Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/vBYJuLCin0dhaafGYkwIvaG_OQM.roa
File: vBYJuLCin0dhaafGYkwIvaG_OQM.roa (raw, json)
Hash identifier: O9HzHCK48FtQp0FhQ7u1tL2CAIu4oRBEaimOUoZhEL0=
Subject key identifier: BC:16:09:B8:B0:A2:9F:47:61:69:A7:C6:62:4C:08:BD:A1:BF:39:03
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 026B0D5C
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/vBYJuLCin0dhaafGYkwIvaG_OQM.roa
Signing time: Sat 01 Jan 2022 08:03:22 +0000
ROA not before: Sat 01 Jan 2022 08:03:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57416
IP address blocks: 141.11.160.0/24 maxlen: 24
141.11.177.0/24 maxlen: 24
141.11.4.0/24 maxlen: 24
141.11.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40570204 (0x26b0d5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jan 1 08:03:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc1609b8b0a29f476169a7c6624c08bda1bf3903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:08:ad:4d:a0:e5:cb:24:69:cb:0a:2d:e6:af:
ec:c3:f9:c5:74:78:d3:6c:94:5e:1c:92:b1:fa:e8:
af:b9:cd:24:c1:10:bd:09:5d:3a:c7:4a:ef:d8:ca:
81:df:dd:bb:f1:23:75:d0:dc:72:29:d3:f5:29:a5:
ce:9e:cd:6c:8d:dc:31:73:01:24:29:1f:a0:08:14:
ab:a2:9e:92:83:d6:60:f1:8e:f2:59:79:c5:e3:d0:
cb:9f:b6:8e:54:cf:a8:03:ff:19:89:69:67:de:84:
e5:fa:f6:b0:4f:7c:07:ad:59:f8:63:a9:c8:b2:49:
4f:e4:6f:65:45:72:c2:b1:85:b0:72:f5:e7:e7:04:
7e:81:13:3b:1b:af:5c:63:92:9f:af:59:1f:00:67:
d8:41:67:5b:04:d6:80:10:56:ab:77:bc:08:cc:08:
ea:97:10:d7:56:b7:d5:3f:d7:d2:31:5f:03:a8:8f:
a9:16:06:27:d7:57:54:ae:13:cf:7e:78:7b:b9:9f:
9f:55:8c:b2:28:32:55:a7:bb:73:a7:f7:ba:89:98:
bc:ad:70:f9:1e:58:90:60:f3:35:8a:f8:ea:97:6c:
5c:0b:e7:b4:4d:5e:34:f7:33:48:25:e1:97:fa:9f:
f1:80:1d:ea:79:27:fd:45:d4:29:3e:76:67:4d:05:
de:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:16:09:B8:B0:A2:9F:47:61:69:A7:C6:62:4C:08:BD:A1:BF:39:03
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/vBYJuLCin0dhaafGYkwIvaG_OQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.4.0/24
141.11.27.0/24
141.11.160.0/24
141.11.177.0/24
Signature Algorithm: sha256WithRSAEncryption
03:51:dc:bf:6a:7d:68:b7:72:18:c1:2d:41:02:1e:34:b5:32:
f9:a1:fc:80:a7:3e:35:93:3e:c4:77:7e:b7:42:af:d2:da:a8:
47:f3:66:31:97:21:89:ef:06:22:73:14:dd:47:fe:8f:f4:50:
72:ac:bc:94:8a:0e:46:a1:27:94:6b:dd:ea:bd:b4:01:f7:2e:
af:ce:19:76:3c:96:79:0f:13:05:65:b3:05:3f:24:ea:bd:b2:
7c:a1:92:91:6e:80:ba:b4:e3:41:8b:eb:11:77:40:4f:2e:fd:
1e:fb:05:fe:bf:03:43:d6:6b:e3:bb:8c:41:30:0f:ef:72:d8:
6d:d1:fe:55:dc:9e:18:76:de:4e:f6:fe:dc:58:80:f1:1f:df:
d8:88:a9:57:4b:ec:f7:92:3a:bc:c3:6a:88:e3:2a:3f:13:bd:
09:09:aa:9a:ec:d2:fc:2f:12:7d:10:ab:91:e4:ac:f9:b3:32:
d7:03:11:35:dc:fe:dc:0f:c5:f7:b0:37:06:47:46:80:6b:0b:
5e:a3:29:fd:dc:d5:fe:2f:e7:fa:d1:0a:91:95:c4:2a:6d:dc:
1f:0a:7a:68:12:0a:ad:57:8d:8d:88:c3:06:79:1c:c8:6b:06:
f6:38:4a:2e:83:94:68:7e:34:ae:69:74:cc:d6:74:53:b9:85:
59:41:7b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:17 2023 by rpki-client on console-fra.rpki-client.org