Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e6e0e5-9864-4657-aa23-5581caf05d98/1/uI7Fjq_6yYSFj83HY8UC-tYfoa8.roa
File: uI7Fjq_6yYSFj83HY8UC-tYfoa8.roa (raw, json)
Hash identifier: RxHSakuqZBtXc8qVn9/EBncTre2MM/R3L7wPhh5NGjQ=
Subject key identifier: B8:8E:C5:8E:AF:FA:C9:84:85:8F:CD:C7:63:C5:02:FA:D6:1F:A1:AF
Certificate issuer: /CN=28742b63e457b1f9e7c76321d3c5707e9f3522b6
Certificate serial: B360CF
Authority key identifier: 28:74:2B:63:E4:57:B1:F9:E7:C7:63:21:D3:C5:70:7E:9F:35:22:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHQrY-RXsfnnx2Mh08Vwfp81IrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e6e0e5-9864-4657-aa23-5581caf05d98/1/uI7Fjq_6yYSFj83HY8UC-tYfoa8.roa
Signing time: Thu 17 Mar 2022 21:24:39 +0000
ROA not before: Thu 17 Mar 2022 21:24:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48678
IP address blocks: 141.98.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11755727 (0xb360cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28742b63e457b1f9e7c76321d3c5707e9f3522b6
Validity
Not Before: Mar 17 21:24:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b88ec58eaffac984858fcdc763c502fad61fa1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:27:e8:6b:6e:2b:cd:77:19:b2:86:cf:96:42:
68:15:32:0d:f0:2f:38:23:1b:dc:40:a7:f8:be:5f:
95:f5:7f:37:9b:65:58:44:17:a7:ab:e2:f5:89:83:
e9:b3:8a:e9:72:92:f6:fb:a8:0a:89:e7:e2:15:04:
a3:cb:80:4e:7a:54:22:6f:cf:9f:7f:14:d3:e3:ca:
12:4a:b3:ae:a9:f1:9a:1b:dc:39:1b:bc:6c:38:50:
79:5f:85:98:0e:6b:76:7a:93:94:b9:1d:6b:4f:c0:
04:93:cd:1c:a6:08:3a:1f:14:7d:0c:e4:27:33:af:
db:76:7d:52:b8:5c:b7:b4:6f:09:43:54:e8:b9:88:
b2:38:b9:b1:f9:78:a6:6b:e9:6b:a7:ce:f4:d0:95:
0c:f0:a4:12:7c:2f:13:a5:3f:da:4c:af:a5:ed:92:
15:21:8a:9b:58:9d:df:28:e8:a5:a1:67:34:cf:6b:
4f:b9:d0:35:f0:00:17:60:49:6e:71:7b:85:ef:6b:
b3:14:c8:74:61:eb:ac:7a:e3:3c:67:66:67:5f:fd:
c5:e1:43:a2:39:9b:7f:84:38:31:58:cd:3d:c3:8a:
57:32:72:88:6c:40:2a:26:ca:40:5e:ae:91:d9:95:
91:44:d4:18:9f:f9:aa:05:2b:31:79:50:99:f7:5f:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8E:C5:8E:AF:FA:C9:84:85:8F:CD:C7:63:C5:02:FA:D6:1F:A1:AF
X509v3 Authority Key Identifier:
keyid:28:74:2B:63:E4:57:B1:F9:E7:C7:63:21:D3:C5:70:7E:9F:35:22:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHQrY-RXsfnnx2Mh08Vwfp81IrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e6e0e5-9864-4657-aa23-5581caf05d98/1/uI7Fjq_6yYSFj83HY8UC-tYfoa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e6e0e5-9864-4657-aa23-5581caf05d98/1/KHQrY-RXsfnnx2Mh08Vwfp81IrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.1.0/24
Signature Algorithm: sha256WithRSAEncryption
53:4b:a5:27:20:d9:ac:93:ef:2d:09:2f:b5:dd:cc:47:07:38:
d3:15:1e:0b:28:e7:19:cd:02:52:62:c6:f8:0f:5e:87:f5:c4:
51:1a:e4:fb:3f:f1:74:bc:77:3a:7f:64:95:f6:dc:8b:a0:44:
c4:d9:18:76:df:06:68:d1:cd:59:42:8a:75:f5:e9:9c:8d:61:
23:05:a7:2b:d2:56:63:78:56:c7:70:d5:30:9c:36:97:8d:80:
d5:1b:aa:20:81:cd:b6:45:4c:0b:ba:42:00:51:e0:7d:74:2e:
c7:9b:2c:bb:de:6e:32:0d:1b:af:26:69:3b:78:4b:01:1a:ef:
42:b5:3e:52:d0:ae:e4:ef:b3:2c:0c:fc:bf:73:57:c5:a2:84:
1b:5d:1a:d7:b2:66:6e:5c:26:8d:1c:be:17:d1:79:03:d4:ae:
c9:cc:2f:0f:91:fe:57:5b:b1:77:f8:37:bc:58:f6:ef:a5:18:
03:3e:ba:44:b6:f8:1c:cb:4f:fd:ff:39:92:cf:68:7e:7b:a1:
1f:ae:5b:1b:52:0b:24:16:27:38:f0:4b:af:dc:96:f2:84:c7:
10:fd:72:2f:be:04:4b:e1:dc:98:a2:4e:7d:50:41:da:6d:4e:
b8:99:5a:b2:19:d8:ec:fb:cb:25:33:60:60:25:d5:74:96:da:
2b:53:ef:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:49 2023 by rpki-client on console-ams.rpki-client.org