Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/NpaYcOmqPnlleAfjMNxVizFNx8Y.roa
File: NpaYcOmqPnlleAfjMNxVizFNx8Y.roa (raw, json)
Hash identifier: i5EKv8En9yxQ13kdjW3XEZoc4t54v0eQcvRTpXTu8Mk=
Subject key identifier: 36:96:98:70:E9:AA:3E:79:65:78:07:E3:30:DC:55:8B:31:4D:C7:C6
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01828E1561C9D5CAFF2AE00282FB8464F5D3
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/NpaYcOmqPnlleAfjMNxVizFNx8Y.roa
Signing time: Thu 11 Aug 2022 18:05:42 +0000
ROA not before: Thu 11 Aug 2022 18:05:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211376
IP address blocks: 141.11.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8e:15:61:c9:d5:ca:ff:2a:e0:02:82:fb:84:64:f5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Aug 11 18:05:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36969870e9aa3e79657807e330dc558b314dc7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4d:51:db:24:76:fb:c6:3c:6c:d2:ef:cb:cd:
75:f5:45:48:02:0a:b6:9b:fe:d4:20:0c:04:b3:1d:
98:33:d1:c2:e0:29:f0:b7:3f:48:9c:94:1d:3c:31:
e5:68:ac:3f:76:c5:ad:68:b9:d4:72:86:eb:b7:34:
5a:54:dc:aa:9b:a4:30:c8:c4:63:be:11:3d:ff:0f:
37:91:1f:1c:13:68:81:0d:f5:ed:1c:c1:d3:01:19:
0c:30:30:1f:51:69:1b:c0:62:db:08:ff:93:37:c0:
4c:8d:f7:40:11:de:be:59:51:0b:5c:72:c9:6d:fb:
d5:f7:57:6b:11:35:92:c0:27:eb:66:93:38:83:16:
ff:ac:b5:dd:8d:bf:00:22:1d:0f:2c:7d:34:52:19:
0b:e5:85:70:37:2d:60:3c:3e:80:dc:53:94:09:70:
c0:af:10:e9:8a:77:51:39:e9:80:19:2c:b1:00:54:
29:c5:ec:0d:e4:c5:33:b5:5e:c7:cf:b3:5d:d8:d6:
76:d4:73:ec:89:57:38:7b:a2:1b:ef:1b:4b:48:c3:
58:3f:0f:55:02:cd:9c:e7:07:14:52:c5:e4:95:0c:
04:ca:0b:61:0e:3e:2e:9d:0d:d9:dc:f0:b9:1d:4b:
09:3f:77:4e:98:d5:ef:d1:29:5f:c3:10:63:4c:ad:
95:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:96:98:70:E9:AA:3E:79:65:78:07:E3:30:DC:55:8B:31:4D:C7:C6
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/NpaYcOmqPnlleAfjMNxVizFNx8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.127.0/24
Signature Algorithm: sha256WithRSAEncryption
51:bd:da:98:02:88:03:9d:59:f5:5c:1a:c6:e1:3e:3c:00:36:
22:98:87:13:ec:37:23:3c:25:f9:38:9a:41:3d:1b:46:86:b5:
57:78:69:cd:67:e2:bf:c0:60:36:84:83:73:02:e3:79:6e:bf:
58:a6:09:be:f8:08:d6:7c:71:5d:6a:a3:fc:c2:08:ac:e7:30:
ac:73:f0:c9:59:14:53:ff:7a:57:c1:97:68:7c:a9:02:fa:83:
c4:25:fc:d1:17:7b:3c:86:73:14:09:3d:49:49:fa:4b:f3:b3:
ba:9c:38:ad:aa:f8:d5:aa:42:45:86:d5:d1:a5:1c:f2:f9:95:
4d:2e:c3:c5:a1:f3:e1:da:ac:fd:a6:a5:3a:13:e5:90:ee:5e:
8a:1a:45:17:9e:d1:38:f5:f8:25:71:d9:b7:55:44:98:4f:3e:
96:05:c6:49:75:42:20:25:00:75:9e:74:a8:69:38:c9:74:60:
44:5e:6b:a5:73:79:a2:2b:f3:05:9b:89:ef:88:cd:18:f0:70:
01:bb:ea:98:8f:b3:c2:bf:6b:9b:5e:e1:f6:ad:f1:79:7b:27:
15:7e:cc:37:a3:ec:d4:74:34:46:93:8e:9f:58:f9:73:3f:64:
84:0d:e0:2e:f2:32:da:f8:3a:1f:5c:c7:e4:d0:5d:ab:11:1f:
a5:34:2e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-fra.rpki-client.org