Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/whrfrkCQPAxEB9Ukb4J6vxslZDw.roa
File: whrfrkCQPAxEB9Ukb4J6vxslZDw.roa (raw, json)
Hash identifier: r7fX6Yea/SRD9jv4X86ML+uRnYovNkHRk0A9SNbV5WY=
Subject key identifier: C2:1A:DF:AE:40:90:3C:0C:44:07:D5:24:6F:82:7A:BF:1B:25:64:3C
Certificate issuer: /CN=1d6dabc3628f271f8c5b0cdb184d18bcde5b9900
Certificate serial: 047755EE
Authority key identifier: 1D:6D:AB:C3:62:8F:27:1F:8C:5B:0C:DB:18:4D:18:BC:DE:5B:99:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HW2rw2KPJx-MWwzbGE0YvN5bmQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/whrfrkCQPAxEB9Ukb4J6vxslZDw.roa
Signing time: Fri 22 Apr 2022 09:28:31 +0000
ROA not before: Fri 22 Apr 2022 09:28:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212249
IP address blocks: 141.98.113.0/24 maxlen: 24
141.98.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74929646 (0x47755ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d6dabc3628f271f8c5b0cdb184d18bcde5b9900
Validity
Not Before: Apr 22 09:28:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c21adfae40903c0c4407d5246f827abf1b25643c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e2:61:da:c0:02:79:a1:8b:8b:4d:bf:b0:f7:
20:73:f0:7a:a3:93:ca:9d:86:ef:87:fc:c2:20:76:
b6:d5:56:06:e1:79:54:c2:db:43:ba:8f:fa:60:26:
9f:e9:a8:cc:67:01:36:64:07:ba:1a:83:38:35:33:
ac:0a:06:66:ae:bc:93:53:ca:df:1d:2b:6a:a4:4d:
f5:f9:8a:20:0d:27:a0:ca:56:e2:e0:8a:45:fc:a7:
31:90:11:55:93:22:76:a3:d7:6b:13:9f:48:db:f2:
9d:66:0a:c3:dd:0e:a7:0f:86:5d:5c:57:34:85:43:
49:a6:57:2a:78:21:6e:a6:a7:f3:6b:87:e4:90:03:
d2:0b:0a:bb:b4:0f:f5:30:b9:c5:78:a0:99:ac:6b:
96:5b:1f:ac:ee:a6:35:36:d5:fb:7a:16:e9:c1:f5:
61:02:1b:70:fd:f7:f0:56:19:bb:fd:8f:b2:04:1a:
ac:5d:a0:e4:cd:ea:1d:f8:4b:bb:6a:f0:fa:1f:5d:
87:b2:93:89:fd:7b:e7:a6:70:42:4d:da:00:be:6f:
19:c2:c7:a6:fa:58:2a:e5:75:ff:e5:5e:a3:a5:13:
43:94:a6:74:b8:8e:ac:b7:08:2a:2a:9e:d6:36:2b:
02:41:f7:9c:8f:f2:87:e4:a1:1c:39:14:67:5d:05:
56:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1A:DF:AE:40:90:3C:0C:44:07:D5:24:6F:82:7A:BF:1B:25:64:3C
X509v3 Authority Key Identifier:
keyid:1D:6D:AB:C3:62:8F:27:1F:8C:5B:0C:DB:18:4D:18:BC:DE:5B:99:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HW2rw2KPJx-MWwzbGE0YvN5bmQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/whrfrkCQPAxEB9Ukb4J6vxslZDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/HW2rw2KPJx-MWwzbGE0YvN5bmQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.113.0-141.98.114.255
Signature Algorithm: sha256WithRSAEncryption
16:45:14:88:95:ba:52:28:ea:f0:be:d4:71:87:3b:e8:58:75:
83:05:27:f2:f5:11:ae:49:db:5c:6e:0d:b4:de:96:0b:d5:76:
31:38:ad:46:67:98:25:96:b6:6c:7e:d4:41:f3:c4:f5:7d:51:
07:d2:9a:ce:a6:75:e9:5f:3e:62:03:ed:a2:8d:b7:9e:f1:02:
36:09:73:52:6d:1a:b2:0e:09:88:27:e4:ff:1b:bc:fa:6d:78:
10:a0:09:a1:72:f1:48:32:ba:f3:85:cd:51:ed:c9:72:81:7e:
3c:3d:76:09:4c:25:60:99:cb:13:8d:46:f7:61:a3:1d:5b:81:
29:d8:88:13:9b:85:8e:40:42:c1:f4:b3:3c:0b:44:5f:99:3d:
3c:06:1c:27:1e:ae:ca:0b:91:4f:d2:61:2f:f3:be:76:f8:ad:
9e:cf:0b:55:6f:2d:55:d2:6a:95:cf:6b:44:e9:fd:ec:2f:84:
4d:ea:3a:5a:29:56:4e:66:a5:f8:9d:fe:12:ba:68:71:a2:af:
56:10:d5:25:e3:cf:6f:4d:7b:ec:a7:85:3a:15:6f:93:0f:37:
32:97:01:8c:4f:6e:0e:b0:25:25:e0:68:6d:7b:d5:24:a0:9f:
12:81:d8:d5:6b:66:cb:b0:b0:38:34:58:13:c9:61:0a:c1:1d:
e9:97:f2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:24 2023 by rpki-client on console-ams.rpki-client.org