Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/_5Xq83CIcVUiF3Q7gx6QsiF32bY.roa
File: _5Xq83CIcVUiF3Q7gx6QsiF32bY.roa (raw, json)
Hash identifier: 2UT7m95Ks4bD3QWSEC7UDarNF26S4IYtWE6S1CBqcNk=
Subject key identifier: FF:95:EA:F3:70:88:71:55:22:17:74:3B:83:1E:90:B2:21:77:D9:B6
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0513A48B
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/_5Xq83CIcVUiF3Q7gx6QsiF32bY.roa
Signing time: Mon 13 Jun 2022 14:00:44 +0000
ROA not before: Mon 13 Jun 2022 14:00:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 141.11.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85173387 (0x513a48b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jun 13 14:00:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff95eaf3708871552217743b831e90b22177d9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:98:b9:33:a6:ab:e6:99:10:85:56:3e:76:af:
05:d7:d3:79:f1:49:b0:1b:f0:7a:f4:79:86:07:91:
3e:40:9b:5a:d2:c6:a8:d6:5c:5d:30:4c:2d:92:34:
c8:85:85:e7:e4:40:1f:15:30:43:06:82:9b:8f:39:
21:9c:41:43:0b:48:1e:fe:da:4d:8b:48:d3:2b:2f:
83:1d:3c:7e:39:74:65:93:f2:02:4f:d9:1c:c2:a5:
7e:70:4f:8c:2d:33:b1:21:68:c4:10:fc:b0:98:74:
71:bf:2e:85:98:26:57:8c:fe:a0:b5:30:c2:1f:26:
d2:f5:b1:0b:4c:51:ce:d2:c0:5b:db:fa:59:70:97:
6c:76:88:ba:e7:44:bd:10:77:75:1c:52:cb:79:14:
54:87:27:1f:0a:07:51:ee:07:1a:dc:d6:78:ed:ef:
69:5d:ec:ac:2d:b9:21:11:df:ce:3d:2e:66:66:82:
94:3b:91:18:a7:f4:6f:e4:b5:2a:39:53:81:05:05:
94:af:d6:5c:fd:89:81:fc:47:91:7c:cb:01:d1:57:
12:07:4a:ac:8a:2c:98:aa:5b:ce:6c:9d:22:bc:79:
49:13:d1:d8:21:43:4b:2d:fa:70:e5:db:ca:81:a9:
2b:b1:bc:75:b2:80:b1:7a:f6:e8:bf:d1:2a:57:53:
6e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:95:EA:F3:70:88:71:55:22:17:74:3B:83:1E:90:B2:21:77:D9:B6
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/_5Xq83CIcVUiF3Q7gx6QsiF32bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.189.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ca:ab:a3:6b:37:a9:9c:d1:a0:e2:54:50:29:11:5f:ec:92:
2e:a8:91:47:4d:2a:47:06:e4:9d:da:fc:31:8b:75:ad:1a:d1:
b9:1f:f5:b4:b3:5a:81:ab:bf:55:e1:30:26:39:a5:10:78:b3:
b5:33:27:21:73:f9:78:7f:3a:0c:f8:8b:63:b4:06:2c:27:7a:
a0:89:c5:4e:af:39:db:f2:9e:cb:88:fb:19:04:86:e3:6c:94:
a4:db:f6:d8:f8:9d:47:97:f1:8d:09:5b:19:2c:7d:8a:98:25:
eb:28:1e:6d:73:aa:f5:aa:70:f0:9a:ad:6a:73:f2:0a:e7:80:
e0:56:7b:2a:2a:00:e7:dc:cb:8e:24:c3:c7:b5:38:3f:38:76:
76:1c:c2:71:22:88:f5:61:23:90:e9:b6:63:f9:cf:27:b4:20:
88:9f:56:0a:cd:a4:71:17:38:35:54:b6:5e:a3:4a:a2:5c:28:
80:12:96:f7:a6:95:9e:78:7e:0e:88:23:77:f7:fe:f7:0e:a6:
5b:44:c3:7d:33:ec:1b:b7:fa:05:84:13:3a:23:4b:bb:c8:b0:
aa:d0:ab:f8:d0:5c:67:84:eb:e9:8c:45:b1:bb:b1:2f:cf:f2:
30:d8:27:fb:f8:81:d1:fc:a1:3c:89:23:77:35:5d:86:93:4c:
f2:65:66:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org