Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/Yj176r_wz8PQXZPIpTM2vGXC4dQ.roa
File: Yj176r_wz8PQXZPIpTM2vGXC4dQ.roa (raw, json)
Hash identifier: haerq0I6G1nuTSOvUFl3kvMXn+RSJEWJWiocF9/tTh4=
Subject key identifier: 62:3D:7B:EA:BF:F0:CF:C3:D0:5D:93:C8:A5:33:36:BC:65:C2:E1:D4
Certificate issuer: /CN=3124de2d6b780b3dbb5fbf5b926dcb8d2f0cc106
Certificate serial: 01828800FB0B658ABFAC1058BF3C303174C4
Authority key identifier: 31:24:DE:2D:6B:78:0B:3D:BB:5F:BF:5B:92:6D:CB:8D:2F:0C:C1:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSTeLWt4Cz27X79bkm3LjS8MwQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/Yj176r_wz8PQXZPIpTM2vGXC4dQ.roa
Signing time: Wed 10 Aug 2022 13:45:41 +0000
ROA not before: Wed 10 Aug 2022 13:45:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 141.98.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:88:00:fb:0b:65:8a:bf:ac:10:58:bf:3c:30:31:74:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3124de2d6b780b3dbb5fbf5b926dcb8d2f0cc106
Validity
Not Before: Aug 10 13:45:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=623d7beabff0cfc3d05d93c8a53336bc65c2e1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:a1:4d:8a:d8:e0:af:0d:37:c9:47:87:49:
50:27:26:b1:da:55:f2:7b:39:47:fb:7b:6f:00:23:
d6:66:3d:ac:a6:a1:17:89:e9:a1:9b:46:40:fb:74:
3b:c4:c5:ec:2e:ec:e5:8c:b6:bc:b5:21:5d:59:3e:
8b:5a:e2:f6:0a:71:ca:36:7c:fd:2c:c3:42:12:29:
55:7c:62:0a:26:0d:79:e7:15:7b:2b:b6:c1:a8:22:
84:6a:3b:4d:0d:b3:9d:10:42:5c:b0:ab:82:d5:e1:
95:c8:1b:c3:86:eb:b9:e6:10:e9:94:be:b3:f2:fd:
8f:85:cb:7e:bf:26:a6:60:e2:31:ec:ec:80:01:a3:
dc:2d:05:85:85:6b:4c:85:4f:3c:ca:1a:cd:d2:e4:
3f:a0:1d:27:6b:b0:de:6c:c4:1b:05:45:e0:9f:7f:
23:e7:91:af:f0:ca:90:71:f0:59:51:98:c6:53:d7:
74:91:fa:c7:75:56:12:d2:2b:a9:ed:96:8a:b6:31:
f4:dd:7b:41:67:0e:c3:fd:b7:4e:f9:95:22:12:d4:
96:fe:ef:f6:be:5c:cf:6e:26:eb:06:18:72:6b:1a:
42:04:04:de:1d:d1:d8:63:2b:3e:8b:19:dc:6f:b3:
d2:2b:1b:51:0e:29:4e:44:a4:0b:f2:f2:a1:9f:31:
7c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3D:7B:EA:BF:F0:CF:C3:D0:5D:93:C8:A5:33:36:BC:65:C2:E1:D4
X509v3 Authority Key Identifier:
keyid:31:24:DE:2D:6B:78:0B:3D:BB:5F:BF:5B:92:6D:CB:8D:2F:0C:C1:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSTeLWt4Cz27X79bkm3LjS8MwQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/Yj176r_wz8PQXZPIpTM2vGXC4dQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/MSTeLWt4Cz27X79bkm3LjS8MwQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.4.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:01:07:ff:2c:08:9f:c4:3f:14:bb:fc:ed:c6:8a:85:d6:48:
94:10:b0:ed:a8:29:ce:91:44:b9:ae:a4:56:8c:e4:6f:27:df:
1d:0f:c5:99:e3:00:d7:9d:73:3a:71:c0:89:c7:1d:8e:d3:7b:
cd:e6:1a:75:5f:6f:9a:1b:fd:9b:39:37:9c:ac:a4:70:bd:f3:
8d:8e:52:80:8b:9b:2a:c0:19:aa:2a:0c:83:be:b0:40:9c:16:
6b:99:52:83:e4:32:cf:df:3b:39:cf:c1:fb:c4:6d:e6:20:2e:
ec:12:7b:48:cc:c3:7b:18:e1:5b:04:46:44:27:11:61:a5:8e:
71:ca:dd:b8:1e:7a:98:1a:6d:3f:77:be:58:e2:d2:71:00:49:
ca:cf:8c:cd:c6:6f:1a:f5:3d:e2:b6:d5:4a:a3:cc:8f:38:1c:
d6:22:62:95:3e:b1:c6:83:a4:06:c9:0f:04:8b:f2:2e:d3:d1:
c2:b2:04:55:98:74:28:d2:6f:7e:5a:85:b8:d8:da:9a:25:df:
72:b4:f3:c2:8b:60:3a:95:11:f9:ed:08:0c:67:d3:a2:e2:20:
46:26:13:2f:c4:5e:2e:0f:08:f5:e2:7f:9a:76:a0:67:a8:f7:
b6:44:27:f9:99:fd:05:7b:81:4d:cc:bd:cb:09:cc:9f:5f:f6:
6b:16:02:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:04 2024 by rpki-client on console-ams.rpki-client.org