0f:e8:d8:ee:90:70:23:eb:3a:fb:43:b7:74:00:26:
ba:ba:01:b5:65:48:66:1c:dc:f4:35:c9:fb:ff:23:
aa:94:3e:4f:ac:3a:71:e5:00:cb:e4:6b:f8:a4:38:
52:49:12:8f:9e:66:65:f5:f5:25:c7:9b:79:c1:55:
88:94:a3:c8:39:82:8b:42:9e:64:4b:47:66:ad:91:
7c:aa:67:c1:cd:85:96:65:b6:09:86:60:b1:4f:27:
7a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:98:87:EF:5A:EC:BA:E3:4C:D9:D4:4C:E3:11:2A:F0:BB:88:C0:9C
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/J5iH71rsuuNM2dRM4xEq8LuIwJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
141.11.28.0/24
Signature Algorithm: sha256WithRSAEncryption
44:93:50:4a:f9:6c:ad:6d:67:c6:f0:77:68:72:a1:88:3b:33:
89:d0:c4:12:57:04:87:1a:70:7e:e0:c0:d0:00:c4:03:2b:85:
3c:18:d1:e6:9d:9e:df:8a:8a:14:51:9b:e3:3e:12:2e:82:b4:
70:7f:55:98:57:a2:01:55:75:54:6c:20:0e:68:bf:21:7b:e6:
d6:92:25:77:53:8c:e5:29:8f:11:5e:86:26:b7:a1:f0:02:02:
8e:c0:65:97:06:61:64:77:bf:be:25:c1:bc:0b:42:ab:6e:0d:
d9:a6:93:3c:48:d6:c6:28:27:03:07:d4:59:1b:43:b1:9c:46:
e8:42:3a:ea:95:c5:ce:34:ab:49:9e:91:c8:aa:1a:65:f3:b8:
cc:fe:e0:7f:f2:f4:7a:e8:d4:84:ce:88:2f:a4:aa:85:cc:14:
a5:35:fd:9e:b5:b3:44:a7:d9:a3:68:f4:98:b3:a9:e7:65:7a:
5a:9a:82:5b:e0:68:05:52:6f:d5:7e:ba:d3:c5:19:58:24:24:
33:a9:dc:74:19:4f:00:7f:4a:ac:e7:b5:43:58:45:51:30:d1:
63:c9:ed:80:02:16:94:45:86:af:ce:0a:55:81:3f:53:e4:69:
01:ab:3a:57:fb:b7:c5:21:fb:ef:b0:49:9e:3d:3c:a4:a5:2c:
59:55:a6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org