Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/NwnrtJY4-cSPbAtWcSIZlU_D2Go.roa
File: NwnrtJY4-cSPbAtWcSIZlU_D2Go.roa (raw, json)
Hash identifier: lhY1qKnLfToyLSPzks0cwP6WBZ5YqwUxe38m6d3V+DY=
Subject key identifier: 37:09:EB:B4:96:38:F9:C4:8F:6C:0B:56:71:22:19:95:4F:C3:D8:6A
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0181DD99A74B778B59740C89C612DDA28D80
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/NwnrtJY4-cSPbAtWcSIZlU_D2Go.roa
Signing time: Fri 08 Jul 2022 11:37:23 +0000
ROA not before: Fri 08 Jul 2022 11:37:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38337
IP address blocks: 141.11.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:dd:99:a7:4b:77:8b:59:74:0c:89:c6:12:dd:a2:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 8 11:37:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3709ebb49638f9c48f6c0b56712219954fc3d86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:36:0b:d7:29:d9:25:00:a5:d9:c7:96:f4:de:
3e:e5:7b:b0:63:c5:3e:56:aa:cd:94:8a:0d:02:b9:
60:81:a4:01:22:39:ce:1a:a9:03:58:5d:d8:1a:a2:
45:99:c0:da:f4:70:b9:72:62:7c:58:81:74:08:23:
c6:96:f3:e8:29:48:59:ff:0c:e9:df:05:f4:10:6b:
08:ce:fc:c3:df:c9:ab:02:77:3c:ce:52:47:b7:a9:
6f:5b:e9:0f:8e:1a:5c:8a:51:55:f0:29:65:3d:93:
1b:57:0c:60:56:10:ac:3d:e0:ea:95:05:bb:b3:65:
b9:f3:29:5c:e3:0b:3b:0a:a1:77:bc:af:68:96:a2:
ef:4b:57:af:8e:1c:3e:a5:43:c6:64:75:0f:0b:ad:
ba:68:fa:77:4b:32:3c:9b:44:bb:fc:f0:6a:e5:32:
ef:00:87:2f:9e:20:a8:39:82:31:53:45:2f:2e:67:
b1:b0:3e:ff:f9:7a:73:f8:59:7a:83:b9:b4:75:46:
1d:c4:0e:25:83:6b:88:e7:61:58:e7:81:7d:c5:66:
c6:69:6d:69:5e:ab:38:86:a2:59:23:06:3c:d7:31:
65:a1:ca:61:5f:85:40:7a:d1:81:6e:11:d1:86:92:
e7:7c:d1:01:3a:21:1a:8b:f5:d6:71:1a:9f:9e:73:
35:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:09:EB:B4:96:38:F9:C4:8F:6C:0B:56:71:22:19:95:4F:C3:D8:6A
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/NwnrtJY4-cSPbAtWcSIZlU_D2Go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.106.0/24
Signature Algorithm: sha256WithRSAEncryption
52:87:b5:2f:5e:00:c9:f0:78:e7:90:9b:bc:e6:cb:c7:77:db:
ff:db:06:be:ac:68:2a:7e:e0:89:25:e4:b5:a8:11:0b:b4:ff:
c3:54:32:b2:18:8a:fb:0c:e4:36:eb:55:3a:a9:b1:5a:e0:f4:
64:a1:01:d1:c5:e2:d5:50:56:c8:e0:e0:ab:94:94:0a:03:a9:
b5:50:0f:e1:77:5d:96:4e:ab:96:cc:50:14:c2:77:44:be:00:
61:d9:0c:9b:a1:a6:26:25:13:a1:06:0c:b5:e4:a0:05:1f:11:
1d:41:0c:93:4b:c9:9c:ee:63:d5:93:a0:26:6a:fd:dd:04:1f:
6f:05:46:1f:33:4c:cf:47:9b:11:8a:4e:8c:28:48:8f:e5:bd:
19:e4:71:43:b1:76:2c:a3:0b:bb:c7:aa:87:5b:15:d3:af:5a:
ba:cf:b5:2b:93:38:5e:5f:7e:47:5b:e2:2b:2c:54:ba:98:cc:
30:28:45:54:d4:df:85:93:c7:a8:50:a1:14:a3:f9:5e:b4:06:
aa:7b:90:2b:12:fc:fb:13:d9:aa:4b:1f:47:a5:08:89:70:da:
d1:6a:47:58:c2:e9:ab:59:1d:cb:30:1b:a5:69:65:d0:38:bb:
7a:62:5a:56:a3:4a:07:7c:d9:0f:52:63:da:28:62:9a:36:11:
26:52:f9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-fra.rpki-client.org