Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/c69e26-3712-474a-b0f3-290f2b6d25ca/1/DRZBSJ7YR5oZ0ATd87JqixfXfrA.roa
File: DRZBSJ7YR5oZ0ATd87JqixfXfrA.roa (raw, json)
Hash identifier: xyPNZwX1SPD8/94ZohDFFlGnUBSRUSLWJzCnNf03jFo=
Subject key identifier: 0D:16:41:48:9E:D8:47:9A:19:D0:04:DD:F3:B2:6A:8B:17:D7:7E:B0
Certificate issuer: /CN=63c1acb8b1fab73929045ebd16f00b817b90d6b4
Certificate serial: 392378
Authority key identifier: 63:C1:AC:B8:B1:FA:B7:39:29:04:5E:BD:16:F0:0B:81:7B:90:D6:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8GsuLH6tzkpBF69FvALgXuQ1rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/c69e26-3712-474a-b0f3-290f2b6d25ca/1/DRZBSJ7YR5oZ0ATd87JqixfXfrA.roa
Signing time: Mon 10 Jan 2022 15:59:55 +0000
ROA not before: Mon 10 Jan 2022 15:59:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 141.98.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3744632 (0x392378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c1acb8b1fab73929045ebd16f00b817b90d6b4
Validity
Not Before: Jan 10 15:59:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d1641489ed8479a19d004ddf3b26a8b17d77eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:6e:9c:b9:2e:cd:ad:27:d2:35:73:92:5f:
bb:a8:c8:53:68:d0:24:cb:58:7c:6e:bc:16:2e:8e:
5a:25:d7:11:8d:9f:91:e0:f6:f1:82:a5:db:ac:6c:
b9:94:8b:35:e5:a5:44:93:4c:fa:5e:0b:4e:4f:fc:
eb:1b:8c:7c:49:8e:64:a1:2c:42:b9:a3:f1:c3:bd:
02:92:f7:2c:6f:be:ec:ad:28:bc:fc:92:b6:98:c2:
86:48:2c:9d:d1:8b:b1:a1:29:d0:aa:5d:16:5d:f4:
d6:32:96:dd:cb:6f:dd:d1:78:a9:55:a6:62:83:bd:
0e:7a:3e:8e:b8:1b:c6:2a:d4:20:7a:2b:9d:63:91:
4f:48:ac:a9:69:57:71:82:3e:2a:b9:5f:30:ac:5c:
9c:dd:67:cc:e6:3a:14:5e:b7:de:28:84:54:58:cc:
1b:c0:3b:f6:7b:22:3a:79:ca:78:e1:8e:86:25:d7:
9f:ce:ad:39:65:96:12:28:a0:2f:57:5c:be:e8:d4:
35:a0:69:2e:00:55:40:5e:8d:e0:32:9b:37:ad:0c:
1b:43:11:c2:e0:bf:31:e2:ef:7f:96:5a:df:af:8a:
ea:87:c6:44:c0:f1:2d:d6:6a:26:0c:4d:8c:90:f1:
ad:b1:00:8d:63:47:71:f9:43:fc:93:8a:fc:ff:6c:
1a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:16:41:48:9E:D8:47:9A:19:D0:04:DD:F3:B2:6A:8B:17:D7:7E:B0
X509v3 Authority Key Identifier:
keyid:63:C1:AC:B8:B1:FA:B7:39:29:04:5E:BD:16:F0:0B:81:7B:90:D6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8GsuLH6tzkpBF69FvALgXuQ1rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c69e26-3712-474a-b0f3-290f2b6d25ca/1/DRZBSJ7YR5oZ0ATd87JqixfXfrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c69e26-3712-474a-b0f3-290f2b6d25ca/1/Y8GsuLH6tzkpBF69FvALgXuQ1rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.52.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:da:c9:dc:22:85:bb:d4:61:14:08:ee:91:73:17:f4:d8:6d:
04:e6:7c:86:63:99:38:36:5b:48:d6:a3:c9:45:1e:14:08:e2:
0e:d3:ce:bc:31:0a:7b:2f:db:4f:f1:5a:fc:ff:aa:60:24:0c:
36:73:8d:a4:2d:74:4a:2f:ee:fc:2c:05:52:9a:84:b9:82:4a:
fa:4c:68:d8:f9:f2:a6:9f:1d:e1:d7:e7:2c:b0:57:44:5c:f3:
75:38:38:0c:18:61:2b:af:d8:15:e8:6a:58:b6:e3:b5:42:d5:
eb:76:76:c8:5f:b2:c9:b8:38:8c:60:a6:14:df:f5:a9:a4:8f:
f6:8f:f8:7e:25:fd:26:c4:5f:82:05:6e:10:6a:c5:71:d2:99:
8e:2c:80:15:5c:98:b1:49:18:c8:15:9e:14:34:31:a6:89:a3:
91:88:49:a3:f8:c1:1d:13:fd:15:c5:82:88:3e:d9:3c:57:9a:
5c:75:19:6d:3d:11:4c:c7:da:7f:9c:5c:19:db:81:9a:c7:b8:
b2:e0:a1:68:d5:8e:92:4d:ea:31:5b:f8:27:cc:c2:7f:36:7b:
9f:9c:85:63:2f:80:9b:05:2d:35:57:ea:2b:25:6f:d0:18:c0:
44:21:44:da:7c:1d:2a:df:04:67:71:a8:67:fc:00:0c:f0:f8:
ef:22:68:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:54 2024 by rpki-client on console-fra.rpki-client.org