Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/rLnJcLKWEgX8FFUu9_Cth93qlLE.roa
File: rLnJcLKWEgX8FFUu9_Cth93qlLE.roa (raw, json)
Hash identifier: DeMNpl1VgLcs8Bjk1o374lZMghZVJYG288Mk2JOc3Zw=
Subject key identifier: AC:B9:C9:70:B2:96:12:05:FC:14:55:2E:F7:F0:AD:87:DD:EA:94:B1
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0181EC7CCA500667DD32BB0EBBFC728CC40D
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/rLnJcLKWEgX8FFUu9_Cth93qlLE.roa
Signing time: Mon 11 Jul 2022 09:00:10 +0000
ROA not before: Mon 11 Jul 2022 09:00:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 141.11.98.0/24 maxlen: 24
141.11.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ec:7c:ca:50:06:67:dd:32:bb:0e:bb:fc:72:8c:c4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 11 09:00:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acb9c970b2961205fc14552ef7f0ad87ddea94b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0f:24:78:2a:a4:18:be:e6:4f:f1:22:86:79:
63:28:da:7c:ef:e0:12:44:be:73:0b:96:33:72:73:
97:9d:0d:33:ae:1c:3d:4a:f5:2c:2e:48:23:b0:55:
61:e0:71:44:c2:b4:7b:42:b2:e0:df:2f:3f:44:51:
97:dd:56:50:a5:81:c4:60:90:54:4d:c8:24:46:ff:
be:62:9d:fa:c2:71:29:63:94:3e:fb:87:16:5b:1e:
32:85:0c:09:58:66:54:df:3b:67:5a:0e:e9:6b:72:
02:87:46:93:fe:63:9d:0a:bd:e1:f0:a6:a5:0b:76:
56:92:58:2f:4f:e5:d2:e1:5d:58:9a:67:f2:2b:f9:
8f:36:00:2f:0c:1c:d7:23:5e:a9:78:0e:de:db:64:
b2:46:5a:19:63:eb:0c:15:3d:8a:31:7d:03:b9:07:
f7:6a:5f:08:db:39:ce:9a:0d:20:5b:51:e5:f4:c7:
23:d9:09:43:99:39:3e:b6:ab:f8:ef:dd:ce:e0:a2:
45:a6:ee:65:74:29:3c:08:64:db:6b:70:da:62:cd:
30:4e:e8:a5:dd:6c:75:f5:b6:2b:65:38:1a:35:3f:
68:a5:bb:04:51:32:b6:59:b1:44:c2:14:50:5d:37:
10:1d:17:09:66:60:4e:fa:c0:71:48:d0:92:92:d9:
91:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B9:C9:70:B2:96:12:05:FC:14:55:2E:F7:F0:AD:87:DD:EA:94:B1
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/rLnJcLKWEgX8FFUu9_Cth93qlLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.98.0/24
141.11.127.0/24
Signature Algorithm: sha256WithRSAEncryption
60:8e:7b:29:94:38:17:a6:03:14:da:5e:ca:73:65:c7:33:ec:
f1:a0:2b:ac:ea:cd:cf:6c:33:36:bd:0e:6c:3c:31:f1:9c:f6:
56:dc:cf:f1:6a:a0:66:da:d7:ea:52:a5:97:ab:db:6a:00:bd:
00:7f:b3:87:74:30:32:3a:9e:6e:c9:f0:69:3e:84:9e:61:e9:
60:46:4b:cd:56:a7:94:18:17:9f:48:23:1c:ee:88:d1:e5:25:
c9:7b:3b:b9:99:e6:83:30:05:33:72:25:50:05:58:d4:2d:f1:
7e:84:04:81:11:b8:e7:b3:ea:ae:36:7c:d9:b9:68:04:d3:2e:
c5:ff:03:47:01:92:c9:9e:8f:ad:ee:c9:0c:71:71:47:56:24:
9a:51:3b:6c:d6:bc:6c:42:86:4f:1a:aa:2e:4a:cb:ac:7c:51:
df:1d:fc:ad:a9:a4:b9:1e:d2:b5:ca:a8:14:c5:58:32:3b:99:
32:d2:02:26:3a:bd:dc:7d:3a:fb:2a:f9:d4:d1:ad:80:de:9d:
1d:18:ba:6f:1b:49:7a:51:df:93:59:a8:2a:da:b0:61:31:62:
29:f4:2c:0d:3c:51:74:33:3e:69:16:1f:d1:93:5c:38:f8:15:
af:55:d5:bd:19:08:24:52:c0:a9:4d:7a:83:ff:de:a0:17:0f:
a0:e3:0d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:17 2023 by rpki-client on console-fra.rpki-client.org