Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/azahbFvdafWTZDkE0HXXULleQdI.roa
File: azahbFvdafWTZDkE0HXXULleQdI.roa (raw, json)
Hash identifier: fSpNv/FfdGGXH4zv6M42+cSvw0WdbIEaLeFm70Wglc0=
Subject key identifier: 6B:36:A1:6C:5B:DD:69:F5:93:64:39:04:D0:75:D7:50:B9:5E:41:D2
Certificate issuer: /CN=1d6dabc3628f271f8c5b0cdb184d18bcde5b9900
Certificate serial: 0406984E
Authority key identifier: 1D:6D:AB:C3:62:8F:27:1F:8C:5B:0C:DB:18:4D:18:BC:DE:5B:99:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HW2rw2KPJx-MWwzbGE0YvN5bmQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/azahbFvdafWTZDkE0HXXULleQdI.roa
Signing time: Mon 07 Mar 2022 19:27:29 +0000
ROA not before: Mon 07 Mar 2022 19:27:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 141.98.112.0/24 maxlen: 24
141.98.115.0/24 maxlen: 24
141.98.113.0/24 maxlen: 24
141.98.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67541070 (0x406984e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d6dabc3628f271f8c5b0cdb184d18bcde5b9900
Validity
Not Before: Mar 7 19:27:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b36a16c5bdd69f593643904d075d750b95e41d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:8d:07:6a:3c:8b:1e:03:4e:51:f5:d3:76:
1a:c4:89:38:82:07:30:36:78:eb:98:01:b7:5c:a8:
5d:a0:b0:de:4f:2e:c3:09:f6:e7:f0:c9:31:cd:d2:
f6:7c:0f:e8:60:7c:4c:20:3d:a8:b0:b8:a7:29:b9:
91:66:b5:69:61:66:f4:ae:b6:71:42:cb:d5:36:5e:
33:1e:9f:17:bd:bc:6d:f1:55:ab:34:ad:87:06:46:
9e:fb:6c:0f:e7:4b:3b:f2:b2:eb:de:55:99:1d:e0:
ad:c2:55:cb:c1:50:a0:bc:93:6d:f2:5c:ee:99:d6:
04:43:ee:c9:16:01:67:c8:b5:95:1c:e6:8c:b4:bb:
d4:34:99:43:88:b8:b3:97:13:4c:bd:e3:51:fa:2d:
36:57:9e:96:59:4c:a6:f2:25:85:f5:c4:aa:c8:b9:
f7:03:c8:ed:15:d7:23:6f:39:34:f3:15:2c:38:9a:
34:9e:1c:c2:3f:ed:0e:40:11:24:c9:4e:b7:1d:1a:
f2:40:fb:9e:b6:76:f2:92:ed:bc:62:99:60:97:e8:
c3:89:db:e2:87:fc:48:aa:96:d8:9b:7d:5c:53:d9:
38:74:d8:ca:1c:97:ee:3e:52:b9:bb:4e:08:5f:31:
a9:01:37:16:ac:da:a8:ab:4f:c2:e3:2f:4c:75:f5:
08:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:36:A1:6C:5B:DD:69:F5:93:64:39:04:D0:75:D7:50:B9:5E:41:D2
X509v3 Authority Key Identifier:
keyid:1D:6D:AB:C3:62:8F:27:1F:8C:5B:0C:DB:18:4D:18:BC:DE:5B:99:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HW2rw2KPJx-MWwzbGE0YvN5bmQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/azahbFvdafWTZDkE0HXXULleQdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/HW2rw2KPJx-MWwzbGE0YvN5bmQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.112.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:3b:8d:f7:db:ea:58:c4:bf:59:69:d4:e4:83:96:1a:e8:b7:
8c:48:14:11:36:15:74:c7:5a:92:23:fe:af:26:df:b7:c7:c5:
57:d0:35:31:9f:ac:4f:af:73:cb:f4:82:0d:9d:88:56:b9:ef:
bc:e3:46:a2:ca:b1:f0:82:49:56:90:96:53:2c:da:5e:1b:c4:
e7:01:53:c5:24:91:ee:c1:6d:cf:4f:9c:7f:d6:1d:fd:ae:4f:
cb:e1:7b:d5:03:e7:5e:4e:a9:2a:c4:1d:fb:74:82:8d:df:fe:
06:a6:1a:9e:39:26:c5:8d:77:8e:15:3d:5d:74:03:d5:92:31:
30:d5:28:d7:fe:09:47:4b:f4:1e:a9:96:a2:8a:ce:41:61:76:
41:17:0e:14:a5:41:2b:f9:ba:23:64:51:fd:4f:cb:7c:98:da:
7c:f0:9e:a3:a3:67:0e:f9:4a:b2:76:c6:cf:40:b0:2f:60:a5:
91:e9:cd:d0:9a:08:62:eb:85:b8:3c:be:18:3f:db:64:8a:cf:
2f:0b:85:ed:c7:1e:63:b7:fb:d5:09:06:02:40:d6:13:f5:d9:
2a:15:fc:ff:48:dd:0a:50:35:a0:68:55:93:fd:f6:d5:4e:f7:
27:ae:ce:9d:39:d3:46:3c:d9:58:98:e6:66:39:19:98:c7:5b:
81:a8:81:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-fra.rpki-client.org