Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/c4VCFmhII5tF1mxq0cVsPVxvCik.roa
File: c4VCFmhII5tF1mxq0cVsPVxvCik.roa (raw, json)
Hash identifier: rI4E2qCOhhWdvn/CxiOH7b/0O4N5RNXNt160IPwy/1Y=
Subject key identifier: 73:85:42:16:68:48:23:9B:45:D6:6C:6A:D1:C5:6C:3D:5C:6F:0A:29
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0184517E1E2BE527F571C948A98D83B96EB3
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/c4VCFmhII5tF1mxq0cVsPVxvCik.roa
Signing time: Mon 07 Nov 2022 09:48:50 +0000
ROA not before: Mon 07 Nov 2022 09:48:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212669
IP address blocks: 141.11.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:51:7e:1e:2b:e5:27:f5:71:c9:48:a9:8d:83:b9:6e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 7 09:48:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=738542166848239b45d66c6ad1c56c3d5c6f0a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:19:59:ad:f5:27:c7:c6:c0:c6:d3:0e:90:
c1:2e:3e:47:b6:d6:a5:e0:c8:31:9e:c1:c6:5e:7e:
d6:14:d4:9e:6e:42:fb:13:e6:81:fd:aa:6c:c9:81:
65:98:23:23:2c:82:d7:6a:31:eb:19:c0:3c:55:69:
ee:6b:1e:66:45:42:87:6b:b6:75:a5:7d:34:32:56:
5e:2f:fb:fd:d2:5f:9d:35:8a:d8:25:20:bf:ac:7f:
26:bb:e2:8b:9b:2f:13:e3:ac:5d:b4:df:48:3c:8d:
7f:be:81:f4:9d:6f:4d:3a:af:af:00:72:45:ac:e5:
ab:09:21:07:d2:79:25:4f:c4:ac:1a:45:3c:da:df:
48:c9:e8:30:b8:46:11:37:2b:9a:b6:63:85:1a:bd:
b1:00:01:40:ba:73:75:69:85:b5:61:55:cd:02:91:
9b:1a:68:2c:da:73:0a:f8:2f:d9:3f:19:5e:bb:6a:
d0:99:9e:fa:b8:e3:12:5e:4e:bf:96:e4:fc:22:30:
db:1e:7d:23:20:08:1f:0d:dc:25:f0:3a:73:6e:a8:
13:cd:52:6e:b4:f9:1d:ac:8b:e6:4c:4c:3c:15:76:
32:f6:f4:3b:ca:d2:ed:21:50:cf:6f:7d:83:bc:be:
03:92:10:df:59:b3:91:8d:f4:c4:6b:70:71:d3:1e:
36:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:85:42:16:68:48:23:9B:45:D6:6C:6A:D1:C5:6C:3D:5C:6F:0A:29
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/c4VCFmhII5tF1mxq0cVsPVxvCik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.251.0/24
Signature Algorithm: sha256WithRSAEncryption
53:0b:0b:0c:0d:7c:5f:9f:69:a6:20:c6:6d:65:78:ab:26:e3:
9d:fb:f8:37:fd:95:71:01:fe:d0:b9:f3:c1:ea:b7:a7:b9:00:
4c:0f:7d:c6:3c:19:1b:e1:ae:1b:45:e9:e9:02:27:c1:05:82:
c0:3a:d2:65:83:88:ac:9f:fd:c8:f9:6e:8d:c7:09:e4:af:db:
1f:78:96:ca:ae:4a:0f:c1:b0:8b:d3:b8:70:65:82:9a:85:25:
58:fd:91:eb:1e:7e:82:a1:70:38:cb:51:ad:bc:e3:6f:21:ec:
b9:49:da:80:c0:c2:6b:4f:64:27:3f:8c:f6:cd:a0:6a:f7:f6:
15:64:bf:e9:52:c9:2c:03:f8:c2:f2:b8:ea:8b:59:8a:fa:6c:
87:9d:9c:98:1e:8f:56:94:c4:a7:47:38:12:69:38:d8:f4:78:
67:6f:b1:8c:c6:ad:80:f5:09:81:50:c2:4f:30:e2:2d:04:23:
38:8a:c4:3c:92:9e:8c:94:55:de:14:0a:c0:e2:ea:05:60:6f:
90:ef:6b:d1:b3:ff:0f:e8:ce:9f:1c:5a:8d:f3:d1:9d:2b:31:
1c:03:84:92:4e:c9:ee:c1:97:61:9a:23:88:78:f0:78:54:92:
81:d8:6d:57:51:65:95:27:25:8d:32:4b:96:b6:35:15:4d:89:
19:38:47:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org