Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/joxJTWS6MlZjKf61HypnMhEAH_g.roa
File: joxJTWS6MlZjKf61HypnMhEAH_g.roa (raw, json)
Hash identifier: 7aKIUXOiQdwWBuXhvaAm9BL6nCLiuXApEo38G9fwjI8=
Subject key identifier: 8E:8C:49:4D:64:BA:32:56:63:29:FE:B5:1F:2A:67:32:11:00:1F:F8
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 027788A6
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/joxJTWS6MlZjKf61HypnMhEAH_g.roa
Signing time: Sat 01 Jan 2022 08:03:28 +0000
ROA not before: Sat 01 Jan 2022 08:03:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211193
IP address blocks: 141.11.160.0/24 maxlen: 24
141.11.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41388198 (0x27788a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jan 1 08:03:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e8c494d64ba32566329feb51f2a673211001ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:32:a2:68:cc:99:d1:57:f0:e0:ee:d8:3c:8a:
5b:9d:c6:37:47:82:1e:04:cf:21:99:a7:28:59:72:
50:65:04:09:51:76:08:ee:21:4f:32:e9:c0:aa:38:
c4:de:52:cf:ce:d6:ae:de:8f:8a:f1:28:62:b1:c0:
82:c3:76:ac:c1:8b:45:d1:2c:9e:fa:36:e1:3a:fc:
7a:50:ba:a4:83:66:c6:a3:8f:a8:fe:fe:40:81:f3:
af:26:1f:31:1b:48:3d:c0:90:dc:bf:67:b2:99:68:
4b:f7:a3:00:a3:78:25:f6:89:a5:7f:7c:03:c8:a9:
87:9c:c2:5b:6c:23:b7:4c:f6:22:da:40:b9:6f:c2:
52:b3:f8:aa:ec:ef:0a:f2:3e:94:02:5b:70:a7:ee:
67:69:05:80:19:b7:b5:f7:5f:3c:0c:0b:5c:eb:fe:
eb:b4:2c:2f:1c:3d:fa:1e:ce:67:09:e5:7e:6f:e3:
0b:c6:f2:fd:7d:9b:50:66:58:ed:6a:53:3d:aa:cd:
51:c7:8f:d6:11:51:48:3e:6a:0e:22:af:8e:30:10:
09:43:12:27:43:6d:64:dd:25:76:f6:2f:f1:4c:75:
97:14:bf:2e:60:e4:59:15:b3:3d:a3:3f:14:e5:fa:
25:7d:d8:ba:d5:3f:7d:ac:5e:90:7e:c4:27:37:2d:
2c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8C:49:4D:64:BA:32:56:63:29:FE:B5:1F:2A:67:32:11:00:1F:F8
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/joxJTWS6MlZjKf61HypnMhEAH_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.27.0/24
141.11.160.0/24
Signature Algorithm: sha256WithRSAEncryption
50:22:a3:41:72:a8:79:cd:c0:34:35:4f:a6:6b:23:fc:4e:3c:
0e:1e:7b:49:1c:2e:74:27:63:ec:23:60:6c:71:7a:2a:70:c8:
6a:02:f5:7c:86:16:32:6f:87:09:88:05:05:d1:4a:5f:9d:54:
5f:aa:f9:c7:ab:15:6e:7d:7c:26:19:57:ff:89:09:75:59:6f:
3f:79:a3:0a:67:6d:94:42:e8:cc:73:d2:07:82:25:eb:43:61:
2e:03:98:2b:45:3c:f5:7e:c1:99:cb:04:92:aa:bd:56:9e:03:
0d:9e:a0:0b:89:9f:24:91:94:00:b2:0f:d3:c7:41:43:39:8e:
30:0d:db:51:ab:c1:6b:19:6d:e9:ab:92:39:cb:ba:ef:04:4d:
60:33:e4:67:3e:28:77:c0:b7:fc:99:d3:4c:09:57:15:f8:32:
44:69:53:d4:cd:e5:8c:bc:64:27:e7:43:45:7e:a2:5a:3a:b5:
45:8e:48:a4:de:88:fd:36:b7:bf:8d:dd:29:48:c1:ec:57:2e:
8e:67:0d:54:18:e1:f4:21:f2:76:c8:c4:b0:92:5a:20:fa:3c:
45:a3:28:52:ca:f6:02:f2:f6:91:5c:54:21:16:9d:58:29:ca:
e0:1b:a2:d4:21:25:3f:d4:3f:89:4f:8e:e4:2c:91:a4:24:8e:
51:b4:60:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:17 2023 by rpki-client on console-fra.rpki-client.org