Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/6xO99Epx2eDZEHMLxhgPb6nmnw0.roa
File: 6xO99Epx2eDZEHMLxhgPb6nmnw0.roa (raw, json)
Hash identifier: kTABv5JxMm1Y2jgppBipR9E20UZR+QUAytSuUD6aBwg=
Subject key identifier: EB:13:BD:F4:4A:71:D9:E0:D9:10:73:0B:C6:18:0F:6F:A9:E6:9F:0D
Certificate issuer: /CN=1d6dabc3628f271f8c5b0cdb184d18bcde5b9900
Certificate serial: 0438BC77
Authority key identifier: 1D:6D:AB:C3:62:8F:27:1F:8C:5B:0C:DB:18:4D:18:BC:DE:5B:99:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HW2rw2KPJx-MWwzbGE0YvN5bmQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/6xO99Epx2eDZEHMLxhgPb6nmnw0.roa
Signing time: Fri 25 Mar 2022 14:15:12 +0000
ROA not before: Fri 25 Mar 2022 14:15:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212249
IP address blocks: 141.98.112.0/24 maxlen: 24
141.98.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70827127 (0x438bc77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d6dabc3628f271f8c5b0cdb184d18bcde5b9900
Validity
Not Before: Mar 25 14:15:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb13bdf44a71d9e0d910730bc6180f6fa9e69f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6c:ad:a1:f2:d1:00:71:13:c7:b7:19:59:b3:
26:32:7f:17:57:f0:bf:b3:26:a2:a0:b7:4b:fe:14:
ab:3a:2f:68:b4:a7:77:d4:2f:fc:64:d3:c8:f9:3c:
96:fa:12:c3:e7:4f:5c:66:76:c9:f3:94:de:71:fa:
72:cb:0a:f7:d1:4e:59:64:f1:94:0f:97:ff:3e:12:
ee:13:61:de:f3:a0:94:98:73:f7:d2:93:ee:a7:f4:
bd:10:86:0d:64:fe:3c:45:90:a8:06:d7:7b:18:04:
a0:34:9e:8d:7b:00:4f:79:c7:27:82:ea:8e:a2:5f:
b4:47:53:01:b7:10:f3:fb:6d:c9:99:50:1e:9b:55:
4e:9d:6f:b8:0e:07:24:20:39:d8:32:be:75:39:a8:
4c:99:ed:74:79:43:ad:7a:24:28:04:f9:33:a7:b9:
68:3f:52:e0:b2:fe:2c:10:93:43:0b:52:fb:30:0e:
ee:83:d0:75:95:ae:3e:f3:b7:01:a8:87:01:74:51:
76:6b:83:d3:33:bd:bc:a2:03:52:c2:ea:ab:3d:c3:
33:e2:8c:bf:ee:1c:42:3b:b4:27:6d:21:d1:bb:da:
69:4f:e6:a4:33:93:f1:7c:1d:13:80:84:75:79:a0:
77:be:ae:48:c0:c1:c8:f7:d0:b4:0c:a4:16:c0:9d:
7a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:13:BD:F4:4A:71:D9:E0:D9:10:73:0B:C6:18:0F:6F:A9:E6:9F:0D
X509v3 Authority Key Identifier:
keyid:1D:6D:AB:C3:62:8F:27:1F:8C:5B:0C:DB:18:4D:18:BC:DE:5B:99:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HW2rw2KPJx-MWwzbGE0YvN5bmQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/6xO99Epx2eDZEHMLxhgPb6nmnw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/HW2rw2KPJx-MWwzbGE0YvN5bmQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.112.0/23
Signature Algorithm: sha256WithRSAEncryption
02:70:1d:5a:a1:29:a5:40:4b:da:e7:11:31:58:9c:ef:fa:9b:
01:ac:b0:3d:d2:c4:e7:63:d7:e6:a5:8c:15:72:42:db:16:d0:
bb:cb:82:34:ec:dd:dc:70:66:4e:ea:eb:91:a7:b2:1e:af:34:
91:08:91:6b:a9:19:1a:ce:36:de:90:a3:9d:62:6e:2c:71:ad:
ea:80:98:d2:41:7d:92:98:a9:8d:40:0e:11:4a:34:45:23:9b:
e7:3a:9b:9b:92:da:a2:0e:58:18:a7:a7:6a:25:46:68:7c:04:
3c:7e:25:97:bb:d9:c5:28:48:a7:8d:5c:50:2b:85:88:45:86:
cd:f6:35:78:72:8c:6d:fd:22:83:08:f2:ee:2e:56:55:56:63:
02:ad:1a:93:e4:8b:eb:52:76:ec:c4:06:25:1d:32:bf:88:65:
22:d6:fa:54:30:53:0e:75:ae:a1:53:6f:f5:5a:23:84:10:9d:
d2:02:7f:f7:9d:78:e6:89:e9:22:a4:fa:82:c2:fb:2c:d3:fa:
45:ea:7c:6c:f5:cf:f6:12:0b:db:a5:34:71:e4:0b:dd:e0:8f:
3f:ee:96:9b:d8:07:69:04:bb:82:dd:d6:78:0b:79:a2:f3:6f:
d6:41:eb:73:1b:10:6d:95:22:55:4c:1a:ed:86:bc:ca:76:07:
88:a8:fd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:24 2023 by rpki-client on console-ams.rpki-client.org