Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/KdmKqkPCV9weghTZTjtzTjH983w.roa
File: KdmKqkPCV9weghTZTjtzTjH983w.roa (raw, json)
Hash identifier: alj710lwDrY2ea6SGQ2Nj1b/Li9vlcz75UvBtyXYOVU=
Subject key identifier: 29:D9:8A:AA:43:C2:57:DC:1E:82:14:D9:4E:3B:73:4E:31:FD:F3:7C
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04660726
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/KdmKqkPCV9weghTZTjtzTjH983w.roa
Signing time: Thu 05 May 2022 09:13:05 +0000
ROA not before: Thu 05 May 2022 09:13:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46573
IP address blocks: 141.11.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73795366 (0x4660726)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 5 09:13:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29d98aaa43c257dc1e8214d94e3b734e31fdf37c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ac:de:26:1a:fe:a4:c0:86:3e:66:96:e9:a6:
50:41:9a:1c:0f:85:37:0d:88:96:a4:b3:64:fd:db:
fc:a5:a3:74:5a:7a:3f:55:bc:68:79:cb:53:1c:a6:
fa:dc:0c:1e:c0:90:91:ca:d5:ff:3d:f9:16:6a:d4:
47:0b:15:82:76:41:60:d2:da:f2:c1:a8:e5:01:61:
93:13:74:ea:0a:99:a1:eb:6d:37:49:db:22:fa:40:
c5:2a:36:00:46:84:c0:72:6f:39:93:af:1d:29:a2:
98:a4:7d:ef:98:d9:10:cb:00:6c:77:1d:9f:54:1d:
e9:5c:e5:ca:27:ae:1e:66:b7:08:b8:2d:bc:46:58:
0d:1c:9f:5d:ca:2e:05:d3:c9:a5:3c:7d:e2:e0:98:
11:60:3d:6b:e0:d4:cd:7e:ca:22:d3:8b:06:d3:95:
2e:45:a7:4d:a7:78:58:da:c6:f1:f3:4b:6d:31:9c:
f8:61:c1:d6:0f:6e:f9:ff:39:a9:a8:26:a4:ac:4e:
27:a9:8d:1c:a2:63:d9:ec:24:58:a8:e9:0d:84:08:
85:43:d3:07:66:35:b5:a1:6b:db:92:d0:2f:77:84:
ee:0e:95:33:ac:48:c6:a5:55:0b:a7:e8:38:76:02:
ae:b1:ba:ee:9b:f1:e2:04:7a:93:61:7a:83:6f:1c:
2d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D9:8A:AA:43:C2:57:DC:1E:82:14:D9:4E:3B:73:4E:31:FD:F3:7C
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/KdmKqkPCV9weghTZTjtzTjH983w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.100.0/24
Signature Algorithm: sha256WithRSAEncryption
04:e8:66:10:01:3b:76:43:a5:21:fe:67:23:c0:3f:3b:ee:5f:
90:87:11:02:45:06:92:7e:e6:b3:fa:a6:9f:19:4f:1b:a6:ca:
59:f5:97:bb:8e:0f:b9:38:d1:b6:2d:1c:cb:bd:0c:c4:60:5f:
08:78:ea:00:db:7e:15:c0:37:a8:f6:77:55:78:74:99:b5:f1:
17:85:f8:b5:10:7b:45:42:1a:4e:69:5e:a0:76:62:b0:2e:e7:
b7:ad:04:5f:01:6a:fa:dc:2a:3f:b6:7d:ce:b4:46:33:8f:09:
33:a4:5b:a4:c1:65:a7:5b:d5:11:0f:cd:ff:ab:7c:09:fa:56:
e9:0c:99:76:f5:7f:95:23:5e:2e:39:9b:d9:97:d0:4d:fe:92:
d7:e9:45:12:85:c7:5e:bf:5f:da:21:8b:a5:69:c4:35:0f:d9:
d3:ab:6f:fd:0c:f4:f5:2e:40:b5:d2:eb:99:ca:79:d5:71:51:
fd:4a:f7:86:e9:42:14:a0:fe:78:63:b8:87:11:b4:ac:6f:69:
57:31:8b:ec:f2:a9:15:b4:56:b1:7c:0d:5e:9e:37:da:71:15:
de:09:54:8d:94:c6:dc:df:68:b4:be:3d:ea:56:f8:a7:ab:7a:
e9:cc:f5:1b:40:15:cd:dc:79:2a:e5:f0:b8:fd:3f:98:cc:6f:
78:ae:1d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-fra.rpki-client.org