Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/aDHrnlY6OAy0b3SpA5VwAAsVs2M.roa
File: aDHrnlY6OAy0b3SpA5VwAAsVs2M.roa (raw, json)
Hash identifier: Ls1MaojrbfltKJo5PscyAF19CcJENXMQDIiSnKAsiSg=
Subject key identifier: 68:31:EB:9E:56:3A:38:0C:B4:6F:74:A9:03:95:70:00:0B:15:B3:63
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 026743CE
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/aDHrnlY6OAy0b3SpA5VwAAsVs2M.roa
Signing time: Sat 01 Jan 2022 08:03:21 +0000
ROA not before: Sat 01 Jan 2022 08:03:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43350
IP address blocks: 141.11.182.0/24 maxlen: 24
141.11.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40321998 (0x26743ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jan 1 08:03:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6831eb9e563a380cb46f74a9039570000b15b363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:27:16:e6:42:a5:47:33:32:82:9b:86:58:
ca:97:23:50:43:0b:d4:fc:b0:b0:7d:84:56:5b:92:
d1:10:98:d1:13:15:a5:31:81:ce:06:ae:b6:17:b5:
79:a2:db:13:02:a9:7e:38:eb:cf:51:7a:e6:93:7b:
a1:31:c0:f2:e6:9e:e2:ea:3e:36:88:12:c9:c4:58:
23:e5:4d:dc:db:0a:35:96:bd:0a:ef:db:71:2c:87:
91:f0:be:af:0b:05:b9:b5:2b:29:5b:41:8e:0a:2c:
8e:ff:7f:4f:59:a6:15:37:63:80:cd:a4:b8:83:08:
de:cc:bd:61:5c:a8:ef:53:0e:f8:c5:cb:b0:27:08:
fe:63:01:50:29:47:82:fa:b7:e9:ee:94:e2:01:61:
72:06:1f:63:a0:38:0d:99:a1:fd:4d:6f:d4:ef:ce:
1f:35:88:00:e8:c2:cb:dd:1e:4c:31:59:d0:f1:67:
1c:6f:29:a4:ba:09:09:db:e6:65:b9:d0:2e:58:64:
92:d6:4b:1a:67:8d:44:56:12:20:d3:50:cd:80:61:
4b:92:9f:2c:d9:cb:8a:58:7d:3e:97:63:33:b3:43:
e4:53:e2:99:5d:75:78:af:58:18:b1:a9:59:4c:c5:
62:b5:c0:82:a8:42:df:c3:3a:3e:09:b0:53:1b:29:
07:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:31:EB:9E:56:3A:38:0C:B4:6F:74:A9:03:95:70:00:0B:15:B3:63
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/aDHrnlY6OAy0b3SpA5VwAAsVs2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.182.0/24
141.11.246.0/24
Signature Algorithm: sha256WithRSAEncryption
91:eb:7e:e9:f3:dd:90:33:38:c3:0c:40:3b:c7:98:43:03:4b:
ff:b1:8b:48:b7:64:02:88:f5:46:49:c2:39:4e:8b:65:72:08:
95:4d:c6:22:d6:75:01:56:8a:e5:54:20:26:94:40:73:b5:64:
95:a3:6a:59:98:45:a7:0c:87:01:e3:14:f3:0e:e8:4e:97:13:
13:de:15:e4:7f:20:f4:67:fc:a5:af:84:12:34:bd:9d:e0:7c:
a5:b8:97:77:7d:bd:04:0c:b0:c0:85:c9:be:72:0b:14:c9:70:
8b:39:ed:d2:fd:1c:02:85:52:56:26:6f:1b:72:b9:2a:e1:f2:
21:c2:ef:46:a8:cd:d3:9a:51:91:43:4d:ca:db:40:3f:48:f4:
0d:3b:b5:29:4f:9b:cc:a5:00:be:f7:fb:81:9f:8c:e6:97:45:
67:ca:2d:97:e2:d6:2c:ff:66:c5:54:41:86:73:8d:9e:f9:97:
8e:ab:de:19:63:49:23:36:75:9a:cd:4c:06:93:4c:85:9c:ad:
6c:f8:59:a4:48:2c:ea:d6:a5:32:51:01:51:d3:f4:ff:59:63:
8d:ea:00:8e:26:2f:c2:2d:99:78:75:f2:65:e5:82:fb:e8:54:
6f:70:3a:77:e1:3c:b5:f9:b9:e4:cf:e9:49:14:c0:ca:a3:ed:
18:b8:b9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-fra.rpki-client.org