Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/g04cTp2klvRJMArv_i7lsC6QT50.roa
File: g04cTp2klvRJMArv_i7lsC6QT50.roa (raw, json)
Hash identifier: 3ezsO18sXUlAiqFCJz+My0esCkOf9bo4BztMWghNwUE=
Subject key identifier: 83:4E:1C:4E:9D:A4:96:F4:49:30:0A:EF:FE:2E:E5:B0:2E:90:4F:9D
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0183646389DC84A0BF6AC508D3920204382F
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/g04cTp2klvRJMArv_i7lsC6QT50.roa
Signing time: Thu 22 Sep 2022 08:49:48 +0000
ROA not before: Thu 22 Sep 2022 08:49:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 141.11.103.0/24 maxlen: 24
141.11.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:64:63:89:dc:84:a0:bf:6a:c5:08:d3:92:02:04:38:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 22 08:49:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=834e1c4e9da496f449300aeffe2ee5b02e904f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:21:a3:14:f4:f9:60:4b:f4:90:a4:c9:ea:ea:
d0:83:17:69:ac:c1:ac:18:40:6e:67:58:2a:57:d2:
27:2c:98:6d:61:5c:f8:06:b5:c9:50:86:32:63:59:
37:92:2e:9b:58:ac:36:94:6b:3f:af:21:55:ea:ae:
05:d0:38:3c:19:0f:16:9f:36:f7:75:b1:af:8b:25:
cc:f4:d8:02:b9:8b:f3:27:25:46:f7:00:ac:bd:ab:
9c:64:6e:24:40:40:4c:aa:2c:1e:a5:b9:58:97:89:
c8:67:0d:8a:f8:24:dc:ee:4d:3a:b2:61:9b:ac:af:
1a:a7:80:f0:0a:51:30:78:f6:dd:32:55:24:d9:6c:
cf:72:ba:86:68:f3:f3:5c:cf:29:f8:99:0f:66:7a:
85:33:26:b6:c5:1a:78:ce:b2:3d:04:00:27:15:b1:
79:d6:4f:76:ec:6a:83:58:a2:6b:66:17:0b:e2:aa:
7f:0f:1e:ed:48:e3:f3:ca:9d:86:c6:60:10:1f:5d:
58:22:e6:bb:f9:64:ec:e4:74:21:c0:28:f7:23:26:
53:1e:35:01:68:f8:7d:fa:bd:39:7c:12:9a:fa:20:
34:91:7c:37:a8:9c:b1:f6:42:61:29:97:4c:20:05:
93:54:99:c6:85:15:0b:42:ef:4f:84:f0:9b:82:05:
f0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4E:1C:4E:9D:A4:96:F4:49:30:0A:EF:FE:2E:E5:B0:2E:90:4F:9D
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/g04cTp2klvRJMArv_i7lsC6QT50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0/24
141.11.103.0/24
Signature Algorithm: sha256WithRSAEncryption
01:e4:d9:62:b0:00:7c:83:5b:71:53:3e:98:c0:bf:09:ff:ee:
ba:9a:16:bd:64:76:a8:0f:55:d0:26:b6:6f:14:f8:f8:3b:15:
d1:ae:be:93:d6:c1:76:c9:75:6e:48:e1:6a:49:c8:9e:a0:52:
97:8d:b0:38:5a:5f:63:f5:5a:b6:c8:82:33:92:e0:95:3f:a6:
3b:43:07:fe:09:69:56:0e:e9:8d:d9:3a:f5:18:00:4d:ea:c5:
c2:f1:42:9e:fe:d1:bd:e8:2c:96:0f:c8:3d:5d:6d:28:62:4a:
73:bc:f5:82:90:d2:0e:14:32:00:5f:35:ad:20:f3:34:fa:d6:
41:b4:7d:f1:08:fe:f8:e0:88:4b:8b:aa:18:6b:05:94:fc:ad:
bc:59:a9:ff:8c:26:2d:48:a8:56:a0:2c:84:9d:5f:a3:a8:73:
d7:c9:47:fb:6a:3a:b3:9e:e5:88:80:e2:29:44:d4:78:b0:26:
6f:7e:10:3f:bf:ac:19:8c:85:54:19:5c:b3:c4:e5:c6:b0:11:
78:d8:51:b3:14:67:b0:5b:8c:d6:57:a1:89:4a:1b:fa:a8:e1:
a2:74:0b:91:c7:96:dd:1b:97:13:bc:70:06:d6:30:80:3d:cb:
77:40:7d:1e:bf:9d:b7:05:e7:0e:f2:28:f2:ca:e6:31:85:69:
98:6e:2b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-fra.rpki-client.org