Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/WZwzMKSrOjnnLHXVX8GesRuN6Pw.roa
File: WZwzMKSrOjnnLHXVX8GesRuN6Pw.roa (raw, json)
Hash identifier: OslbIVrmtme4k8xqc3zRdppwVPNlBa+64jbs0+A3qj0=
Subject key identifier: 59:9C:33:30:A4:AB:3A:39:E7:2C:75:D5:5F:C1:9E:B1:1B:8D:E8:FC
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01847C5E965A25F25DEC599053D92685C994
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/WZwzMKSrOjnnLHXVX8GesRuN6Pw.roa
Signing time: Tue 15 Nov 2022 17:38:04 +0000
ROA not before: Tue 15 Nov 2022 17:38:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 141.11.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7c:5e:96:5a:25:f2:5d:ec:59:90:53:d9:26:85:c9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 15 17:38:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=599c3330a4ab3a39e72c75d55fc19eb11b8de8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b2:89:97:df:25:62:24:c3:40:db:83:bf:26:
09:ab:ed:34:08:47:c4:b2:dd:9b:8d:09:e9:85:22:
a6:13:cc:b1:18:c9:74:54:58:42:c1:c4:85:4c:43:
91:e0:86:8c:cd:69:07:52:6f:14:ea:a7:a4:77:bc:
98:e6:f7:ad:c3:49:cf:f3:7d:c1:8e:d8:bd:de:94:
0c:3b:f8:1c:90:d3:d6:db:ba:f3:b5:f9:2c:78:fa:
1d:d5:ab:65:5e:1e:2e:2d:d5:7a:4e:e0:00:dd:49:
af:30:3c:ee:ec:e3:bc:bb:d6:db:8c:2d:8e:6a:c5:
ee:ed:8e:6a:5d:24:7e:46:cb:77:34:db:8d:81:5b:
d6:45:60:5f:ee:5c:28:08:31:69:1f:56:b3:a6:f6:
5e:cc:02:cc:48:fd:b5:ef:94:23:76:1e:7f:ac:54:
94:ac:6c:d8:a9:19:85:20:76:a8:33:3b:b0:6e:1c:
2f:dd:c5:2d:e6:39:4d:70:f2:48:d2:89:22:00:b4:
34:e0:31:d8:28:f0:cb:cd:4d:5d:db:69:b0:40:49:
a6:89:52:37:db:92:3f:4c:bf:7e:d4:58:49:d6:a1:
73:25:6a:fa:a8:20:1d:4d:c4:3c:9d:d6:c4:91:18:
93:af:eb:5a:c4:2e:ce:3f:fb:ae:19:96:df:fd:4d:
aa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9C:33:30:A4:AB:3A:39:E7:2C:75:D5:5F:C1:9E:B1:1B:8D:E8:FC
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/WZwzMKSrOjnnLHXVX8GesRuN6Pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.105.0/24
Signature Algorithm: sha256WithRSAEncryption
64:cc:30:96:5a:c7:87:a2:8d:f5:1a:8f:89:66:66:64:29:d6:
e8:17:85:fc:a1:69:03:d0:44:90:97:9b:e2:45:f5:41:bf:55:
ac:4a:83:9d:65:e3:e4:cb:57:06:92:cf:80:8f:a3:89:b0:ee:
de:2c:3e:e2:83:5f:7a:58:7a:29:ba:38:8d:db:90:bd:ba:1c:
8f:60:bb:37:55:7d:f8:ae:6f:3a:69:f8:4e:41:26:fd:ed:24:
48:67:03:1f:c4:b1:01:d2:1e:dd:d6:35:a8:b0:94:a4:5a:96:
6a:9c:a8:e5:84:a8:91:44:4e:b3:8c:50:a3:2c:40:d2:1f:df:
ed:a3:0f:96:d3:6d:dd:fc:80:cc:d1:bd:4a:43:f6:30:99:29:
e2:e0:e4:19:a7:ad:2a:d6:4e:b2:c1:0b:56:d6:f6:23:7c:d9:
f8:d9:ea:7b:61:84:ea:94:cc:2c:6d:6e:d5:a7:13:5c:47:0b:
9b:b5:21:2d:5d:f6:a6:ff:42:61:97:f6:c9:d8:60:f4:5d:7e:
ad:4b:24:fa:0d:91:a4:30:29:88:48:3d:bf:40:67:64:37:b9:
6d:f0:28:c1:80:88:f7:4c:8c:56:49:46:c5:17:27:76:0b:ea:
94:17:a8:66:c9:9d:c3:46:1b:f8:5e:78:75:8b:34:6f:18:2f:
32:83:63:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-fra.rpki-client.org