Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/oDYvt3dhW44n13K8PCL_H2GigSc.roa
File: oDYvt3dhW44n13K8PCL_H2GigSc.roa (raw, json)
Hash identifier: x+MYo66W1+lygzyqMOpEhHpOcQz1p89mZEkiRt8j7eU=
Subject key identifier: A0:36:2F:B7:77:61:5B:8E:27:D7:72:BC:3C:22:FF:1F:61:A2:81:27
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01848AD44E8D0915598B8C67076AE714906B
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/oDYvt3dhW44n13K8PCL_H2GigSc.roa
Signing time: Fri 18 Nov 2022 13:01:20 +0000
ROA not before: Fri 18 Nov 2022 13:01:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212298
IP address blocks: 141.11.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8a:d4:4e:8d:09:15:59:8b:8c:67:07:6a:e7:14:90:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 18 13:01:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0362fb777615b8e27d772bc3c22ff1f61a28127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1c:ba:83:ae:22:36:44:6a:08:57:77:e7:3f:
f7:53:37:0b:05:3e:ca:ff:7b:1c:5f:fb:9b:2c:61:
0c:d5:cf:bf:e0:88:94:a9:1a:e4:01:31:ce:99:b0:
96:e8:ca:ca:6b:c2:ba:8f:28:06:a7:25:3b:0d:d9:
9d:b8:86:3a:d1:d6:27:4d:54:70:af:ca:58:7e:d3:
3b:e5:bb:e4:94:b9:77:14:66:74:4c:1e:d8:36:78:
35:09:9f:00:44:d5:25:66:bc:4b:9b:3f:9d:e3:6c:
44:d0:74:62:1a:cf:61:51:52:70:41:4e:90:07:fb:
da:fe:39:3b:bb:59:f1:35:08:e0:e4:9c:4c:7c:c1:
b9:2e:ef:5e:59:ea:8d:ba:c7:cd:53:ec:69:0c:e5:
82:22:1c:ca:fb:96:f6:3b:d4:4c:6a:b4:4e:d1:01:
a9:00:79:5b:2c:05:e7:d2:b1:e4:f2:80:48:79:13:
5b:a2:9d:68:22:d1:df:a9:77:fd:92:5b:a5:10:e9:
48:eb:79:ee:f5:08:e5:81:24:fa:07:d3:48:53:66:
fa:45:59:a9:c0:2c:5f:7e:27:7b:74:e6:da:86:48:
d4:dd:79:18:78:be:d8:3a:64:73:88:10:39:34:67:
f9:81:4a:98:99:7a:a3:d5:21:8a:c0:bb:e1:b2:a3:
58:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:36:2F:B7:77:61:5B:8E:27:D7:72:BC:3C:22:FF:1F:61:A2:81:27
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/oDYvt3dhW44n13K8PCL_H2GigSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.35.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:43:22:88:36:49:a6:67:6b:9b:c4:71:cc:3b:e0:b7:66:7c:
6c:67:dc:7f:b8:34:df:2f:80:ad:93:8b:fa:ec:f8:21:b3:ff:
43:68:2e:f7:49:46:fa:fe:93:82:e7:13:8d:0f:00:06:46:49:
e6:f3:da:77:4d:d7:4c:e5:bd:0a:a1:c7:c0:b2:67:ef:78:11:
29:15:ad:b4:17:02:95:cb:7c:0b:7e:ec:4d:d3:75:68:bf:64:
36:5f:5e:90:f8:e6:75:7f:35:6e:88:b5:c5:89:27:0c:d2:e7:
0f:82:c5:d3:27:33:13:23:62:05:13:ad:26:44:94:92:30:21:
d8:81:41:bf:e7:36:f6:94:df:a6:4a:3a:28:b1:02:29:8c:99:
06:b3:2f:b6:ef:4e:b5:72:3d:21:b8:d1:d7:3f:b2:00:00:87:
25:9c:ec:3c:9b:9f:00:df:2b:51:c4:9e:2d:10:e8:fa:21:d0:
b5:f2:ee:74:a4:7b:07:30:1b:82:47:64:72:84:8d:3b:32:c9:
b4:af:3c:89:89:3b:74:db:0b:80:e2:6d:9b:ab:45:ea:0d:23:
78:5b:98:dc:96:fb:a7:35:a3:b7:59:4d:98:8a:7a:b0:16:91:
73:49:89:9a:ca:e7:36:56:16:15:45:44:d6:8f:da:59:da:28:
4e:5e:d9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:17 2023 by rpki-client on console-fra.rpki-client.org