Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/xJmfwkNPayB3HDX9otHfZEqUXH4.roa
File: xJmfwkNPayB3HDX9otHfZEqUXH4.roa (raw, json)
Hash identifier: f9kof5LX4nY8b32OX511vcpS2c3O2Z2NoD9sqOEsVVk=
Subject key identifier: C4:99:9F:C2:43:4F:6B:20:77:1C:35:FD:A2:D1:DF:64:4A:94:5C:7E
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01856D9D119636D900428BC3023F664B53A0
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/xJmfwkNPayB3HDX9otHfZEqUXH4.roa
Signing time: Sun 01 Jan 2023 13:54:48 +0000
ROA not before: Sun 01 Jan 2023 13:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51561
IP address blocks: 141.98.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:11:96:36:d9:00:42:8b:c3:02:3f:66:4b:53:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 13:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4999fc2434f6b20771c35fda2d1df644a945c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8f:2b:e6:a2:86:ea:fb:5c:5e:72:fb:84:c8:
c5:5e:e2:76:c8:ee:5b:78:22:3e:8c:bf:57:4a:cd:
b8:0c:9f:40:30:97:d0:da:06:68:f7:ba:44:6a:22:
07:58:a4:c7:8d:f7:af:70:6f:b0:17:f9:51:43:03:
d2:7b:34:fd:10:e4:a3:ef:bc:23:45:18:80:4d:a7:
36:60:1a:9d:cb:23:3c:7c:ba:4f:36:c6:f7:aa:d4:
c9:64:2f:86:55:dd:bf:5e:00:72:1f:20:71:f9:f6:
3e:de:33:41:83:0b:4b:1c:dd:17:27:ff:b5:89:b7:
85:25:e8:64:30:ca:ba:4d:68:73:b2:7e:a8:e8:21:
bb:43:d4:67:11:f0:c4:22:14:bd:54:1a:ee:58:6c:
88:cc:06:40:fc:4a:1e:a9:9b:b5:05:a2:c8:eb:01:
a6:d8:e3:35:c5:7c:95:7b:39:31:c7:bc:c3:cb:f9:
e4:21:1b:44:26:dd:6a:27:1e:bb:5e:33:13:f3:86:
03:e3:e4:68:06:b4:45:79:20:8f:ba:85:6c:4a:f7:
75:ec:eb:ab:7e:fb:ff:de:87:f5:41:64:f0:12:19:
3f:14:dd:3d:40:c9:a9:dc:0a:81:83:99:6d:ac:2a:
2f:11:1a:7c:b6:ac:1c:25:d0:5b:bb:63:f8:79:b5:
8f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:99:9F:C2:43:4F:6B:20:77:1C:35:FD:A2:D1:DF:64:4A:94:5C:7E
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/xJmfwkNPayB3HDX9otHfZEqUXH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.73.0/24
Signature Algorithm: sha256WithRSAEncryption
26:77:07:fc:16:4c:c8:56:19:27:10:b7:2b:8c:c2:ed:08:6c:
eb:0f:1e:60:b9:4d:ec:d7:69:0f:a5:4e:91:ba:36:b5:9c:cc:
18:ca:61:05:6d:2d:fb:97:f6:1f:bf:aa:6c:6c:9e:37:d3:46:
a6:cf:f6:18:cc:65:2b:86:ca:e9:7d:23:07:61:9a:e9:42:61:
c8:b1:ea:ac:c1:90:ea:ce:a0:f2:67:ff:c8:d1:31:75:87:fd:
6e:27:16:b0:c4:cb:40:b1:09:0e:d5:1b:35:16:93:a3:64:da:
d9:a2:30:37:01:21:42:09:1f:b4:9d:45:2f:44:73:97:0e:a2:
63:95:74:25:5d:74:0e:4d:c0:3a:14:9a:f2:70:42:63:31:82:
b3:3c:3b:79:56:b1:f6:6f:bb:dd:c0:ee:fa:7c:99:f6:36:f8:
18:78:c7:d1:de:23:db:a7:f9:87:02:49:fc:f7:27:d0:ab:fb:
2f:95:e6:16:f6:ca:cf:88:41:24:95:04:87:7f:36:31:b8:4b:
ca:3c:df:43:ad:3f:f9:ca:89:7c:18:7a:2e:aa:af:52:9f:64:
44:7e:9d:ff:b3:34:fa:d8:7d:87:6a:18:90:2e:1c:06:a8:f9:
fb:dc:47:b5:ab:f3:17:7e:08:da:ca:88:37:0c:18:2e:1b:57:
57:44:c7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org