Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/al70_z0dIk_EEINYKikSUa0pBdo.roa
File: al70_z0dIk_EEINYKikSUa0pBdo.roa (raw, json)
Hash identifier: oQ20Y1shKcujKYCDGqY8ZmUYmZagRdqeti0Wj9b7gTM=
Subject key identifier: 6A:5E:F4:FF:3D:1D:22:4F:C4:10:83:58:2A:29:12:51:AD:29:05:DA
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 03C624BC
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/al70_z0dIk_EEINYKikSUa0pBdo.roa
Signing time: Fri 08 Apr 2022 11:21:28 +0000
ROA not before: Fri 08 Apr 2022 11:21:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 141.11.168.0/22 maxlen: 24
141.11.80.0/22 maxlen: 24
141.11.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63317180 (0x3c624bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 8 11:21:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a5ef4ff3d1d224fc41083582a291251ad2905da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:48:16:47:ef:ca:59:74:e1:92:e7:b0:24:a5:
53:e6:fa:eb:ec:8b:d4:cb:05:f2:43:06:e9:4a:f3:
36:70:b7:e4:d3:c8:23:77:b8:8a:c8:2a:5c:ba:56:
11:48:b9:07:2c:d1:e7:3a:ba:ce:d7:fd:94:6e:ed:
89:9f:4c:fc:e1:4e:24:f2:70:e9:5f:b3:5d:c2:cb:
19:67:ea:fd:1b:4e:f3:a5:8f:b8:ee:a2:9b:c1:83:
39:9d:df:29:b2:32:85:20:a3:0e:88:1d:c2:4f:5e:
81:a8:1b:1a:77:85:c9:be:b5:ee:c1:2d:cd:c4:3c:
25:b5:70:11:f8:3a:6c:35:c2:92:a6:6a:d7:de:9d:
f7:12:b2:04:3f:58:5b:d5:d9:dd:b4:b9:0e:ef:ad:
a3:b8:b4:dc:72:57:bc:12:b6:66:2d:0b:3a:30:5a:
ab:4a:73:d7:61:7e:95:c0:ed:a6:d9:22:17:a8:06:
90:00:cb:7a:1e:2c:1f:bf:6c:d9:75:81:12:f7:4b:
96:91:be:9a:2e:3c:dc:3b:bb:8f:f7:50:c6:de:2c:
55:b7:7a:43:5f:88:f1:64:a5:f2:17:65:12:08:93:
09:d8:01:ea:a7:e0:05:f1:e9:a3:1b:e6:eb:97:e2:
9e:a1:c2:7a:a7:cc:6d:5a:e1:b0:df:b0:d7:52:e0:
9e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5E:F4:FF:3D:1D:22:4F:C4:10:83:58:2A:29:12:51:AD:29:05:DA
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/al70_z0dIk_EEINYKikSUa0pBdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.32.0/22
141.11.80.0/22
141.11.168.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:9f:ad:42:0d:1d:e0:bd:fd:e6:74:3b:71:9b:4b:d7:d7:3c:
92:78:6c:9b:bb:be:f0:7c:46:cb:e3:12:29:38:94:06:12:fc:
7b:10:cc:16:45:51:ae:cd:31:a5:e5:4b:38:53:0a:4a:23:2d:
ad:d0:01:5d:bb:59:32:57:f7:31:70:02:fd:21:31:38:0b:9a:
ad:61:7f:1e:f4:ac:2a:d8:93:97:33:b8:83:f7:4b:2d:84:a5:
d5:3b:9b:28:c3:76:40:6f:70:c2:e0:22:ce:9b:00:e5:f4:3d:
68:2b:54:c4:81:0c:85:59:63:53:37:d9:56:d7:dc:b3:dd:5c:
d0:52:79:ba:ff:c0:df:6b:cb:54:d1:3b:66:98:9e:f3:bc:00:
b5:a2:fb:8e:25:46:e0:73:21:40:4a:13:b1:c5:ac:dc:07:2d:
f8:c1:12:eb:2c:58:41:2c:f3:99:b8:b1:a0:80:34:92:7b:5c:
ea:3a:d2:00:5f:71:63:c2:6f:44:0a:4e:6d:71:f3:bb:92:cb:
ad:9c:01:3e:f4:e7:f9:a4:ad:07:d8:6c:e0:c4:e6:10:f3:0b:
63:27:ab:3b:3f:45:08:67:cc:f5:9e:e6:a6:36:43:2b:ec:b5:
b2:cb:3e:25:04:78:ea:79:d9:5b:b7:52:c2:be:d4:59:ea:38:
eb:9b:ca:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org