Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/JSlw6S7HQKVdO-vopyxp2_gKz98.roa
File: JSlw6S7HQKVdO-vopyxp2_gKz98.roa (raw, json)
Hash identifier: Ea2apgrFr3kKPEKQYpCSV4EHP98sbzA4dKm+EVvfH80=
Subject key identifier: 25:29:70:E9:2E:C7:40:A5:5D:3B:EB:E8:A7:2C:69:DB:F8:0A:CF:DF
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0182E57BC314F58E6655E938E19DD3B74CDE
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/JSlw6S7HQKVdO-vopyxp2_gKz98.roa
Signing time: Sun 28 Aug 2022 17:24:29 +0000
ROA not before: Sun 28 Aug 2022 17:24:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 141.98.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e5:7b:c3:14:f5:8e:66:55:e9:38:e1:9d:d3:b7:4c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Aug 28 17:24:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=252970e92ec740a55d3bebe8a72c69dbf80acfdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e8:c9:ab:c8:94:be:a5:70:29:b0:cd:3f:87:
08:59:a2:21:58:82:f0:f5:4b:9a:eb:44:f3:9a:c4:
84:ba:d3:6d:37:66:4e:f5:32:fa:9c:b0:56:35:d7:
ed:f5:b5:79:54:fa:2d:4c:f4:ca:5a:6e:d1:26:1a:
bb:52:72:4e:9b:8e:e0:2c:11:38:8f:bf:7e:77:66:
d5:8c:bc:38:fb:72:30:cf:0a:27:fd:dc:f7:18:4f:
8c:1e:c3:be:f9:b8:5d:f4:e3:b6:35:2d:83:b3:cf:
bd:df:e3:d7:8b:fa:ed:68:77:5d:ec:8d:87:f5:58:
52:6c:52:89:da:30:cc:ec:4f:10:a3:6b:00:01:b2:
09:d7:21:bb:db:a1:1f:c5:11:d7:b6:2d:c3:55:c3:
dd:c8:4e:c2:7b:9f:97:2f:74:2d:52:40:4b:27:29:
8e:43:32:21:79:08:63:be:07:b5:9c:c5:9a:bd:54:
2c:11:0d:f8:66:64:d8:94:63:0d:8e:f9:11:9d:b9:
70:5d:8e:2d:4d:5d:2c:07:f9:10:7e:2f:31:62:de:
8c:89:45:49:ce:6f:81:22:7f:ca:5b:0a:2b:7c:87:
1d:18:ca:fa:13:1c:a2:b4:25:9f:07:be:8a:21:71:
40:0e:0d:0e:9e:6d:52:50:7a:c7:07:56:4f:fe:97:
99:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:29:70:E9:2E:C7:40:A5:5D:3B:EB:E8:A7:2C:69:DB:F8:0A:CF:DF
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/JSlw6S7HQKVdO-vopyxp2_gKz98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.74.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:81:cd:e3:17:5b:77:42:00:64:e4:7d:0f:67:18:65:4d:1d:
b3:47:37:27:0c:2d:c0:69:71:aa:36:a5:66:db:6f:89:4f:05:
15:72:cb:41:6b:d3:23:c2:8e:c8:71:0d:5c:ef:a0:e9:16:7b:
ce:dc:c4:27:c8:5a:c2:ad:6f:30:f2:1a:8a:72:49:41:6d:09:
ab:a0:44:5f:b5:95:2d:bb:33:22:88:c4:2f:0b:aa:e9:cb:86:
36:11:65:23:d8:cf:60:fc:83:d2:b9:7c:1b:a3:55:73:2f:4a:
54:46:db:11:74:0c:88:71:e9:4b:5c:13:c9:e3:7a:82:5a:19:
9a:22:d1:e5:36:84:02:d7:1c:25:2e:3d:1e:63:e8:49:4d:52:
1d:1a:05:89:72:08:23:4c:7f:08:8f:ea:ec:b4:9d:26:f8:5b:
e3:24:35:ca:a1:08:cb:37:5c:60:05:e7:cf:45:2d:21:7b:99:
1a:ec:6d:44:93:2a:0d:20:f9:ee:ca:5e:50:8e:04:7b:6e:75:
b7:bc:d6:81:52:11:96:5b:3f:3b:f1:02:1c:93:1e:42:9a:0f:
3f:4e:ef:dd:1b:10:63:64:6f:f6:b5:f4:59:ee:9c:79:5a:d8:
53:e7:6a:68:da:7f:19:70:25:7b:7e:e6:60:82:03:12:29:bd:
79:a2:cd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:39 2023 by rpki-client on console-fra.rpki-client.org