Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a09832-e029-4105-8e0f-b6e6ae0d69f1/1/5O7pDpvIuW-EjgQKjCCIXvot6bU.roa
File: 5O7pDpvIuW-EjgQKjCCIXvot6bU.roa (raw, json)
Hash identifier: 66B0pMHAfaWhI5fkZh1RE3u9BbeVd3xRxpzofcsL50M=
Subject key identifier: E4:EE:E9:0E:9B:C8:B9:6F:84:8E:04:0A:8C:20:88:5E:FA:2D:E9:B5
Certificate issuer: /CN=e07c4d7c183156000d13cf85307be530d1f04d24
Certificate serial: 104637E1
Authority key identifier: E0:7C:4D:7C:18:31:56:00:0D:13:CF:85:30:7B:E5:30:D1:F0:4D:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HxNfBgxVgANE8-FMHvlMNHwTSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a09832-e029-4105-8e0f-b6e6ae0d69f1/1/5O7pDpvIuW-EjgQKjCCIXvot6bU.roa
Signing time: Sat 01 Jan 2022 03:54:31 +0000
ROA not before: Sat 01 Jan 2022 03:54:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 680
IP address blocks: 141.64.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273037281 (0x104637e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e07c4d7c183156000d13cf85307be530d1f04d24
Validity
Not Before: Jan 1 03:54:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4eee90e9bc8b96f848e040a8c20885efa2de9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:49:10:15:20:d4:5a:85:7e:89:45:e9:3c:b6:
81:29:9d:c0:7d:16:74:8d:49:16:04:21:83:83:d7:
dd:c6:d0:88:e6:f4:8b:04:3c:de:08:57:9c:8d:c4:
4c:cb:41:02:ec:fd:45:c3:48:d5:42:5a:9c:3f:89:
63:e9:94:c3:8d:0d:bb:0f:3e:11:b2:47:e2:6f:1a:
34:8a:e0:61:98:24:15:64:c4:1e:f9:1c:4c:42:ec:
5a:e3:6b:35:0b:ac:25:54:32:24:a1:c5:9d:b5:6d:
bb:3d:8b:a3:12:29:aa:ef:bd:aa:84:26:44:ea:c4:
fa:78:53:c9:bd:1b:d8:be:75:a7:e7:c7:46:ee:4a:
8f:85:a3:00:3a:31:79:6e:51:b8:6e:d2:92:8e:f6:
5a:3d:8e:6d:fb:79:d8:87:59:1f:e2:1e:41:30:50:
1e:08:38:6d:b8:bc:bc:38:0a:6e:f7:78:95:84:5b:
ca:2e:61:39:6f:1b:2e:53:30:ef:bf:8d:c9:8c:63:
77:fe:f1:10:57:b9:63:40:dc:7e:79:31:2e:37:1a:
21:cd:aa:04:f8:d0:7d:a8:2d:47:6d:66:04:68:8b:
7b:93:11:cb:ea:48:22:c9:9e:d7:ce:49:82:5c:e7:
fe:28:01:76:ad:4e:a1:8c:f4:c3:cc:21:18:d6:2a:
f3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EE:E9:0E:9B:C8:B9:6F:84:8E:04:0A:8C:20:88:5E:FA:2D:E9:B5
X509v3 Authority Key Identifier:
keyid:E0:7C:4D:7C:18:31:56:00:0D:13:CF:85:30:7B:E5:30:D1:F0:4D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HxNfBgxVgANE8-FMHvlMNHwTSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a09832-e029-4105-8e0f-b6e6ae0d69f1/1/5O7pDpvIuW-EjgQKjCCIXvot6bU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a09832-e029-4105-8e0f-b6e6ae0d69f1/1/4HxNfBgxVgANE8-FMHvlMNHwTSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.64.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b4:d1:d8:9f:1c:a5:6c:c1:d3:f9:95:f9:c5:8e:5f:4c:53:41:
72:a7:ca:dc:cc:dc:e0:1b:fb:ab:8d:8b:b4:58:d9:e6:27:1a:
42:ab:54:c2:d3:c3:fc:b8:0d:e4:4e:c1:56:a6:6e:25:a8:94:
6d:b6:af:13:98:a2:71:bd:ef:ad:23:03:a5:ff:ba:7d:ec:ff:
6c:54:73:7e:34:cd:97:b1:5d:ba:fc:ce:33:b8:5f:3e:b1:f2:
25:d4:8d:f5:d5:96:f3:30:3c:8e:12:e3:9a:9a:10:2a:97:63:
7b:f3:c4:65:37:5d:0b:9b:32:1f:28:63:84:5b:55:98:50:1b:
de:13:4c:42:2a:c0:1a:6b:8a:66:2a:b2:2c:db:d5:87:a0:52:
46:1e:ac:4d:80:ab:16:4a:a1:0b:15:24:33:06:ac:29:2a:8e:
d4:93:db:88:da:0d:4f:1e:7b:91:9f:2e:1c:13:bb:d2:2b:34:
8d:80:cb:7a:d6:a6:33:99:a6:2d:e1:e4:43:68:ce:fb:17:c1:
c5:e8:0e:11:77:d4:51:e7:69:bf:19:2b:8c:98:6a:3d:8b:20:
f1:93:fe:4d:37:ee:12:66:b6:95:d6:00:5f:35:a2:3a:3a:f9:
3c:de:35:45:b0:31:31:85:82:f6:2d:47:3e:4e:18:f0:e1:63:
70:74:e0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:54 2023 by rpki-client on console-ams.rpki-client.org