Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/u05pT6kS89NqPixXetGMdqI2ftc.roa
File: u05pT6kS89NqPixXetGMdqI2ftc.roa (raw, json)
Hash identifier: MDs2bdW7TZRYxffc41612LkXt/P+77d/qePxv7EqmAY=
Subject key identifier: BB:4E:69:4F:A9:12:F3:D3:6A:3E:2C:57:7A:D1:8C:76:A2:36:7E:D7
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 018501187E478A3DE9A05D442D5F11D1F8DC
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/u05pT6kS89NqPixXetGMdqI2ftc.roa
Signing time: Sun 11 Dec 2022 12:11:00 +0000
ROA not before: Sun 11 Dec 2022 12:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 141.98.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:01:18:7e:47:8a:3d:e9:a0:5d:44:2d:5f:11:d1:f8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Dec 11 12:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb4e694fa912f3d36a3e2c577ad18c76a2367ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:58:bf:d4:6b:3b:65:91:9a:cf:ec:f3:c8:b5:
43:4b:db:27:18:af:ce:ee:2e:85:2b:63:46:40:93:
f4:6d:82:fb:c6:30:97:00:5d:39:a8:ae:cb:ad:cc:
93:c2:0e:4e:a4:d5:92:ec:70:22:3d:ec:5c:b5:17:
fb:07:43:95:77:fe:bc:9e:44:f3:c9:99:b1:0b:67:
c2:21:f3:c4:d2:69:47:4e:af:55:99:77:0e:1a:d1:
b8:0e:e8:7f:be:ee:b7:c6:77:38:db:cf:d2:42:09:
27:02:87:a4:da:40:65:66:d4:cc:df:c7:19:89:9b:
ae:37:b8:a2:52:9e:ec:42:c2:f8:19:8a:d0:37:bc:
88:10:f4:a4:26:58:d7:01:96:a1:c2:be:99:5b:f5:
0f:df:38:b0:1b:7d:36:cd:2f:31:97:47:93:04:78:
c7:ec:b7:30:be:11:50:79:ed:06:0b:ee:2c:11:43:
8b:27:7c:3f:97:9e:53:da:cf:4a:b0:8a:07:9a:a7:
a7:c6:4f:47:2c:de:2f:95:45:ff:34:ec:71:27:87:
e8:cc:af:1e:39:2d:93:be:5d:02:d0:59:1b:3b:b9:
de:3e:1e:6d:3d:14:05:a6:07:ce:7b:b4:5c:06:b1:
c8:cc:ef:6c:1b:67:7e:a8:65:72:0a:f6:38:b9:24:
bb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4E:69:4F:A9:12:F3:D3:6A:3E:2C:57:7A:D1:8C:76:A2:36:7E:D7
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/u05pT6kS89NqPixXetGMdqI2ftc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.72.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:eb:40:de:53:fe:20:98:94:de:5e:16:6c:58:04:16:3e:41:
a1:32:0e:62:67:29:24:5a:c2:b1:fd:07:36:79:2c:0d:ec:e8:
45:38:46:c2:ed:b6:7c:d0:bb:b1:ed:bc:04:1d:c1:a0:23:e3:
86:b5:7d:4b:cd:12:6f:ef:aa:c6:61:95:d4:70:ab:e8:b1:96:
51:17:6f:69:45:87:cc:52:10:b7:cd:4d:08:b8:57:04:92:4c:
23:6c:cc:9e:7d:45:11:6a:18:ef:04:a1:8b:cb:13:6b:87:e9:
ca:34:3e:22:30:4e:f1:cb:86:b6:8d:ad:c1:0b:9b:b5:a9:f1:
0b:8f:70:31:f9:00:61:86:35:b5:dd:29:28:91:c5:57:71:ab:
eb:01:8c:ad:de:94:85:e0:a7:9a:c6:9f:28:90:10:32:d6:d3:
28:4c:68:e1:d0:41:50:86:8b:92:52:bb:94:e7:50:04:6b:2e:
b1:b6:3b:8f:85:d6:92:8d:4a:1a:8b:86:e6:1f:b1:20:47:9c:
a6:04:79:0c:f1:18:49:6f:7b:28:0b:0a:63:12:a5:ca:96:a6:
24:9c:c2:53:d6:40:4d:a0:30:27:79:42:a3:83:30:65:9c:fa:
13:11:c6:e5:02:9e:76:fd:64:6f:cb:31:2a:95:d8:e2:96:30:
56:ba:47:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org