Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/d7PewZEJumWC8xoPxzlcnzKhwuY.roa
File: d7PewZEJumWC8xoPxzlcnzKhwuY.roa (raw, json)
Hash identifier: 885tP3OdZTLGmgFKd+I+NbrD9TeEZvCXTHig1vz3cdM=
Subject key identifier: 77:B3:DE:C1:91:09:BA:65:82:F3:1A:0F:C7:39:5C:9F:32:A1:C2:E6
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 02E6AE78
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/d7PewZEJumWC8xoPxzlcnzKhwuY.roa
Signing time: Thu 03 Feb 2022 14:04:07 +0000
ROA not before: Thu 03 Feb 2022 14:04:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 141.11.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48672376 (0x2e6ae78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Feb 3 14:04:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77b3dec19109ba6582f31a0fc7395c9f32a1c2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:48:0d:13:d0:fc:54:40:66:63:74:ca:52:ad:
91:d9:24:52:ca:80:b5:81:f8:9d:b8:b2:9e:62:1a:
c9:06:1d:46:51:17:e0:39:42:0f:87:f1:1d:7a:08:
d1:31:ab:85:e0:f5:23:92:f7:e0:6e:6e:ea:6c:a0:
1e:a7:86:6f:44:9a:8e:94:f2:45:64:76:cb:90:bb:
92:49:cf:ac:6e:c2:df:83:75:b5:0d:8a:60:03:60:
55:8d:be:fb:a7:d3:79:a1:13:bd:db:58:75:76:cc:
cb:4f:ec:93:82:38:77:79:47:83:7e:26:6d:2a:38:
f9:5a:f5:77:a0:8a:e0:d4:f6:7a:4e:9f:54:0b:ea:
f0:d0:7f:96:36:c3:24:db:2c:2f:10:ac:6f:94:3a:
86:84:27:1d:0b:c9:1f:cb:29:c3:e4:ac:fe:db:07:
45:f3:c3:1e:85:98:51:0a:6f:57:af:dc:a1:c6:c3:
73:10:d8:ab:46:53:ad:0e:0e:38:91:ed:23:1e:de:
27:ea:32:93:bf:fb:e8:20:5a:c7:d1:de:46:e7:7a:
4e:39:f5:f5:4f:99:b3:e6:63:b1:2a:fd:ea:3b:db:
1e:38:28:a0:ab:1e:d9:46:89:e8:b6:1c:9a:a5:3b:
53:53:21:5d:91:60:13:07:84:8c:d1:da:24:52:ca:
c6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B3:DE:C1:91:09:BA:65:82:F3:1A:0F:C7:39:5C:9F:32:A1:C2:E6
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/d7PewZEJumWC8xoPxzlcnzKhwuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0/24
Signature Algorithm: sha256WithRSAEncryption
21:95:97:8c:a5:ce:f4:78:93:67:e2:c8:a8:8c:07:b0:33:0b:
56:c5:6c:36:74:df:79:ca:c5:cc:1a:24:fc:de:02:28:a9:9a:
8f:67:3f:76:0b:2b:7a:b8:28:c1:9f:70:0a:de:e3:6c:3a:c3:
c2:07:33:fa:0e:37:90:2d:ed:44:e3:4f:f5:76:9c:e0:41:77:
65:60:f4:74:5b:10:ac:c3:71:9c:bb:39:53:fe:b5:eb:b6:90:
d8:b2:5e:a9:c6:a1:26:e7:71:7f:ab:07:62:33:58:36:12:de:
8d:12:65:fa:01:17:13:88:64:ee:2e:78:f3:9d:f6:45:73:94:
e2:b7:47:97:8f:2c:a6:44:2a:3d:8c:52:fb:d8:e7:3d:ee:7b:
07:5c:b5:d3:70:b1:8e:d2:e5:77:ac:3c:9c:65:d6:9d:ce:a6:
45:f6:cb:8c:f0:22:0f:97:cb:5b:b2:5e:eb:4a:17:65:64:e6:
fd:ac:34:d1:f2:70:ab:a6:a2:0d:55:f6:3c:d0:9b:2d:82:4f:
15:d2:96:f0:d3:e9:1b:6b:5f:fe:d0:fd:82:90:b8:c8:e0:57:
7a:aa:56:de:19:a7:00:ea:0e:58:c5:f9:12:81:16:9d:3c:70:
f2:cf:b2:7a:a2:7c:13:62:1f:de:6b:6b:7e:4e:9b:ca:90:06:
a7:05:44:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org