Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/RXs3IQfKu-t5DZhvBt3C6Km3uEI.roa
File: RXs3IQfKu-t5DZhvBt3C6Km3uEI.roa (raw, json)
Hash identifier: R3u38hxCjAjp9GsJH9aKJttBpLdosfPFlu4OlyITPPk=
Subject key identifier: 45:7B:37:21:07:CA:BB:EB:79:0D:98:6F:06:DD:C2:E8:A9:B7:B8:42
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 050253B8
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/RXs3IQfKu-t5DZhvBt3C6Km3uEI.roa
Signing time: Thu 09 Jun 2022 14:47:04 +0000
ROA not before: Thu 09 Jun 2022 14:47:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 141.11.192.0/19 maxlen: 24
141.11.98.0/24 maxlen: 24
141.11.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84038584 (0x50253b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jun 9 14:47:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=457b372107cabbeb790d986f06ddc2e8a9b7b842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:f1:5a:02:d5:9f:84:86:58:89:2a:7a:44:
55:bb:2d:85:e1:7b:0e:8d:ab:52:e0:00:29:8d:76:
e8:7e:a5:ad:9c:98:68:d0:af:04:75:6e:05:f3:bf:
c3:b9:c8:be:7d:b2:7d:81:af:dc:72:3b:1a:05:f6:
c6:22:e2:f5:47:d5:3c:d7:21:1a:2f:53:2f:23:bb:
92:c7:d3:79:de:5a:49:0c:ba:79:b0:ff:ee:70:a6:
e4:44:74:22:d3:1f:59:3b:84:93:ce:be:48:d5:89:
91:9f:17:9a:b1:ed:40:f3:21:e2:7f:74:ba:53:6a:
81:37:ac:9c:37:15:23:16:e7:43:a8:49:43:95:ba:
d3:0d:ff:23:60:8d:9d:42:46:0a:1d:d3:6b:ce:65:
7b:f8:af:dd:ba:f3:26:58:c0:90:b0:7c:61:16:d7:
99:02:37:4c:e6:f1:f2:fa:3d:15:b0:f6:f5:7a:90:
c3:3b:61:cd:59:9d:c3:2b:02:bd:5b:f5:e6:f3:e8:
1e:10:e6:7d:bf:63:87:41:ac:fc:8b:d1:9b:e6:9c:
ba:f0:f2:2a:06:a3:01:46:dd:b5:0a:86:d4:15:ba:
7e:11:ee:5c:fb:83:3d:4e:26:fa:fe:be:8e:3b:5f:
a8:7e:fd:a1:d4:b9:fb:e7:09:12:dc:f8:87:dc:09:
89:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7B:37:21:07:CA:BB:EB:79:0D:98:6F:06:DD:C2:E8:A9:B7:B8:42
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/RXs3IQfKu-t5DZhvBt3C6Km3uEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.98.0/24
141.11.127.0/24
141.11.192.0/19
Signature Algorithm: sha256WithRSAEncryption
8b:c4:9d:87:c3:6e:37:53:93:19:6c:32:e1:85:e8:1d:69:eb:
06:47:73:4a:96:7e:9d:29:27:5f:21:89:09:1e:74:1d:6a:42:
58:78:4d:0c:3f:8f:cf:a2:bb:6a:b2:9d:a4:4e:e3:14:ef:0f:
6a:9c:9d:70:23:2d:b9:a6:36:29:53:67:84:c1:5b:30:f7:60:
50:66:0b:e1:6a:bc:9b:4a:45:64:a8:42:77:2b:09:3f:96:76:
53:7c:db:72:a6:14:b5:25:b5:be:93:99:02:25:5d:f7:db:4d:
d9:f8:f2:66:e8:cf:f0:5d:d9:f4:1b:f8:33:cf:84:00:2d:a3:
2b:79:f0:ff:0a:1d:07:65:90:be:d3:cf:8e:2f:70:1c:bc:6a:
78:28:32:bb:e5:9b:bb:27:97:e3:43:e5:3a:e1:c2:3d:32:76:
cc:71:0c:75:76:19:27:46:3a:63:da:64:c5:bf:10:b8:eb:d5:
2d:28:32:d9:dc:78:34:44:8c:64:35:f1:37:e1:bb:67:aa:2f:
3c:9e:2b:dc:92:a5:4b:cd:ed:9b:ab:35:7c:d7:eb:8b:65:f5:
8c:cd:ea:ac:5f:19:d0:7b:c5:e9:41:33:d1:b9:95:44:93:3e:
70:77:ad:98:5a:7e:cd:e6:bd:f9:f8:c2:15:b1:28:50:2d:fb:
d2:59:63:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org