Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/T-_11-appBFMvD5T-fRaQR27y9g.roa
File: T-_11-appBFMvD5T-fRaQR27y9g.roa (raw, json)
Hash identifier: J+Imy4+SG7kVNSpGjaUBnmZ2MLo/iTnbqwckqH/iQp8=
Subject key identifier: 4F:EF:F5:D7:E6:A9:A4:11:4C:BC:3E:53:F9:F4:5A:41:1D:BB:CB:D8
Certificate issuer: /CN=3124de2d6b780b3dbb5fbf5b926dcb8d2f0cc106
Certificate serial: 02B97664
Authority key identifier: 31:24:DE:2D:6B:78:0B:3D:BB:5F:BF:5B:92:6D:CB:8D:2F:0C:C1:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSTeLWt4Cz27X79bkm3LjS8MwQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/T-_11-appBFMvD5T-fRaQR27y9g.roa
Signing time: Sat 01 Jan 2022 10:54:35 +0000
ROA not before: Sat 01 Jan 2022 10:54:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43350
IP address blocks: 141.98.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45708900 (0x2b97664)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3124de2d6b780b3dbb5fbf5b926dcb8d2f0cc106
Validity
Not Before: Jan 1 10:54:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4feff5d7e6a9a4114cbc3e53f9f45a411dbbcbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9b:96:01:30:f1:92:95:94:17:f7:4e:b8:97:
84:20:49:b0:f1:d6:a9:df:fa:c1:bd:53:88:3a:54:
38:3e:d7:70:10:75:f5:2e:96:72:be:0a:bc:25:91:
eb:64:79:80:98:9a:86:ff:93:b7:7b:a8:46:81:7f:
e2:ee:c2:6b:4c:dd:43:85:9d:3e:48:af:f1:c6:7b:
c5:78:5e:9f:b5:90:d6:12:e4:d8:ca:e7:a5:85:e3:
ac:ee:5f:d6:07:27:5d:10:50:e4:81:75:c1:f5:44:
6b:15:9c:45:a1:77:28:97:59:60:e7:b6:6e:d7:bf:
d1:75:79:7d:26:81:48:d6:c6:98:ec:bf:f6:23:df:
61:63:55:17:1d:89:38:5e:a6:92:51:d0:51:cf:c8:
24:24:f0:76:86:42:85:33:72:19:ae:2e:3d:71:8b:
b6:01:e3:06:1a:6a:23:bb:b5:48:ef:0f:9c:10:18:
8d:a4:fe:3d:d0:d6:4c:f5:27:29:c2:df:98:f2:58:
b4:f6:60:9c:86:ef:a2:f2:16:45:cf:97:55:03:8a:
8e:75:c6:f0:ac:0a:b2:a3:05:80:49:46:d9:b5:71:
cf:3b:62:38:af:a9:c1:9e:72:f8:50:59:71:16:59:
ce:40:74:e3:7e:bf:fb:22:cb:2e:1a:4d:ba:70:1c:
4d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EF:F5:D7:E6:A9:A4:11:4C:BC:3E:53:F9:F4:5A:41:1D:BB:CB:D8
X509v3 Authority Key Identifier:
keyid:31:24:DE:2D:6B:78:0B:3D:BB:5F:BF:5B:92:6D:CB:8D:2F:0C:C1:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSTeLWt4Cz27X79bkm3LjS8MwQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/T-_11-appBFMvD5T-fRaQR27y9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/MSTeLWt4Cz27X79bkm3LjS8MwQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.4.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:ec:d3:70:09:f3:5e:9c:65:78:ec:5c:ba:b0:31:4b:ab:61:
20:70:f7:d2:3b:75:70:3d:96:b2:a6:9e:30:6f:b3:4f:e2:34:
61:d1:75:1c:70:da:bc:43:7e:34:30:33:1e:b3:f2:1c:d9:a2:
78:3a:00:e9:ed:5c:45:2b:1b:77:57:8d:3f:12:79:82:d7:6d:
18:20:23:b8:41:6d:d9:88:d0:5a:f2:7c:57:1e:df:9b:4a:36:
e9:2a:08:0f:4e:15:48:07:ef:5b:da:5e:57:59:1f:fc:62:7a:
f7:53:0d:75:7e:07:61:a7:52:c0:b1:22:b2:05:6c:0a:ac:72:
c0:74:34:26:34:57:bd:42:6a:79:74:88:d9:94:01:7f:b0:34:
c4:af:0e:7e:9f:e2:10:28:61:7e:26:7e:ec:67:45:79:0f:0d:
9d:43:bc:63:c7:a9:0b:48:15:61:5e:3e:c6:42:70:de:67:bf:
d5:4d:28:a2:d0:10:90:af:a7:9c:36:80:0d:4c:21:98:a0:09:
a3:5e:20:14:d2:1e:0f:25:7a:81:33:fa:02:14:94:f9:b7:42:
71:9c:d9:06:b0:1d:3c:29:9c:1b:8e:ca:bf:51:a3:c8:fc:9a:
04:7f:20:8b:ba:a5:61:f3:b9:be:b3:a2:94:c4:19:d6:fb:f8:
05:9a:17:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:04 2024 by rpki-client on console-ams.rpki-client.org