Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/mS0NiaZb-ZR_KeMxcSI1x9MPmJs.roa
File: mS0NiaZb-ZR_KeMxcSI1x9MPmJs.roa (raw, json)
Hash identifier: c8+g8akh+3N2etfLLx2nF29CHNkms+0lUHCfstqkvRs=
Subject key identifier: 99:2D:0D:89:A6:5B:F9:94:7F:29:E3:31:71:22:35:C7:D3:0F:98:9B
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 02CE812B
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/mS0NiaZb-ZR_KeMxcSI1x9MPmJs.roa
Signing time: Sat 29 Jan 2022 23:42:44 +0000
ROA not before: Sat 29 Jan 2022 23:42:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 141.11.72.0/22 maxlen: 24
141.11.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47087915 (0x2ce812b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jan 29 23:42:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=992d0d89a65bf9947f29e331712235c7d30f989b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:95:68:69:c3:a4:dc:69:f2:96:71:40:70:46:
71:d4:b5:f1:cc:7c:7b:7e:d5:c3:bc:4f:a6:4e:ed:
49:f8:e6:4d:61:1d:e9:9f:1c:28:f2:5c:1a:9e:cd:
92:1d:e0:30:03:b5:02:31:4d:c9:36:15:87:b5:bc:
12:a9:90:36:42:2c:5e:cb:f1:28:cb:8e:f5:08:e5:
84:7d:a1:81:38:60:fb:d8:07:04:c5:a5:56:42:4c:
1f:b9:f4:6c:a2:88:56:9a:11:ff:86:72:88:96:8f:
b8:c2:a2:d6:fc:b6:9a:dd:b5:6b:ef:70:51:49:a9:
4b:70:81:fc:57:40:58:4a:66:bc:bd:4d:af:bb:48:
a4:d4:4f:dc:13:3d:51:52:b0:f2:51:42:1c:6d:98:
35:76:c6:c8:8a:05:81:77:36:9b:51:de:f8:8e:9b:
47:06:89:5b:0e:8b:5a:f4:d9:7a:5d:48:aa:bd:2e:
23:d5:5e:1f:0c:ea:95:52:4c:11:16:48:d8:41:42:
6b:80:52:36:6c:ec:1c:95:c6:3f:aa:f0:ff:75:87:
d3:52:93:f6:44:92:d6:ed:53:bb:ad:94:bd:a0:c5:
f7:35:c4:c3:bb:fc:83:b5:42:dd:e6:21:85:7b:ef:
c1:bb:79:05:a1:54:09:87:e7:58:ad:c1:b3:83:8a:
18:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2D:0D:89:A6:5B:F9:94:7F:29:E3:31:71:22:35:C7:D3:0F:98:9B
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/mS0NiaZb-ZR_KeMxcSI1x9MPmJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.32.0/22
141.11.72.0/22
Signature Algorithm: sha256WithRSAEncryption
11:cf:c5:55:04:45:af:5a:c8:eb:90:90:8f:46:68:4a:19:6b:
e6:38:b8:bc:f4:cc:00:f2:bf:3d:ba:34:5e:9c:d3:d4:a9:00:
ee:d1:e7:76:64:af:27:bd:70:74:0b:34:7c:07:0b:6e:a4:b1:
47:79:85:21:e7:5c:ff:54:55:df:76:0f:c0:0e:ef:a2:0f:ce:
0b:f9:db:a3:01:8a:21:3a:10:80:e9:20:4c:89:c3:2f:57:75:
b7:4f:6d:7a:dc:1c:27:8d:a5:be:b6:2d:c2:31:75:45:db:2f:
12:2e:f6:71:51:24:8c:65:38:27:59:1a:62:f4:68:35:a9:37:
f4:03:f7:31:3f:ed:26:94:ac:55:cb:f8:e3:3f:ab:ba:f0:79:
3d:ca:9a:cb:da:65:90:df:b0:f9:0c:ef:03:73:84:ea:ad:26:
72:88:9a:b2:a8:37:80:21:5d:e6:68:5c:1c:9a:bc:21:e1:3c:
e2:e9:c4:e1:fa:39:f5:5d:b1:a8:f7:36:4b:a7:26:59:a8:05:
1f:d2:42:7f:8b:cd:d5:d1:f6:4e:58:d3:64:df:7e:23:36:43:
ce:ca:cf:6b:90:72:eb:ec:eb:f0:6d:fd:20:5d:97:7f:a5:68:
5e:20:a3:0d:fd:10:db:c5:c3:a9:3a:a3:a3:0d:ea:3b:5f:f0:
c0:02:9e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org