Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/mWee3JiG0Jsu_TIGDGHiXp6-r6Q.roa
File: mWee3JiG0Jsu_TIGDGHiXp6-r6Q.roa (raw, json)
Hash identifier: YLlE1YiX5+nx4r9EVa9WlYuMbr8GV2zdoV8b2beBJZw=
Subject key identifier: 99:67:9E:DC:98:86:D0:9B:2E:FD:32:06:0C:61:E2:5E:9E:BE:AF:A4
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0494ED1D
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/mWee3JiG0Jsu_TIGDGHiXp6-r6Q.roa
Signing time: Thu 12 May 2022 13:38:11 +0000
ROA not before: Thu 12 May 2022 13:38:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42675
IP address blocks: 141.11.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76868893 (0x494ed1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 12 13:38:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99679edc9886d09b2efd32060c61e25e9ebeafa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:59:49:86:91:fd:f7:a8:ad:7a:d0:26:e0:
24:35:39:61:36:61:02:5f:81:86:29:f3:12:19:5b:
a9:c7:76:f2:d8:43:da:3c:f3:dc:df:b2:bd:18:d1:
4e:a5:0d:a6:a5:f1:6a:54:2d:f9:af:7c:23:53:13:
71:e9:36:de:6b:f7:8a:c8:78:d7:eb:0c:ba:44:69:
3d:7f:28:3e:ea:23:7b:2f:1a:f8:dc:4e:f3:ff:35:
d9:63:6a:60:9b:48:f6:94:3b:b2:a8:83:91:81:c8:
7d:83:f1:ce:e1:88:29:ff:9d:8e:3c:61:2b:66:81:
ba:6d:4f:06:66:b0:b2:4e:07:f6:43:99:49:c2:8d:
f5:1c:84:a6:a3:db:ea:32:8c:58:b8:25:43:08:dc:
77:e5:5c:77:29:6f:8a:5d:06:3d:00:a7:22:51:67:
39:f3:68:6f:6e:1c:02:f6:ed:ff:93:68:69:ae:e7:
c9:d7:ee:23:5a:a2:92:cb:c9:3d:cb:50:c0:02:e4:
3e:dd:12:98:28:79:49:48:78:af:82:53:8f:62:52:
2e:25:19:08:d8:6a:b7:25:f0:80:cf:1a:45:49:bd:
d5:e1:25:4b:09:c0:aa:97:c7:31:a4:41:d6:ee:0a:
49:16:2e:3d:af:97:42:8a:35:54:4d:73:df:da:ad:
36:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:67:9E:DC:98:86:D0:9B:2E:FD:32:06:0C:61:E2:5E:9E:BE:AF:A4
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/mWee3JiG0Jsu_TIGDGHiXp6-r6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.34.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:ef:3f:97:63:42:75:b6:fb:f7:66:4b:0f:1c:b5:dd:e1:81:
75:ad:02:54:75:50:ee:e3:c1:30:28:00:98:c6:ed:5a:bd:61:
ae:6f:4f:95:75:41:6b:ac:81:f9:49:2c:11:de:e7:c0:80:8d:
d7:12:58:eb:31:9f:66:9d:d3:40:d3:1b:0a:c6:90:10:cf:2f:
d9:6d:06:c8:68:21:57:45:34:6a:6c:de:69:43:06:7d:c1:5b:
38:1e:f0:2f:b5:af:62:cc:f1:2c:9b:56:f5:cb:06:69:21:37:
3b:73:71:c5:05:be:8e:8d:6c:c4:e6:90:83:90:11:be:e5:65:
1c:bf:f1:b4:ff:c7:ab:6a:66:ca:e3:44:a9:b5:70:94:fb:64:
6d:5c:e0:a2:21:a6:1b:f6:8c:3f:4c:b7:e5:58:34:e9:dc:94:
45:4b:dc:e2:e1:f9:e3:7c:23:a4:86:c9:5b:69:26:7f:9e:7d:
09:9f:4e:37:3f:7e:47:b0:34:ed:6f:70:6b:00:6f:4c:55:4d:
ae:2f:17:aa:e3:de:00:67:ad:1c:ce:e2:43:0c:dc:be:27:14:
2a:3e:6f:c2:3b:68:a5:aa:69:57:2d:90:16:7d:a9:fb:4d:cc:
f1:4d:11:3e:fe:ec:c8:b2:ce:80:e4:aa:76:4e:fe:7b:73:1a:
fa:3c:6e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org