Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/We1FJOEZXLwyEfVEwb8fRGFtsOA.roa
File: We1FJOEZXLwyEfVEwb8fRGFtsOA.roa (raw, json)
Hash identifier: vTn7KILhEGC0Rb64cWIwrGbYOeVxTbydFvrexu3alLM=
Subject key identifier: 59:ED:45:24:E1:19:5C:BC:32:11:F5:44:C1:BF:1F:44:61:6D:B0:E0
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0181DD99A82DB465F3BCE6318FA5B3594218
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/We1FJOEZXLwyEfVEwb8fRGFtsOA.roa
Signing time: Fri 08 Jul 2022 11:37:23 +0000
ROA not before: Fri 08 Jul 2022 11:37:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 141.11.105.0/24 maxlen: 24
141.11.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:dd:99:a8:2d:b4:65:f3:bc:e6:31:8f:a5:b3:59:42:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 8 11:37:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59ed4524e1195cbc3211f544c1bf1f44616db0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fb:d3:b1:c8:96:9a:8f:28:f8:d3:78:a5:89:
64:f6:99:dd:c4:3c:a3:fa:89:14:16:c0:32:f0:53:
01:af:1c:1b:fb:61:a1:24:6e:2f:51:a7:cd:14:04:
c5:2a:dd:57:bf:ea:ca:70:8c:01:5a:38:80:97:13:
74:d0:94:98:50:06:57:5d:14:e4:18:e0:fd:a9:09:
f6:a0:81:83:11:38:6f:58:b8:84:22:44:e0:ea:b8:
26:c1:e4:ba:28:22:11:99:2a:61:f4:f1:6d:07:77:
79:ae:4e:f5:58:f2:6c:54:be:a8:38:89:92:0e:2a:
30:2c:fc:28:92:6a:e9:bd:3e:07:c3:83:c7:8c:a4:
c7:ab:77:80:25:9f:fd:49:33:ea:53:05:36:81:5b:
e6:d9:b7:e5:34:16:d5:28:fb:fb:b5:d0:ac:38:f2:
d6:f6:89:43:4d:61:58:b2:3c:90:24:3a:f0:74:8f:
7c:f2:20:f4:fd:76:00:30:88:dd:ae:c3:92:6a:09:
82:75:39:4b:ec:ac:75:61:a2:95:55:3a:ce:69:f7:
ba:fd:db:71:af:cf:9a:39:48:2a:91:9e:ac:3b:9d:
5a:cc:40:2c:42:91:f9:cc:47:72:cd:84:d8:83:23:
93:44:86:15:41:b5:29:5d:82:3e:74:e0:7f:12:b3:
5e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:ED:45:24:E1:19:5C:BC:32:11:F5:44:C1:BF:1F:44:61:6D:B0:E0
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/We1FJOEZXLwyEfVEwb8fRGFtsOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.38.0/24
141.11.105.0/24
Signature Algorithm: sha256WithRSAEncryption
23:87:c2:1b:1f:e3:93:72:7a:b4:ed:d2:0a:68:0a:19:db:73:
23:8f:20:7e:a3:2f:cb:3a:a6:63:0c:0b:ed:1d:b2:ed:58:45:
1d:6e:3c:77:9d:67:d1:9b:d6:39:fb:91:04:ef:8a:57:22:e3:
0a:98:c3:72:dc:23:df:b6:5b:94:12:89:dd:1d:ca:e5:a4:87:
a7:ef:3f:a8:62:45:26:5a:b7:fb:6a:ee:9e:98:e0:bf:01:60:
ef:d4:21:06:55:ed:11:06:47:59:75:da:52:83:ff:b5:df:5f:
60:63:94:16:d2:77:ee:50:8e:df:f9:50:50:69:76:8e:67:03:
bc:a1:0a:81:62:25:b1:7a:74:71:f4:d4:d5:b2:e9:74:1a:89:
b9:ed:ae:8b:fc:de:cb:2f:bd:86:b2:4a:8b:61:59:0f:6a:f4:
38:2a:cf:ec:f1:f6:4b:a4:bc:2c:6a:2b:4f:5f:de:40:18:97:
dc:db:c2:53:0a:7a:2d:f6:74:7b:3a:d9:da:c8:62:13:ba:92:
e4:cd:10:1d:d9:a2:5e:62:0b:75:77:ed:30:e4:ea:a9:9b:78:
5c:ef:72:b9:03:be:ed:5c:3a:69:5a:c3:76:ef:8b:c6:38:71:
dc:44:28:30:06:85:79:76:92:96:0f:30:e4:9b:88:89:85:82:
b0:c0:f3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org