Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/IcXq6ZzEmpxqmyit83y4TWORxFM.roa
File: IcXq6ZzEmpxqmyit83y4TWORxFM.roa (raw, json)
Hash identifier: O+2OZK7i8fBKqVU59BYYXDHb5Nz5gbK9DLzi93DLChM=
Subject key identifier: 21:C5:EA:E9:9C:C4:9A:9C:6A:9B:28:AD:F3:7C:B8:4D:63:91:C4:53
Certificate issuer: /CN=1d6dabc3628f271f8c5b0cdb184d18bcde5b9900
Certificate serial: 042E6BD2
Authority key identifier: 1D:6D:AB:C3:62:8F:27:1F:8C:5B:0C:DB:18:4D:18:BC:DE:5B:99:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HW2rw2KPJx-MWwzbGE0YvN5bmQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/IcXq6ZzEmpxqmyit83y4TWORxFM.roa
Signing time: Tue 22 Mar 2022 13:19:26 +0000
ROA not before: Tue 22 Mar 2022 13:19:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212249
IP address blocks: 141.98.112.0/24 maxlen: 24
141.98.113.0/24 maxlen: 24
141.98.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70151122 (0x42e6bd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d6dabc3628f271f8c5b0cdb184d18bcde5b9900
Validity
Not Before: Mar 22 13:19:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21c5eae99cc49a9c6a9b28adf37cb84d6391c453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e6:ce:2c:2e:4d:5f:ac:ba:ef:91:22:96:fb:
1c:69:5c:d0:69:fe:4f:51:5d:dc:18:ba:02:54:b2:
30:47:1e:8f:42:a2:ab:bf:97:ff:a8:60:c8:bb:80:
3a:ec:d8:cd:ec:36:44:02:e3:2c:69:06:e9:e7:5f:
b2:40:64:a9:96:84:db:2e:e0:b3:39:93:66:8f:98:
d7:d6:d0:79:43:7d:44:84:8f:40:c5:91:f8:5e:24:
4f:1a:54:d7:f7:7a:40:93:65:a0:bd:b5:9d:f0:18:
dc:9a:f7:ee:8c:cf:2f:d8:ec:ca:24:26:f0:4b:46:
00:ad:e1:0f:9b:f6:8b:a6:62:7c:0a:74:31:aa:1d:
c6:4c:f8:cb:bf:a4:5c:00:87:45:24:84:e1:e2:19:
10:f2:79:42:73:8e:0c:bf:64:b2:8b:b3:ee:5f:51:
34:69:d0:f9:f7:82:6c:fd:ae:71:15:62:bf:b8:41:
5c:c9:b9:31:6b:bd:37:98:5d:8b:80:21:66:ad:8a:
89:0a:1e:94:c2:7d:20:22:db:13:8d:f3:c1:e1:ee:
aa:29:5e:24:95:9b:dc:4d:cf:03:24:83:82:a5:07:
11:04:a2:b1:75:37:41:62:c6:80:f8:7b:d9:4e:fc:
5f:97:44:93:48:2a:0d:a4:21:5f:14:d8:f4:a4:d6:
68:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C5:EA:E9:9C:C4:9A:9C:6A:9B:28:AD:F3:7C:B8:4D:63:91:C4:53
X509v3 Authority Key Identifier:
keyid:1D:6D:AB:C3:62:8F:27:1F:8C:5B:0C:DB:18:4D:18:BC:DE:5B:99:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HW2rw2KPJx-MWwzbGE0YvN5bmQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/IcXq6ZzEmpxqmyit83y4TWORxFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/HW2rw2KPJx-MWwzbGE0YvN5bmQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.112.0-141.98.114.255
Signature Algorithm: sha256WithRSAEncryption
38:b7:18:3e:27:c9:92:0d:c5:e2:73:df:47:2a:0e:e3:77:65:
75:53:ad:43:77:15:bb:f3:e8:47:90:68:a0:be:ff:bc:ca:75:
f6:c2:04:6f:00:c3:a7:c9:3b:b5:17:4b:fa:86:94:8d:62:07:
7a:79:b3:8c:76:9b:fb:23:8c:99:ad:e7:1d:77:11:20:ad:87:
a4:10:eb:00:98:f2:ed:54:4b:40:3b:29:b5:5f:12:46:90:22:
cb:6e:b0:16:e5:fa:62:8c:c5:9e:bc:11:74:69:e9:c2:1a:84:
b1:16:65:4a:95:26:8a:5e:ec:69:5c:f8:d9:3c:87:20:75:75:
a3:27:45:4e:8e:92:79:3c:86:71:dc:ba:40:13:94:67:95:c2:
90:fd:d0:54:bc:3d:d3:7e:4d:79:91:90:24:dd:13:3c:28:1d:
07:56:93:37:12:1f:43:67:08:70:27:2f:81:29:e4:3b:c9:ed:
45:ab:69:fc:16:35:38:b7:d5:3b:a4:29:02:87:a2:97:72:ab:
5e:c0:6d:78:80:23:93:6c:0b:f8:22:0a:29:6a:02:4a:00:28:
55:00:e9:95:eb:fe:28:0f:36:a2:0f:c3:fa:9e:15:ff:91:d5:
3a:04:28:6d:a3:6b:9c:ee:14:98:5c:d3:59:cb:c4:4e:b9:f1:
1d:19:1a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-fra.rpki-client.org