Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/o0Vw2IWNUzQaw9Nf0TQiLvDaS7A.roa
File: o0Vw2IWNUzQaw9Nf0TQiLvDaS7A.roa (raw, json)
Hash identifier: Ctd1rIEF+sWVyF4vwOVuE9rRMjXk4yZRnK0ydvO1vpQ=
Subject key identifier: A3:45:70:D8:85:8D:53:34:1A:C3:D3:5F:D1:34:22:2E:F0:DA:4B:B0
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0183ADC2937A7C681C81073F278806A64A4D
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/o0Vw2IWNUzQaw9Nf0TQiLvDaS7A.roa
Signing time: Thu 06 Oct 2022 14:45:53 +0000
ROA not before: Thu 06 Oct 2022 14:45:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138687
IP address blocks: 141.11.185.0/24 maxlen: 24
141.11.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ad:c2:93:7a:7c:68:1c:81:07:3f:27:88:06:a6:4a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Oct 6 14:45:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a34570d8858d53341ac3d35fd134222ef0da4bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:24:c4:c8:36:46:48:79:5e:b4:19:1e:db:dc:
a8:a3:77:86:55:18:00:d3:77:a9:da:95:4f:d5:e3:
61:4c:cd:30:ab:11:62:ab:5d:be:cd:f3:f9:38:be:
42:95:08:e2:a8:d9:c1:50:f6:45:18:ba:8a:3c:51:
5c:ab:e4:ea:d0:a8:c8:26:30:c8:65:99:09:7b:2d:
a6:d1:6d:07:30:42:12:69:9f:88:b0:8b:83:ec:36:
bb:79:71:56:9d:40:7c:cf:ae:c1:6b:8e:20:9e:5c:
95:25:90:ab:d5:44:a5:57:c8:b2:b4:c2:9a:4a:c5:
6e:bd:17:a4:69:c7:16:f3:92:57:58:35:70:28:b0:
18:3c:4d:93:ea:4f:b0:01:64:89:a0:94:00:56:85:
0d:1c:e1:b8:c8:b0:fb:b4:b4:15:97:6b:80:28:0c:
d6:14:fa:76:e5:fa:0d:aa:ee:21:f7:3a:0f:db:bd:
56:35:a6:1c:3e:af:cf:b7:1f:11:49:b9:a3:41:8a:
10:8a:c1:f1:cf:75:ac:2d:d2:c9:a7:b0:96:ab:29:
d8:af:29:69:3f:dd:b7:6c:f0:4a:f5:ed:bb:aa:d1:
d7:45:be:0b:bf:52:f9:c7:3a:0c:e2:0e:59:e3:6b:
c5:ca:80:71:37:82:a7:c5:70:e9:b0:b4:9b:80:59:
b0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:45:70:D8:85:8D:53:34:1A:C3:D3:5F:D1:34:22:2E:F0:DA:4B:B0
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/o0Vw2IWNUzQaw9Nf0TQiLvDaS7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.185.0/24
141.11.190.0/24
Signature Algorithm: sha256WithRSAEncryption
94:d2:1f:fa:83:87:b4:af:9a:b8:fd:0f:c9:6c:79:54:41:6b:
38:cd:97:cb:1d:3c:e8:f5:05:94:e3:97:1a:00:64:0b:b5:ad:
c7:3f:16:55:84:3d:9d:2c:8e:d2:e2:2a:1f:a8:46:58:30:98:
e2:ff:ee:e7:83:98:66:35:6f:11:8e:70:d9:a1:98:37:d0:d3:
da:85:56:77:df:d4:a2:ed:fe:17:91:83:0f:89:00:46:27:f4:
4e:e4:68:5e:01:13:00:cd:20:5d:02:4e:52:70:23:24:de:ba:
f9:ad:2f:83:b6:1f:e8:c2:20:c0:8e:2a:22:92:6a:3c:41:47:
de:f7:03:e2:81:15:e5:45:86:7b:ff:9f:ac:6e:6d:78:d6:a4:
ea:e9:af:4b:c2:e0:23:b5:f7:49:8b:51:90:07:68:59:96:1e:
c1:e2:8f:93:a1:af:d9:88:9d:d7:f9:f0:52:36:2c:9d:ed:51:
7a:a1:74:5c:83:af:a0:25:08:cb:a5:15:6a:4a:cb:61:f0:33:
65:d2:60:ee:ba:a2:cd:87:b0:33:22:c0:50:b3:37:23:9f:50:
f6:cb:61:40:5e:c0:88:26:4a:2e:ad:3e:c3:6e:0f:05:9f:1c:
22:10:a4:4a:15:83:11:ba:ff:d7:13:9f:eb:e0:f9:0f:4b:31:
12:7e:25:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org