Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/M2lvzLt6kKwYPpl9s-bFSc9dX9M.roa
File: M2lvzLt6kKwYPpl9s-bFSc9dX9M.roa (raw, json)
Hash identifier: ZXMmCTMgCZlQgKuYM+xcvwh59y5ROg8zUCCT4FWut2U=
Subject key identifier: 33:69:6F:CC:BB:7A:90:AC:18:3E:99:7D:B3:E6:C5:49:CF:5D:5F:D3
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01840AB927891211A2896AF67C0EE7BC9DE1
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/M2lvzLt6kKwYPpl9s-bFSc9dX9M.roa
Signing time: Mon 24 Oct 2022 16:00:17 +0000
ROA not before: Mon 24 Oct 2022 16:00:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138687
IP address blocks: 141.11.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0a:b9:27:89:12:11:a2:89:6a:f6:7c:0e:e7:bc:9d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Oct 24 16:00:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33696fccbb7a90ac183e997db3e6c549cf5d5fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:fc:5d:31:e2:3c:31:d6:a6:59:08:02:87:
11:f8:5c:ba:e8:ae:70:79:1b:62:49:ba:d3:fa:65:
fc:23:f6:a3:75:e6:8c:8d:65:7f:ee:bb:2d:35:b4:
55:a5:9c:df:e7:38:59:a1:6f:29:b3:2c:75:e5:35:
d0:28:a5:dc:e5:db:f7:a9:8d:16:d3:70:2d:7f:8d:
2a:57:68:23:73:6a:13:ef:ac:67:75:7f:8c:fe:f5:
cc:df:7c:ef:fb:9a:a0:1f:54:2a:11:db:a1:be:c9:
3b:f2:0a:b4:d7:6d:60:2b:d4:67:ab:1e:2c:cb:5a:
46:e6:32:a7:55:20:09:5d:88:40:5a:6b:31:13:27:
0c:a5:a0:a1:0f:52:83:80:86:d9:d5:e2:e3:81:02:
93:83:2d:27:d8:50:9d:8c:70:98:99:c1:af:89:fe:
17:6e:bb:4d:5b:b5:da:93:05:0f:ba:c0:f0:4b:4f:
ed:14:94:4d:37:6f:70:8d:2c:19:cf:a3:37:4a:77:
50:e2:b0:a0:3b:4a:26:fb:7a:42:00:38:d5:39:04:
c2:98:9f:15:35:d1:86:9f:bd:c0:47:42:bc:42:59:
8b:19:7e:e6:d1:ba:64:a3:c1:be:e9:c3:df:82:58:
0e:be:6f:8c:04:47:fe:de:af:89:1b:a6:6e:5f:49:
76:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:69:6F:CC:BB:7A:90:AC:18:3E:99:7D:B3:E6:C5:49:CF:5D:5F:D3
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/M2lvzLt6kKwYPpl9s-bFSc9dX9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.190.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:4b:df:00:42:75:ea:fe:61:d0:b2:66:98:ae:f2:de:82:dc:
52:e1:a9:6a:1a:89:5e:5d:ba:f7:8b:4c:4d:ca:fe:4d:ac:44:
1e:3f:51:bb:51:85:d6:cc:21:6c:eb:1a:1c:ae:e9:39:21:87:
08:9d:0a:94:ba:0d:88:26:69:e4:32:22:4e:0f:b3:04:cf:a5:
cb:3b:e9:c3:1d:0f:9e:3f:60:2d:0f:a2:8e:6f:07:5d:91:e6:
05:a0:7b:b2:8f:9a:ea:15:1b:52:59:79:d3:9a:fe:df:da:9c:
31:fc:43:4d:ad:d3:fa:c4:12:55:8e:f2:8d:c3:a7:70:12:99:
f1:68:81:f2:0c:9b:59:d2:11:a5:5c:b8:e5:2d:71:68:24:50:
c8:84:27:66:37:d9:de:a4:73:72:eb:dd:73:ab:1b:53:1c:7c:
3b:fd:fe:9c:4b:32:db:14:a5:ec:03:7b:1e:5a:27:38:85:d6:
32:07:bd:80:88:c3:f4:95:fd:95:ee:fe:96:4f:3f:ab:bc:3f:
16:85:71:5f:35:ae:e7:ba:25:8f:e0:f8:c1:02:47:ad:ca:fa:
15:2f:4f:1a:31:91:3b:cc:7a:5f:00:67:b8:bd:dd:b9:d9:08:
53:e6:05:b5:31:b2:92:67:22:51:ca:76:f2:f7:1e:f3:c2:aa:
a7:27:6b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org