Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Y97pH4bW2rjs0ndP7QoEclXrtFI.roa
File: Y97pH4bW2rjs0ndP7QoEclXrtFI.roa (raw, json)
Hash identifier: IQwNyZwJsnvk4yf6dfQHCV6u4cXJE5Hb1K9uAbklHCs=
Subject key identifier: 63:DE:E9:1F:86:D6:DA:B8:EC:D2:77:4F:ED:0A:04:72:55:EB:B4:52
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 026D25AF
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Y97pH4bW2rjs0ndP7QoEclXrtFI.roa
Signing time: Sat 01 Jan 2022 08:03:23 +0000
ROA not before: Sat 01 Jan 2022 08:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62355
IP address blocks: 141.11.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40707503 (0x26d25af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jan 1 08:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63dee91f86d6dab8ecd2774fed0a047255ebb452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:99:8a:da:9a:4e:04:90:9e:c1:51:cf:8a:43:
17:d1:4e:4e:1d:37:22:b2:07:65:df:cf:9b:51:e3:
60:7f:25:24:67:f2:12:cb:99:5c:f2:2b:e9:09:a8:
5d:d7:30:19:1e:c6:42:f4:0d:16:ae:ed:8e:65:ac:
dc:ff:ca:a9:09:91:66:fe:da:aa:8c:ce:95:26:c6:
d7:53:22:7d:b9:0c:49:2d:4f:b5:85:57:82:2a:63:
e5:b9:e8:27:45:66:65:29:9f:08:16:2f:60:30:a4:
a0:64:a3:7a:21:ec:07:71:8e:8b:8b:76:5b:2f:60:
16:72:0c:2b:c7:21:32:e8:08:0b:e8:0e:97:40:a8:
cd:69:96:a4:7b:5b:6f:19:88:b5:18:1a:1e:97:07:
9b:9b:67:75:bc:4c:9b:6f:e1:f3:6e:f5:d7:14:bd:
64:77:93:30:32:b4:bb:29:bf:96:b6:de:b5:b0:38:
a0:32:bb:db:29:50:74:f3:0e:dc:76:dd:6c:4d:bf:
b0:8e:8c:a2:f8:dd:77:87:ca:34:e1:45:0c:32:33:
09:39:82:c7:9d:bb:2e:45:4f:0b:19:f4:32:28:b8:
37:5e:f2:9d:fd:e8:a0:27:40:fb:5e:3f:85:62:9a:
97:4d:b3:b1:77:4d:71:63:99:42:84:a8:cf:45:e9:
62:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DE:E9:1F:86:D6:DA:B8:EC:D2:77:4F:ED:0A:04:72:55:EB:B4:52
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Y97pH4bW2rjs0ndP7QoEclXrtFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.101.0/24
Signature Algorithm: sha256WithRSAEncryption
97:2e:26:5e:0d:73:79:92:c7:db:64:ca:0c:62:db:55:eb:c7:
a6:58:ee:a2:27:2a:85:2e:7e:1a:c9:d4:da:cd:2e:e5:da:c3:
5c:ad:36:69:9e:6c:2c:27:5f:81:7c:fa:3d:17:4f:f2:b5:8c:
a3:00:bb:7e:58:d9:c9:bd:b5:d5:1f:a9:a2:e2:ca:8b:50:00:
cc:e5:0f:db:00:1a:3c:93:52:2b:1e:1a:db:03:9f:ff:40:67:
0f:be:93:8f:42:e5:f1:5c:30:29:16:bf:13:3b:8a:ab:27:74:
78:0a:b5:58:ec:84:c3:e1:a2:de:11:33:fe:61:fd:51:64:4e:
56:3f:7d:4a:3c:07:69:f0:58:fe:12:08:70:c5:fb:8b:81:34:
54:d5:a6:7c:b1:32:e5:58:21:99:e6:a2:2d:f3:50:c2:d1:4d:
58:de:5c:cd:9f:b8:1e:5e:0b:61:82:36:fd:fa:f2:2a:16:19:
7e:40:d9:e5:d8:e7:8a:05:aa:91:7b:e5:71:f3:68:ec:f4:d1:
66:d3:22:a6:34:34:c6:8e:cd:05:28:07:01:dc:c3:f2:d8:06:
ce:18:99:47:ba:ce:8e:bd:7b:ee:30:36:dd:c5:19:30:29:db:
6f:66:f2:48:cf:51:5e:da:07:d0:02:46:86:a8:88:eb:c2:2e:
56:10:9a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org