Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bDDdEGlBWXt4KFpn9IqQS59ofD8.roa
File: bDDdEGlBWXt4KFpn9IqQS59ofD8.roa (raw, json)
Hash identifier: Dl1qNqq6XJg2beLLFzLg7I448gdgBXsh+YLgy6L91do=
Subject key identifier: 6C:30:DD:10:69:41:59:7B:78:28:5A:67:F4:8A:90:4B:9F:68:7C:3F
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01841F6AEC0429FEDA5D5468CE50A7E8546E
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bDDdEGlBWXt4KFpn9IqQS59ofD8.roa
Signing time: Fri 28 Oct 2022 16:26:51 +0000
ROA not before: Fri 28 Oct 2022 16:26:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 141.11.4.0/24 maxlen: 24
141.11.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1f:6a:ec:04:29:fe:da:5d:54:68:ce:50:a7:e8:54:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Oct 28 16:26:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c30dd106941597b78285a67f48a904b9f687c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:6c:60:26:fc:e1:c9:fe:01:c2:cc:52:0a:
bc:3c:5f:a9:cf:f7:07:a9:cc:a6:2d:ce:8f:6d:bd:
2c:c5:34:03:32:8e:4b:1d:3b:e3:d0:76:91:7b:5f:
ba:e2:1f:f6:d8:d1:2e:86:e9:0b:ee:2c:97:47:db:
78:75:6b:2d:1e:0a:a8:74:31:a7:4f:65:90:34:f5:
9a:55:2b:a7:1e:e0:4c:bb:fa:6d:8d:10:52:a8:89:
5c:f5:84:b2:d1:4e:4a:19:51:10:60:00:d6:76:67:
f9:99:a3:3b:7c:4b:26:74:f2:14:74:3e:ed:fd:21:
ef:38:8c:ec:20:83:07:50:bf:7c:1d:7c:a3:6e:eb:
1b:5e:fa:67:52:96:82:49:bf:55:ee:b5:56:2f:89:
80:a8:43:6d:60:df:70:66:bc:25:aa:c5:e8:fe:b6:
99:b5:01:a6:88:fd:a5:60:35:00:9e:aa:00:72:74:
5d:f1:eb:35:38:01:2e:f6:ef:7e:34:01:33:61:84:
cd:eb:12:59:a7:bf:92:09:79:10:f9:3c:5e:5e:92:
18:40:7b:7d:08:e0:d3:9e:e2:33:fd:21:4e:34:d8:
4a:6e:e1:14:ad:64:df:0c:13:ed:de:e8:40:00:f6:
fc:0a:ce:65:d2:3b:a2:77:29:c5:b9:b2:c6:51:85:
48:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:30:DD:10:69:41:59:7B:78:28:5A:67:F4:8A:90:4B:9F:68:7C:3F
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bDDdEGlBWXt4KFpn9IqQS59ofD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.4.0/24
141.11.34.0/24
Signature Algorithm: sha256WithRSAEncryption
94:5b:7e:b1:d8:c0:5e:15:bc:6f:07:da:0c:28:93:42:6a:91:
53:54:97:cd:3b:cb:dd:b9:57:79:ce:d2:ac:81:7c:4d:78:59:
a3:ea:ec:81:d4:18:6c:ab:07:15:84:a7:32:54:de:b3:97:b5:
0b:8c:7f:75:27:39:60:ac:ea:d6:c5:32:2d:1f:cb:1c:d3:39:
04:ad:5e:83:98:d5:19:3e:69:a9:e9:dc:fb:2b:84:4b:02:79:
e3:e9:ce:13:c6:cb:2a:d4:21:6d:7d:35:65:7e:8a:2b:c6:08:
82:a6:94:f9:ab:61:19:9a:3d:21:b3:29:95:51:db:09:e3:7b:
e9:a5:15:7b:c2:02:08:ac:84:22:20:ee:59:04:86:58:41:32:
4c:7c:98:62:c5:e6:79:1e:f4:6f:b9:24:77:81:52:10:b5:cd:
82:2e:bd:36:88:ff:66:5a:bb:07:d9:06:4e:4c:c2:8b:a3:62:
19:14:12:8d:d3:d6:8a:40:20:a5:da:f7:ef:e5:c3:f2:94:fe:
42:01:68:6e:c6:16:2b:dc:14:bb:f3:64:73:4d:b7:5d:48:65:
41:3a:9c:6e:50:f9:60:7d:03:70:8e:51:b8:87:46:2d:14:e6:
0a:57:6e:1f:b0:d1:d0:5d:a1:1b:e1:a5:16:b1:c1:a8:17:bc:
f8:62:c2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org