Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/aIHA5waRroqzUQuRXmJ35tZsRA8.roa
File: aIHA5waRroqzUQuRXmJ35tZsRA8.roa (raw, json)
Hash identifier: nCe9umWop2PpxOqmTxhEmmGZHxiHE/hZzLLgEDNMiBU=
Subject key identifier: 68:81:C0:E7:06:91:AE:8A:B3:51:0B:91:5E:62:77:E6:D6:6C:44:0F
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 048ADD27
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/aIHA5waRroqzUQuRXmJ35tZsRA8.roa
Signing time: Tue 10 May 2022 11:31:02 +0000
ROA not before: Tue 10 May 2022 11:31:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40065
IP address blocks: 141.11.97.0/24 maxlen: 24
141.11.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76209447 (0x48add27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 10 11:31:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6881c0e70691ae8ab3510b915e6277e6d66c440f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:ff:6e:ee:7b:aa:05:08:07:18:61:d9:c5:
cd:7f:c6:3e:11:0e:35:bd:69:dc:1f:52:57:d4:7e:
da:a3:b2:64:81:dc:d4:67:b3:cf:65:fd:db:64:5e:
9f:0e:39:42:ce:90:28:fa:34:ce:24:6f:fd:34:44:
c2:9d:85:09:78:58:d0:da:16:64:5c:e4:21:4a:d5:
f6:d7:02:4a:5b:e6:bb:54:9f:b5:ea:9d:eb:97:14:
eb:d0:da:f5:5c:cc:54:a2:76:fd:01:e1:05:7d:72:
69:ad:11:13:4d:50:a7:30:dd:eb:80:db:56:c8:58:
5d:72:53:0e:91:96:ef:41:99:b7:e3:df:d2:6e:7b:
4e:31:cf:83:ed:c9:35:56:0d:8e:d1:a3:52:e4:08:
d2:38:bf:c0:53:29:96:7e:e6:71:95:64:88:93:69:
f7:b7:12:ca:30:57:57:0e:28:de:28:e1:61:e2:e2:
1d:80:2d:e1:16:0f:df:cb:48:91:56:79:78:f5:09:
5b:a7:1b:46:e2:32:46:c9:d7:c5:21:8e:f9:4b:fd:
1d:47:1b:f8:e2:27:96:7f:42:24:f3:f7:61:e6:c4:
75:ea:dd:dc:8f:7a:9d:02:ff:48:d6:a6:c3:c8:99:
02:58:9e:ac:be:b3:f7:98:1d:68:7e:3e:1c:dc:78:
61:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:81:C0:E7:06:91:AE:8A:B3:51:0B:91:5E:62:77:E6:D6:6C:44:0F
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/aIHA5waRroqzUQuRXmJ35tZsRA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.97.0/24
141.11.108.0/24
Signature Algorithm: sha256WithRSAEncryption
49:80:c8:68:4f:36:2d:87:e5:a6:20:c6:cf:01:dd:b9:14:f8:
4d:e9:f9:e0:d5:f1:37:14:39:45:d0:16:d3:a5:dd:53:f8:73:
86:25:a4:bb:da:30:58:4f:3f:95:f9:75:d8:3e:4c:72:68:74:
78:dd:46:a2:8e:c5:19:b8:5b:12:9d:d3:19:18:82:f0:14:44:
33:b5:e9:60:3d:82:52:b1:d0:29:3e:68:cd:06:60:de:58:16:
9c:90:7f:e6:81:21:9e:3b:93:cc:31:d4:e7:94:e6:70:0b:37:
2f:ab:bc:6b:02:20:a0:2f:77:26:6b:3f:23:1c:02:a9:ed:ed:
d3:16:97:56:3c:af:8f:f5:37:cb:d1:10:a1:9d:4f:68:2c:db:
20:9f:e6:a9:91:94:2f:4d:d8:b8:cf:54:f8:27:e7:f1:c8:d8:
15:3a:8e:7a:2c:c5:15:55:04:0f:51:b0:c2:b7:aa:3f:4e:8a:
7b:7c:fb:62:ee:75:13:6d:0f:e1:18:d7:67:9c:b7:93:4a:54:
6a:5d:ee:f3:26:bd:01:7c:f4:d1:84:6a:0d:da:28:39:18:20:
4a:74:14:7c:18:1d:1f:dc:4a:a3:69:58:e4:f3:03:76:69:28:
19:4e:3f:57:f9:ed:3c:13:13:0e:23:dd:18:44:28:ad:30:73:
9b:8d:d4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-fra.rpki-client.org