Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/XnpXHWnWNAx0-W1-akDcGFFhZpk.roa
File: XnpXHWnWNAx0-W1-akDcGFFhZpk.roa (raw, json)
Hash identifier: 9D/hiPOy+NO8zqAlZqz+t5L2hpp0b7D3p0d8w46iEPE=
Subject key identifier: 5E:7A:57:1D:69:D6:34:0C:74:F9:6D:7E:6A:40:DC:18:51:61:66:99
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04FA1747
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/XnpXHWnWNAx0-W1-akDcGFFhZpk.roa
Signing time: Mon 06 Jun 2022 11:41:36 +0000
ROA not before: Mon 06 Jun 2022 11:41:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 141.11.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83498823 (0x4fa1747)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jun 6 11:41:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e7a571d69d6340c74f96d7e6a40dc1851616699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:48:8b:a4:24:b8:47:c1:42:83:f1:2a:9b:93:
6c:47:3f:cd:09:7c:62:fa:79:98:4f:80:ed:3f:d7:
d7:c2:47:d0:3e:5d:dc:2e:d0:e8:4c:39:23:8f:6d:
2b:33:36:fa:9c:20:f1:b6:7b:6e:86:43:58:ba:81:
cf:11:53:5f:da:38:9e:be:b1:ce:95:7b:f6:06:b5:
b9:05:44:8e:e6:15:ed:18:2c:90:c7:7e:b4:13:99:
5c:fc:1f:2f:b3:20:b9:9b:74:ce:65:2f:3e:c9:ab:
0e:97:40:38:bf:75:2f:61:7c:fa:b0:d1:1b:cc:f0:
05:1e:ad:28:46:ef:27:f4:03:48:ee:b2:2c:75:24:
7c:af:d0:15:b0:79:b8:38:65:7c:ee:58:95:a0:22:
63:79:86:a2:77:97:3d:7b:c9:a2:a9:e2:0d:da:32:
0e:2e:9d:40:79:6f:91:24:d2:32:fe:28:2d:c2:8d:
91:35:ff:4a:39:40:8d:b0:97:33:af:3b:48:da:84:
d4:7e:b7:52:57:1f:4e:97:c2:de:2e:f2:a5:69:d6:
0a:9a:6c:a6:d7:0d:04:0b:34:cb:16:0c:22:3b:ca:
60:a6:bd:3f:d9:32:3a:43:96:0f:cc:ad:40:70:08:
af:ee:f0:db:92:83:6d:6c:9e:f8:a1:9d:d0:3f:87:
77:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7A:57:1D:69:D6:34:0C:74:F9:6D:7E:6A:40:DC:18:51:61:66:99
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/XnpXHWnWNAx0-W1-akDcGFFhZpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.98.0/24
Signature Algorithm: sha256WithRSAEncryption
55:a8:f2:2b:a7:95:92:47:89:c7:92:6e:37:7b:bf:08:76:50:
e3:3d:31:98:68:61:bb:0c:11:07:c5:68:a2:4b:14:b6:80:0a:
36:c9:40:f9:eb:8e:1b:94:3a:47:dd:54:13:c5:62:6e:bf:99:
83:e8:f3:80:89:19:c4:a9:67:b6:b2:89:f0:3e:fb:22:95:6b:
cc:8f:ce:03:db:90:5a:78:f4:dc:de:fc:03:6e:61:34:da:f4:
34:64:5e:da:be:c7:ca:63:c9:1e:50:06:f7:83:11:83:f6:1f:
e7:30:33:f3:42:63:f8:2f:3b:bc:f9:82:9a:e1:6c:2e:ee:2b:
54:d9:5f:72:d9:7e:16:76:b6:57:f7:98:af:e7:1e:91:4d:a4:
4b:46:66:e8:72:db:b8:ba:fb:53:66:e1:ed:43:b6:17:19:74:
6d:21:fa:48:14:de:f0:d5:dc:c8:79:73:1a:5d:01:fd:e6:98:
67:8e:2b:9f:47:18:98:9b:da:d8:6a:6a:58:11:dc:ce:ab:7f:
88:17:bc:96:8e:b3:49:9e:89:3c:39:7a:86:9f:9a:d1:de:45:
76:33:13:ef:02:e3:59:8b:53:90:c8:20:d9:2a:20:95:ce:65:
16:4b:00:7a:3d:df:ce:53:2f:1e:69:36:66:e1:46:bd:e2:1f:
6e:6e:76:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-fra.rpki-client.org