Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/N-pNQARiDVTfPfASUQWoEOH9bk8.roa
File: N-pNQARiDVTfPfASUQWoEOH9bk8.roa (raw, json)
Hash identifier: 5h0QGYd+VPQhmeXFrM1tCb4P9EcOS2q4h4EzQaQzTfU=
Subject key identifier: 37:EA:4D:40:04:62:0D:54:DF:3D:F0:12:51:05:A8:10:E1:FD:6E:4F
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0551A421
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/N-pNQARiDVTfPfASUQWoEOH9bk8.roa
Signing time: Sat 02 Jul 2022 11:16:47 +0000
ROA not before: Sat 02 Jul 2022 11:16:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399641
IP address blocks: 141.11.177.0/24 maxlen: 24
141.11.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89236513 (0x551a421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 2 11:16:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37ea4d4004620d54df3df0125105a810e1fd6e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:93:5f:3e:19:fd:8a:c0:25:43:0b:9d:3b:79:
8d:e6:66:0d:54:8d:1f:bb:2b:72:63:3b:46:4c:59:
d0:66:9c:61:6e:31:69:be:a2:20:1d:89:88:9e:3c:
9a:53:69:66:f8:52:4d:52:14:aa:d7:2f:39:7c:8a:
2a:10:d0:25:20:0f:2f:84:3d:41:23:1d:87:15:ce:
b9:af:43:0f:6f:5c:91:0d:cd:74:49:ce:77:f7:9b:
10:c1:11:7a:8a:64:90:c7:37:cf:17:13:84:dd:fa:
be:21:9b:bf:de:5f:3a:f5:ea:6c:74:bb:94:b6:ec:
47:62:71:58:f0:71:50:df:7b:e5:04:81:ab:d0:07:
54:fb:47:f0:48:e8:2a:ee:10:e9:47:e3:6e:7e:02:
02:7d:34:4b:b7:72:a1:ae:b2:92:b7:ce:44:8e:89:
f7:02:16:a3:18:8b:50:2a:c0:2f:76:e7:5a:24:31:
09:86:bb:ed:67:cc:b0:45:8b:fe:40:80:bd:b1:9b:
32:d3:dd:9a:67:3d:c5:73:68:d8:33:28:f8:04:de:
a2:04:b7:37:14:82:e3:df:e7:d8:e3:7f:f7:f5:8b:
91:2c:ae:0f:fe:7f:53:63:f3:84:43:43:ff:20:55:
98:6a:53:cb:e0:68:dc:85:34:ad:e7:40:97:af:b2:
2a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EA:4D:40:04:62:0D:54:DF:3D:F0:12:51:05:A8:10:E1:FD:6E:4F
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/N-pNQARiDVTfPfASUQWoEOH9bk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.176.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:8e:cc:ce:79:6e:23:8e:11:db:d8:69:bd:2d:8f:1c:2a:89:
1f:91:6d:f8:11:56:23:2c:1c:c3:3c:fd:67:6c:d0:8b:dd:ce:
45:27:55:81:0c:f2:f2:a1:b8:98:6c:0d:66:63:7c:bb:d9:f4:
c6:42:ba:0f:a4:09:7e:f0:76:c6:48:3c:44:1c:94:e2:7c:9a:
ec:9a:f6:48:ee:14:b3:c2:1e:b6:9f:7c:b2:ea:a2:a9:70:6b:
e7:02:84:08:59:07:ec:33:d3:fc:f3:33:0c:6f:e3:e7:50:dc:
60:37:03:f9:6f:0e:5f:8b:0d:21:ee:b0:1c:f9:6f:dc:f7:91:
1b:96:db:0e:46:a3:f3:13:05:8e:1c:57:da:05:38:d2:53:51:
7d:bf:16:6e:04:1b:6e:5e:b3:68:d9:c0:2e:a3:6b:17:43:ce:
2e:d3:38:8a:8e:a9:c0:2e:e7:d5:e3:49:ba:92:6c:66:cb:df:
f3:81:f0:fb:c4:a7:8b:a8:24:a2:db:23:a4:41:09:ea:a3:d4:
4e:1d:a0:8a:07:bf:7c:52:65:d5:30:67:fa:18:48:8b:be:2d:
f8:c6:de:c4:d5:e6:2a:f2:3a:b8:1d:70:0e:8e:30:f1:26:0b:
3a:22:da:d2:8b:75:4b:82:3c:01:97:1e:14:8d:7f:ec:ad:c3:
31:b3:c3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-fra.rpki-client.org