Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/wrz60o6A6LjkWpKWFSzFGJuRZnQ.roa
File: wrz60o6A6LjkWpKWFSzFGJuRZnQ.roa (raw, json)
Hash identifier: dzzzAjuajTOzVjMK0ALVK56NM56vvcIXRD2JcS5714E=
Subject key identifier: C2:BC:FA:D2:8E:80:E8:B8:E4:5A:92:96:15:2C:C5:18:9B:91:66:74
Certificate issuer: /CN=3124de2d6b780b3dbb5fbf5b926dcb8d2f0cc106
Certificate serial: 0182ED74FCBDE5DBB4D3FF000EC10B8AFBFC
Authority key identifier: 31:24:DE:2D:6B:78:0B:3D:BB:5F:BF:5B:92:6D:CB:8D:2F:0C:C1:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSTeLWt4Cz27X79bkm3LjS8MwQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/wrz60o6A6LjkWpKWFSzFGJuRZnQ.roa
Signing time: Tue 30 Aug 2022 06:34:03 +0000
ROA not before: Tue 30 Aug 2022 06:34:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 141.98.4.0/24 maxlen: 24
141.98.7.0/24 maxlen: 24
141.98.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ed:74:fc:bd:e5:db:b4:d3:ff:00:0e:c1:0b:8a:fb:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3124de2d6b780b3dbb5fbf5b926dcb8d2f0cc106
Validity
Not Before: Aug 30 06:34:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2bcfad28e80e8b8e45a9296152cc5189b916674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:42:65:b2:60:8e:f7:c2:a4:58:69:41:e4:19:
94:01:cc:c3:ee:d9:c1:04:09:82:7f:15:e9:b1:0f:
ad:8d:1a:8e:1e:55:81:c4:4e:f8:34:5b:3e:4d:8d:
d5:0a:3a:37:21:9e:1c:1a:6f:f8:67:8e:82:4b:49:
6f:09:86:e1:b5:f7:ad:b6:86:5f:c3:72:72:e9:e0:
1b:f4:17:e0:05:39:4e:86:2b:53:9d:67:3c:38:64:
36:2b:c5:82:55:af:e5:3c:4e:a6:f7:c0:4f:ac:f3:
d2:fc:12:56:1a:63:53:8b:65:6b:54:06:23:a6:d0:
fe:dd:05:48:4a:3b:b8:b2:43:5c:1d:b6:f0:e4:6f:
a4:fc:e0:52:8d:ae:87:17:04:d7:0f:d3:70:5d:3e:
c9:a4:33:1a:17:39:4f:f1:06:48:e2:7c:b8:fb:48:
13:f6:cd:2e:f5:0e:9b:2b:e6:be:d1:8d:5f:2a:27:
00:46:5d:a5:1f:80:d3:c0:24:43:79:b4:dd:86:2b:
f5:91:41:27:4f:b0:1d:3b:52:95:8d:b5:66:af:33:
76:38:2d:ba:5a:84:79:a6:5f:05:dc:65:bd:be:19:
ba:28:7a:b5:48:62:66:b2:6e:3e:e3:bf:fc:b3:ed:
c0:08:25:4d:6c:5c:30:aa:32:a9:9f:96:b7:db:0f:
af:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BC:FA:D2:8E:80:E8:B8:E4:5A:92:96:15:2C:C5:18:9B:91:66:74
X509v3 Authority Key Identifier:
keyid:31:24:DE:2D:6B:78:0B:3D:BB:5F:BF:5B:92:6D:CB:8D:2F:0C:C1:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSTeLWt4Cz27X79bkm3LjS8MwQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/wrz60o6A6LjkWpKWFSzFGJuRZnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/MSTeLWt4Cz27X79bkm3LjS8MwQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.4.0/23
141.98.7.0/24
Signature Algorithm: sha256WithRSAEncryption
60:ac:3d:99:7b:2d:41:5c:47:6f:7c:57:1e:7e:22:3d:fa:bc:
15:15:72:5b:97:a3:46:52:58:93:7e:6a:9e:10:27:9e:29:ed:
73:fb:4c:39:b0:b3:43:a7:c2:fc:79:08:28:7d:d7:93:bc:1c:
57:d2:e4:ff:7f:9c:4b:cb:9c:4b:84:34:69:88:c1:c0:43:1c:
a1:5e:7b:ab:10:f5:11:c6:c5:57:67:18:b7:47:f3:74:9b:dd:
4e:c3:6f:3c:af:1a:2b:68:53:86:04:ad:dc:f0:fd:04:fc:5a:
f7:c6:57:16:f4:2d:e6:19:fc:e9:60:a4:d6:0a:3d:c0:c9:36:
2d:30:c3:79:a4:3b:c7:20:a3:8d:c4:a8:8a:df:91:12:48:83:
e5:fd:3f:50:16:8a:6f:92:bc:93:39:58:8b:46:79:b5:cc:e3:
fb:4b:46:39:10:3c:91:c5:3a:89:2c:83:04:c4:4f:37:c5:01:
c4:88:8c:c7:58:af:7a:ea:2d:77:18:a0:be:1f:4c:ac:49:d4:
cf:2d:44:c4:8a:20:cd:08:10:a5:0a:33:f5:f4:80:22:f2:cd:
69:f4:e2:20:c8:54:a2:fa:11:6a:a3:61:af:1a:0c:0f:9e:cf:
28:6a:5a:72:81:e2:e3:0c:13:8c:ea:1a:68:30:90:03:7d:91:
59:36:81:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:04 2024 by rpki-client on console-ams.rpki-client.org