Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/XicFk9AD15Fgp3rc6wKlz_V0Z1I.roa
File: XicFk9AD15Fgp3rc6wKlz_V0Z1I.roa (raw, json)
Hash identifier: /BgfdGmSZpd30q9ZDLJFzALUr0ncaRGbz/W+HhhIHpQ=
Subject key identifier: 5E:27:05:93:D0:03:D7:91:60:A7:7A:DC:EB:02:A5:CF:F5:74:67:52
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01831351613C416299FB40E639A6C10D438D
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/XicFk9AD15Fgp3rc6wKlz_V0Z1I.roa
Signing time: Tue 06 Sep 2022 15:00:43 +0000
ROA not before: Tue 06 Sep 2022 15:00:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 141.11.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:13:51:61:3c:41:62:99:fb:40:e6:39:a6:c1:0d:43:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 6 15:00:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e270593d003d79160a77adceb02a5cff5746752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:77:ff:bb:1e:dc:07:88:24:fc:f4:5f:26:d2:
a9:f4:4d:a7:2a:39:cc:6c:a4:cc:af:31:70:34:b9:
e1:61:84:49:ba:1e:e2:df:02:5e:dd:1a:12:c6:ee:
72:15:41:ee:37:03:b9:8a:4c:45:38:ab:0b:a5:b2:
68:3b:c5:de:2a:39:1a:56:d8:0d:5e:7d:fe:f5:fb:
6b:d4:9a:37:89:1d:13:70:fb:87:c9:3c:9f:31:7c:
a0:36:c6:8b:69:78:8f:43:ee:e5:4f:13:8f:35:19:
3e:af:ee:ad:c7:e5:83:dc:94:89:6b:86:8d:f5:ab:
b8:9b:37:cd:8b:08:d1:7c:fb:b8:5d:49:96:a7:6c:
dd:a9:96:15:db:34:7e:ed:92:a5:e1:d5:88:47:53:
23:6e:7b:aa:90:54:e7:3e:63:10:dc:fd:c7:8f:2b:
db:e0:f5:06:ec:d3:ec:5a:33:23:08:ad:a3:2b:c1:
2a:47:b1:43:c5:50:ae:26:c2:74:2c:b3:ac:bd:e1:
5e:01:f9:eb:34:db:b7:e2:db:57:7d:bc:a0:d8:22:
c6:b0:93:0f:cc:80:47:52:7d:bc:70:d0:5a:90:1a:
c9:af:de:14:72:27:8c:26:b6:04:fe:f1:f3:be:59:
f3:59:6d:b1:2a:14:bf:79:cb:f7:9e:20:05:66:8f:
f8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:27:05:93:D0:03:D7:91:60:A7:7A:DC:EB:02:A5:CF:F5:74:67:52
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/XicFk9AD15Fgp3rc6wKlz_V0Z1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.98.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:4f:08:f3:ab:89:f3:38:b8:1b:ca:98:22:40:53:15:97:ef:
1c:8e:da:5f:97:b3:07:ce:ce:44:03:7b:3d:f6:97:b5:e9:fe:
2b:d1:60:02:16:af:20:e1:bb:52:ca:b9:0c:ee:c5:6e:14:e5:
53:f5:ab:cb:30:83:fa:eb:10:c1:7f:7d:1b:68:b8:c5:d4:ea:
4c:bb:0d:69:75:0e:45:02:3c:47:d4:ad:1c:af:d7:ed:c1:58:
23:75:e1:9b:6c:14:71:0b:f5:84:92:4a:97:48:5b:89:42:75:
80:90:a9:9d:d7:81:e1:d8:86:a7:87:86:c0:6b:57:70:c6:f2:
f1:30:bd:80:b0:f0:c6:19:97:85:fd:21:fb:58:8b:c4:02:ce:
e2:c6:f9:97:e2:f3:2d:fd:77:50:f7:f8:4a:f9:5a:58:10:93:
21:2a:35:c8:ee:aa:b3:05:5b:b9:31:98:24:4a:f4:b3:12:1a:
d1:7a:f4:1c:f3:e4:3d:8b:ff:13:b8:3e:85:e7:1a:d4:0a:1d:
a2:cf:21:72:a4:bd:87:e8:59:a1:38:45:ba:c1:b2:0b:72:e6:
c4:71:ec:b1:eb:66:a3:91:0f:4d:04:c4:6d:d5:1d:bd:19:5d:
76:04:8d:c8:2a:25:23:9b:25:f7:0e:05:bd:98:1c:af:7d:e3:
9a:dd:8f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-fra.rpki-client.org