Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ZkoRSRWfdKsHFrC6FG_DBxluutc.roa
File: ZkoRSRWfdKsHFrC6FG_DBxluutc.roa (raw, json)
Hash identifier: KPotszDQhlyQ9wLs+IRLn2Xfh2wTLDiiHFkUfXz+8eI=
Subject key identifier: 66:4A:11:49:15:9F:74:AB:07:16:B0:BA:14:6F:C3:07:19:6E:BA:D7
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0181EC815DEAC97DA8B7996799C11540BB06
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ZkoRSRWfdKsHFrC6FG_DBxluutc.roa
Signing time: Mon 11 Jul 2022 09:05:10 +0000
ROA not before: Mon 11 Jul 2022 09:05:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59432
IP address blocks: 141.11.230.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ec:81:5d:ea:c9:7d:a8:b7:99:67:99:c1:15:40:bb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 11 09:05:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=664a1149159f74ab0716b0ba146fc307196ebad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:21:60:cc:ce:da:d0:2c:d4:42:a2:5e:73:db:
7b:f5:41:f8:e3:e4:1d:7b:34:40:f2:90:aa:38:b7:
be:d4:b0:da:63:f5:0f:1e:ae:07:7e:33:b2:39:be:
49:05:fa:6b:1d:56:94:62:df:1e:41:4b:ac:0c:a8:
43:09:80:2d:a4:0e:30:b8:28:59:6f:fc:44:48:fd:
90:49:54:13:e6:f9:c9:f5:93:fa:03:55:cb:a6:fd:
d6:0d:ca:bc:dc:a2:ed:9d:b3:10:2e:87:64:d7:66:
3f:e7:2c:13:2e:8d:c7:ae:1b:f7:7c:aa:38:20:68:
af:e0:03:49:dd:15:d0:a5:2f:34:e7:fb:41:78:b9:
10:20:52:70:23:a9:58:86:ac:52:9c:3a:6d:27:2f:
7b:57:87:4f:03:ae:98:af:f7:9c:be:73:29:05:21:
56:38:4d:12:21:3d:65:94:86:2f:a6:86:34:b1:8a:
cb:35:49:ad:8c:ca:3d:26:62:94:4b:52:2e:ab:49:
ba:49:56:91:2b:cf:87:d6:84:0c:05:ac:c6:5e:eb:
ce:43:d9:97:87:7b:23:32:31:b6:91:fb:2a:d3:5f:
71:5b:a9:ea:75:46:9c:f2:8c:4d:b6:a2:cb:99:f7:
29:43:95:e7:09:aa:15:17:87:ff:e7:7b:b1:e1:cf:
6e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4A:11:49:15:9F:74:AB:07:16:B0:BA:14:6F:C3:07:19:6E:BA:D7
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ZkoRSRWfdKsHFrC6FG_DBxluutc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.230.0/23
Signature Algorithm: sha256WithRSAEncryption
78:e8:ec:ad:df:5b:40:d6:75:f2:b0:1d:81:0e:c0:d7:67:93:
78:77:b6:4d:d5:a8:6a:b8:e3:28:6a:74:88:07:38:aa:bc:a6:
42:cc:a5:4f:c7:af:18:88:9b:f9:ad:88:88:e8:27:3d:58:99:
3f:d4:ee:5e:ac:09:a2:38:af:2b:e3:08:6c:75:d4:3d:5c:b2:
e0:9f:ff:fd:a9:06:94:0b:89:61:d0:0c:0f:24:60:09:26:37:
d2:4e:7e:fc:d3:a5:f2:81:1d:f6:9a:a2:b9:3e:2c:74:2b:0c:
9a:45:02:54:1d:3e:99:36:0f:a3:da:70:02:b2:b1:49:1b:a0:
78:25:e7:96:69:0b:d7:b1:82:6d:f9:f3:b9:85:fd:96:d6:72:
06:7b:03:5d:6a:84:8b:5e:e7:66:59:90:ca:31:ff:60:9e:63:
d8:36:48:06:a4:6d:10:82:3b:b2:ff:d6:ad:44:fd:b9:f9:a7:
66:40:03:57:5e:14:c2:d5:d8:14:3d:b7:a0:01:8f:b1:9c:9b:
7c:5f:8b:7b:aa:1d:55:0d:d7:cc:fa:34:35:77:0b:42:44:61:
73:bb:ce:fe:16:60:ef:66:3c:5a:a3:63:f0:f8:82:87:46:56:
dd:c6:8e:82:2d:6e:57:f6:ae:26:34:a4:e4:8f:46:5b:df:e6:
36:51:ae:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-fra.rpki-client.org