Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/RTC5LedLujvKYFoHTV57xzXoSzk.roa
File: RTC5LedLujvKYFoHTV57xzXoSzk.roa (raw, json)
Hash identifier: qj4XSwjIsej2f5BChpjI933slvbpYov8ih47rfs5f7s=
Subject key identifier: 45:30:B9:2D:E7:4B:BA:3B:CA:60:5A:07:4D:5E:7B:C7:35:E8:4B:39
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0183C161E2EE51EA0FDEE34E5593533DD58A
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/RTC5LedLujvKYFoHTV57xzXoSzk.roa
Signing time: Mon 10 Oct 2022 10:12:41 +0000
ROA not before: Mon 10 Oct 2022 10:12:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 141.11.84.0/22 maxlen: 24
141.11.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c1:61:e2:ee:51:ea:0f:de:e3:4e:55:93:53:3d:d5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Oct 10 10:12:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4530b92de74bba3bca605a074d5e7bc735e84b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:ed:00:da:26:cd:b3:44:d6:8b:b2:55:e9:
19:f5:3f:4e:3c:e0:dd:34:ee:a0:cd:0c:51:59:ea:
a4:7b:29:7a:8b:9b:ba:94:6b:c4:d6:1a:d3:68:11:
3a:6f:66:9e:cd:e6:c4:9c:a5:9a:71:6b:dc:a6:73:
5e:b4:9c:54:86:f4:ab:ee:cb:d6:2f:db:7c:ee:8b:
4c:0b:f1:78:7d:03:aa:42:d8:f6:6a:e1:27:70:5b:
db:29:93:67:33:87:fb:3a:4f:1a:df:5e:21:96:87:
7b:5e:97:9e:74:ff:3b:be:64:67:5f:fb:78:98:57:
4b:1f:e7:84:a1:b6:4a:28:71:40:f5:0d:d3:89:3e:
e9:76:b7:57:38:f2:7e:7e:65:02:d6:ae:86:20:75:
48:b0:de:ca:d6:fc:38:34:1a:62:00:bb:d2:5f:49:
f6:68:86:0c:c3:e6:5c:bc:1e:a0:6f:20:17:5c:a4:
25:1d:e2:f2:12:82:7e:a2:db:e6:de:cf:45:82:f6:
12:b6:d5:f7:26:27:3e:6f:72:68:4e:b9:23:47:b4:
5f:fb:62:a0:ee:8b:f8:05:87:45:06:f6:59:f9:06:
98:6c:b5:a6:5b:c6:79:a2:76:b0:8b:0a:da:74:a6:
7f:cc:15:cf:10:f4:d2:53:54:38:94:24:44:01:7f:
f3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:30:B9:2D:E7:4B:BA:3B:CA:60:5A:07:4D:5E:7B:C7:35:E8:4B:39
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/RTC5LedLujvKYFoHTV57xzXoSzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.84.0/22
141.11.212.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:14:32:9c:4c:80:31:b1:66:37:9f:1e:00:d2:6b:b2:b2:8f:
2e:7c:8b:e9:ff:d7:85:dd:2f:08:14:55:d3:e1:c7:e1:cf:ba:
79:47:d4:77:01:e6:9e:f0:1a:2d:20:c8:62:cb:a5:09:ab:72:
fe:70:20:cc:5b:0d:ba:3d:75:28:51:5e:d1:13:7b:9a:05:51:
f0:67:e8:97:fe:05:5d:46:06:1b:a4:a8:9a:31:d9:93:c5:5e:
fc:18:64:a1:86:11:ca:5b:87:6e:3e:dd:6f:cb:e6:ee:51:03:
b1:6e:80:36:f0:fe:a3:e9:49:d9:1f:9f:b2:c7:c6:c5:14:7f:
87:44:6c:0b:cb:85:11:bc:e1:83:1e:e5:e1:50:b4:d6:1e:8b:
18:1a:d1:6b:2f:32:8a:64:26:e3:d6:1d:50:c6:07:43:b8:5c:
90:79:0c:fb:f8:f8:5c:36:e9:09:ce:10:89:7b:89:33:94:f3:
3e:0c:6c:5d:8f:57:7f:32:cf:39:af:9f:74:e0:f4:76:36:32:
42:a6:20:7b:3c:ae:20:f3:83:e7:3a:7a:ca:8c:82:5d:95:ee:
7a:f5:50:fd:88:6d:a8:60:aa:48:fc:20:d6:b6:86:00:8c:b7:
7c:3f:8c:f0:ea:2f:07:aa:f1:bf:da:3d:a3:72:ab:23:a6:34:
3a:6e:bf:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-fra.rpki-client.org