Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/z4vW7g2coXqF1W76dIUY-g2fhn4.roa
File: z4vW7g2coXqF1W76dIUY-g2fhn4.roa (raw, json)
Hash identifier: quPGvJq5c0wraPRjbFqWKiI0b2bqs6p3NymK1+04X1o=
Subject key identifier: CF:8B:D6:EE:0D:9C:A1:7A:85:D5:6E:FA:74:85:18:FA:0D:9F:86:7E
Certificate issuer: /CN=1d6dabc3628f271f8c5b0cdb184d18bcde5b9900
Certificate serial: 0436E68E
Authority key identifier: 1D:6D:AB:C3:62:8F:27:1F:8C:5B:0C:DB:18:4D:18:BC:DE:5B:99:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HW2rw2KPJx-MWwzbGE0YvN5bmQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/z4vW7g2coXqF1W76dIUY-g2fhn4.roa
Signing time: Fri 25 Mar 2022 14:14:56 +0000
ROA not before: Fri 25 Mar 2022 14:14:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 141.98.112.0/24 maxlen: 24
141.98.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70706830 (0x436e68e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d6dabc3628f271f8c5b0cdb184d18bcde5b9900
Validity
Not Before: Mar 25 14:14:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf8bd6ee0d9ca17a85d56efa748518fa0d9f867e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:33:4e:58:19:4f:3b:59:79:1f:39:73:71:70:
dc:b0:50:35:6f:bc:cf:64:6d:e7:bd:4b:6a:8b:f0:
67:56:ac:57:5d:03:60:4c:19:ae:57:3d:9e:8d:48:
25:f5:50:b0:91:2d:5c:dc:a1:c1:6e:29:37:62:04:
29:27:56:de:fc:7d:3f:4c:5e:83:c2:56:5c:45:b6:
b8:8d:9a:55:71:9d:39:43:6f:e6:a2:81:12:dd:6f:
c7:75:3c:fb:10:84:4a:ec:b8:51:28:ab:ce:a0:db:
75:62:be:5b:40:72:9e:8f:80:14:6a:2d:80:9f:24:
1c:d4:7f:98:72:33:97:7e:83:e7:e8:1f:d9:88:b9:
60:9e:18:a4:55:e6:96:73:e5:f3:99:8b:36:ba:d3:
61:2f:fb:59:2f:99:12:02:22:79:5a:7e:db:49:86:
8e:97:52:13:2f:8b:f2:bc:d5:cb:96:93:84:a4:3b:
d1:9d:ec:ee:c5:33:c4:9e:07:ad:75:9d:6e:5b:70:
35:ce:61:85:d0:20:a4:0a:c6:e7:b9:06:b5:ed:fe:
4a:ee:30:62:35:92:3c:6c:25:b2:0b:f2:ef:fd:60:
55:a7:06:c1:81:2f:3d:38:43:d0:18:cc:01:ac:42:
39:6a:42:11:3b:61:33:f5:cb:e9:28:31:59:1e:3b:
98:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8B:D6:EE:0D:9C:A1:7A:85:D5:6E:FA:74:85:18:FA:0D:9F:86:7E
X509v3 Authority Key Identifier:
keyid:1D:6D:AB:C3:62:8F:27:1F:8C:5B:0C:DB:18:4D:18:BC:DE:5B:99:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HW2rw2KPJx-MWwzbGE0YvN5bmQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/z4vW7g2coXqF1W76dIUY-g2fhn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/HW2rw2KPJx-MWwzbGE0YvN5bmQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.112.0/23
Signature Algorithm: sha256WithRSAEncryption
05:1f:c7:61:43:01:32:5c:a2:11:00:d5:2c:7e:58:68:27:4e:
06:df:75:92:a8:fc:b3:80:06:7c:40:91:bb:24:0c:07:9d:7e:
ac:9c:7a:e6:cf:10:f4:09:df:a7:b1:89:03:64:32:69:ae:1d:
1f:2b:e0:d7:b7:93:69:a4:66:52:d8:ba:cc:68:59:b9:85:67:
42:85:0e:d8:c0:ba:eb:4b:b1:c9:7f:b8:f9:c9:25:61:64:50:
0f:f0:f3:d7:14:45:18:c4:a0:c7:b8:c9:9b:76:af:9d:ce:59:
c0:1b:ed:d1:83:cd:61:a4:e3:32:79:d9:e8:2e:7f:dd:db:25:
c8:49:93:1f:04:66:e7:00:8b:44:d5:db:30:b0:d7:51:64:46:
13:03:39:e1:d2:32:5d:70:68:14:18:a2:7d:86:ce:b6:f6:a0:
db:47:cc:de:23:a5:30:f9:36:23:07:b2:34:d1:06:80:7e:f2:
bc:b5:a7:4b:dd:1d:5b:e9:ec:54:a5:e0:cb:74:16:62:48:b3:
72:71:7c:5b:93:b8:cb:a4:e1:1b:f5:fb:5d:85:21:ba:e9:e6:
5a:a6:4d:cb:82:19:2e:f9:fe:e6:78:9d:00:c4:81:a1:5c:fb:
29:2c:6d:0b:25:f0:b8:df:21:0a:34:4c:96:8d:3a:c0:da:85:
8a:0d:8d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-fra.rpki-client.org