Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/uRfRWeTzRk5IYzHF_5s3dmW7K_I.roa
File: uRfRWeTzRk5IYzHF_5s3dmW7K_I.roa (raw, json)
Hash identifier: +2Jl0xscuTR8H3j3caN4/RFuiQ8fvZC8mTwRBQgHfrI=
Subject key identifier: B9:17:D1:59:E4:F3:46:4E:48:63:31:C5:FF:9B:37:76:65:BB:2B:F2
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01837981BE4E6C121D63A84D397F8F3D647C
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/uRfRWeTzRk5IYzHF_5s3dmW7K_I.roa
Signing time: Mon 26 Sep 2022 11:14:49 +0000
ROA not before: Mon 26 Sep 2022 11:14:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 141.11.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:79:81:be:4e:6c:12:1d:63:a8:4d:39:7f:8f:3d:64:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 26 11:14:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b917d159e4f3464e486331c5ff9b377665bb2bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:4e:10:1a:d1:6a:e5:9a:20:b1:65:23:53:
5b:96:2c:8e:0a:b5:13:16:63:54:3d:ca:e6:1b:f9:
0d:d0:20:87:5f:72:88:ed:2c:45:bd:06:61:10:0f:
2c:7e:cc:08:01:09:8e:83:d7:e8:59:ac:0f:3d:89:
5e:8b:ea:c0:9b:59:f2:52:4d:b3:0c:a5:7b:ea:2f:
0a:7b:30:b9:d0:82:5a:6b:37:c0:8e:a5:0c:22:b4:
fe:ed:8e:dd:98:cc:d9:b0:96:ed:f7:89:2f:6f:71:
92:58:1e:63:7b:20:5b:28:67:d8:02:1b:23:a6:df:
db:02:9b:bf:ff:9c:ef:ca:d1:38:8e:8b:d1:90:89:
3b:25:67:c2:98:a2:d6:da:00:17:4d:f4:47:2f:53:
29:bc:e9:4a:33:5e:24:28:ad:a1:fe:24:cd:a0:24:
49:57:fd:a7:9b:9a:0e:a6:61:c0:32:8e:0f:43:77:
bc:26:e0:5e:77:7f:e8:1e:19:f6:06:d8:c8:2d:c3:
04:b8:54:0e:cf:33:cb:da:50:a7:ea:6c:57:f0:bc:
43:7d:0c:94:a6:a0:0f:30:57:f8:56:4c:bd:f8:ce:
e4:ba:a8:e1:9f:00:84:e4:f1:50:bf:7c:8b:ec:a9:
dc:61:14:6b:2e:3e:a8:27:e9:44:1d:42:7f:ee:e1:
76:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:17:D1:59:E4:F3:46:4E:48:63:31:C5:FF:9B:37:76:65:BB:2B:F2
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/uRfRWeTzRk5IYzHF_5s3dmW7K_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.248.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:20:6a:34:a8:a2:07:ee:09:10:92:76:f7:5a:78:09:74:33:
39:be:f8:79:6b:0e:92:2c:a5:75:e8:25:03:90:3c:89:89:67:
e7:54:dc:40:59:f0:e0:9e:45:08:26:5e:5c:d9:4f:db:bf:e2:
f8:23:5f:c9:65:8e:f0:60:af:bd:6d:59:2a:fb:6d:75:f9:19:
30:70:98:5f:79:6e:85:11:b7:d6:8e:2b:16:bf:16:b8:c4:10:
f4:0a:14:60:8c:cb:10:9f:f5:24:9f:77:65:30:ed:e4:ad:ec:
0f:c4:86:59:61:a5:1c:aa:82:e0:e3:c7:6c:94:11:bf:18:85:
d6:ec:c2:99:8c:a5:57:9d:3a:11:9c:ba:47:dc:be:07:dc:80:
27:df:76:f2:51:69:05:67:37:86:78:99:e6:b7:92:aa:bc:f8:
96:c0:ef:4f:57:23:ac:f6:35:52:98:9d:4b:77:55:62:f5:b4:
a0:d6:9a:5d:16:01:07:95:cd:ce:73:0e:ab:ce:62:d9:e2:7f:
63:1c:1a:19:bc:82:dd:13:05:bc:a6:0d:43:fd:ca:e3:5e:f8:
07:81:49:62:68:ef:71:98:4b:f1:8e:e3:a9:3f:b7:cc:2b:45:
2f:08:52:99:a4:ed:bb:86:fe:87:c9:62:c8:88:3a:97:22:9f:
4f:cc:1b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:17 2023 by rpki-client on console-fra.rpki-client.org