Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/lsalilGU1IGvLj_rLSZzpvPeR58.roa
File: lsalilGU1IGvLj_rLSZzpvPeR58.roa (raw, json)
Hash identifier: pEmb4EQLCIYnhx9bQ5Mn0RKprVD5fGDpqu5V8i7w5/U=
Subject key identifier: 96:C6:A5:8A:51:94:D4:81:AF:2E:3F:EB:2D:26:73:A6:F3:DE:47:9F
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 03FCB6BC
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/lsalilGU1IGvLj_rLSZzpvPeR58.roa
Signing time: Thu 21 Apr 2022 10:10:10 +0000
ROA not before: Thu 21 Apr 2022 10:10:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 141.11.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66893500 (0x3fcb6bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 21 10:10:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96c6a58a5194d481af2e3feb2d2673a6f3de479f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:96:33:67:e9:86:f7:20:57:2a:01:38:f2:6e:
1c:fe:73:5c:1c:de:83:ec:27:61:d3:a5:37:7e:63:
83:0f:38:cb:5a:ca:22:e4:06:60:3c:6a:98:8b:5d:
d2:42:e5:96:c5:cc:79:a3:90:f0:14:ce:1a:44:89:
ac:58:b1:43:d4:f8:75:c4:b4:d2:55:f2:d5:cb:a1:
12:41:72:f1:57:cd:a4:b9:23:e2:47:dd:a8:97:fc:
2e:28:ef:e3:4e:b4:f3:20:64:cd:4f:09:46:d9:d5:
0e:ab:41:3d:27:4a:dd:51:6f:72:24:c9:d5:19:7a:
51:07:85:eb:cc:00:a9:9c:d4:85:15:28:76:b3:4c:
df:3c:28:e4:92:7e:43:e5:7d:f1:b3:a9:11:af:f6:
e3:e9:2d:0b:ee:14:47:9c:bd:16:42:00:c3:75:a7:
1d:0b:fb:d5:e3:cc:ab:86:cd:b0:82:1e:a9:ce:62:
52:4a:77:5c:ea:29:64:7a:01:13:a8:56:a3:f7:54:
ec:a6:af:2a:13:77:54:11:56:bc:82:01:44:7f:b7:
31:a6:56:b8:01:f1:d2:7d:90:d2:0f:85:35:25:e4:
42:8c:05:20:0d:08:d5:ef:cd:65:6b:ca:07:60:e4:
c2:73:ff:a0:80:f3:24:b9:d8:97:19:4e:b3:cd:24:
77:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C6:A5:8A:51:94:D4:81:AF:2E:3F:EB:2D:26:73:A6:F3:DE:47:9F
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/lsalilGU1IGvLj_rLSZzpvPeR58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.26.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:7f:97:69:cf:3e:1c:37:f8:19:5c:f3:40:26:11:8a:0a:73:
bc:b3:43:70:b7:82:c6:61:48:89:6f:e7:23:04:63:b5:9c:01:
22:c8:e9:33:60:80:78:16:60:55:ce:f0:0e:93:5f:e6:cd:7b:
46:63:aa:d7:31:86:e0:31:d0:88:d5:cd:9a:06:f2:1c:06:e0:
f0:5f:b4:86:48:cd:b0:56:cc:ba:c4:50:f6:0e:5b:00:2d:de:
eb:c0:e7:ca:58:25:27:92:fd:06:3d:ea:98:27:b6:bc:ac:94:
43:7f:78:a6:99:0e:fd:5a:31:c7:75:08:14:ea:a6:fd:0c:e9:
f5:72:5c:49:c1:c8:f2:82:a0:c0:3f:1d:cf:fd:7f:16:c4:cc:
10:f2:bd:c6:ca:2c:f3:50:c4:4e:fe:0d:8c:cf:8c:db:65:bf:
9b:e7:8e:41:35:1a:3d:ba:82:17:b5:8f:f2:e1:45:16:6a:66:
d2:4b:aa:44:01:4a:5a:48:22:25:29:53:7f:82:c1:7e:03:a2:
c6:14:5a:c1:05:93:6f:94:61:c9:9d:7d:d1:71:38:73:2c:8f:
d1:ad:ac:0f:e2:79:43:dd:10:7d:9a:c5:5f:b4:1f:7b:72:ee:
b0:67:0e:c7:74:11:3a:5a:b4:99:ff:88:c8:82:6c:f1:e9:48:
72:88:a7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:17 2023 by rpki-client on console-fra.rpki-client.org