Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/txIVcZ_ufsniLV0nH6LAM-Bx46Q.roa
File: txIVcZ_ufsniLV0nH6LAM-Bx46Q.roa (raw, json)
Hash identifier: cpnNLn6gFx4+4KpIeObcd++G8gpP80U2DJkcXlH8XB0=
Subject key identifier: B7:12:15:71:9F:EE:7E:C9:E2:2D:5D:27:1F:A2:C0:33:E0:71:E3:A4
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0181EC7AF6140D33EFD48B27A293CBBE6917
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/txIVcZ_ufsniLV0nH6LAM-Bx46Q.roa
Signing time: Mon 11 Jul 2022 08:58:10 +0000
ROA not before: Mon 11 Jul 2022 08:58:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 141.11.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ec:7a:f6:14:0d:33:ef:d4:8b:27:a2:93:cb:be:69:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 11 08:58:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b71215719fee7ec9e22d5d271fa2c033e071e3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b7:7d:69:5e:6e:5e:e3:fc:ff:85:5d:52:14:
15:8c:d4:25:62:75:ef:70:ba:b0:4c:0b:8c:cd:f6:
6c:e3:a2:b1:81:32:26:34:5d:16:02:63:62:14:ce:
2a:b3:88:f0:9a:96:ae:7e:7e:eb:35:82:60:66:5f:
8f:fe:84:73:02:48:89:7c:d2:c3:6e:21:c6:38:9c:
58:2c:53:38:36:aa:52:ef:88:4e:74:ee:a3:02:a9:
02:83:01:ee:e3:42:af:90:fe:45:e4:8b:1c:f9:61:
af:7b:3a:16:02:c0:62:e8:1e:a3:53:ce:c0:5a:3e:
73:6f:58:3e:da:13:78:38:09:07:06:66:53:c6:d1:
ea:19:1f:03:2c:d9:ca:74:32:d1:bc:54:80:01:ef:
cc:09:8b:47:08:5c:6b:4c:3c:07:e1:a4:e3:fb:e6:
82:5a:85:9a:41:38:9e:89:a0:7e:e5:9a:d5:9b:1b:
e9:9c:19:12:71:8a:50:de:ab:77:db:2d:1c:c0:e8:
51:c3:29:c9:ff:e7:66:14:8d:fe:8d:51:5c:9e:7c:
7f:d6:34:d2:85:ba:74:80:f3:43:fc:7e:93:6f:f3:
a5:88:0a:f5:56:fe:e5:09:e2:04:26:0c:93:7a:d7:
59:59:f1:bb:e1:5e:ed:8d:cc:30:ba:11:21:5b:39:
67:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:12:15:71:9F:EE:7E:C9:E2:2D:5D:27:1F:A2:C0:33:E0:71:E3:A4
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/txIVcZ_ufsniLV0nH6LAM-Bx46Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.178.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:39:7e:15:c4:16:cb:7a:55:ed:14:7a:b9:95:9d:ec:91:e9:
f1:94:74:c6:a0:88:d6:71:72:43:61:f9:82:04:25:e7:6a:d5:
22:6c:d1:ad:a3:62:f9:de:cd:c4:1e:2c:60:f5:55:2c:25:9f:
95:60:89:64:48:a5:42:95:d1:07:f8:52:00:05:55:84:a8:b6:
48:b9:ee:54:af:7e:2b:77:a0:e1:7c:64:38:dc:84:18:c9:3d:
18:e7:d8:03:6d:cf:a7:e4:d9:f6:d1:2b:c8:c8:bc:40:1b:ce:
d5:aa:cc:96:b0:72:a1:67:7d:41:db:ef:bc:3f:0b:6a:36:0e:
24:da:e0:eb:59:c5:11:40:47:37:a8:3c:95:53:56:67:c6:c2:
02:26:d1:5b:18:c5:7f:8f:c0:64:53:3f:68:37:79:ad:47:a2:
b4:c6:95:95:97:6f:97:29:45:6f:7e:b0:99:70:21:22:16:40:
ae:0e:9d:3a:11:bb:dd:cb:a5:8e:85:32:c7:fb:55:8e:59:aa:
ad:ca:04:15:73:a5:8a:98:5a:02:80:81:d2:34:59:7e:40:a2:
52:ed:58:42:d5:17:2c:3c:53:c2:1e:0a:bc:e2:3f:b5:15:bf:
0f:d0:4f:d6:93:80:4f:0f:f8:45:9b:0b:ac:c5:0e:56:22:49:
8a:36:32:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org