Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/c69e26-3712-474a-b0f3-290f2b6d25ca/1/G2Javh2s_qd-YWucC8ORZoDHrbI.roa
File: G2Javh2s_qd-YWucC8ORZoDHrbI.roa (raw, json)
Hash identifier: isoIT7gXK24NTZ/Bk6cdDtCjnT1ngyNfUfTtVtQ0dlM=
Subject key identifier: 1B:62:5A:BE:1D:AC:FE:A7:7E:61:6B:9C:0B:C3:91:66:80:C7:AD:B2
Certificate issuer: /CN=63c1acb8b1fab73929045ebd16f00b817b90d6b4
Certificate serial: 44E6C9
Authority key identifier: 63:C1:AC:B8:B1:FA:B7:39:29:04:5E:BD:16:F0:0B:81:7B:90:D6:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8GsuLH6tzkpBF69FvALgXuQ1rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/c69e26-3712-474a-b0f3-290f2b6d25ca/1/G2Javh2s_qd-YWucC8ORZoDHrbI.roa
Signing time: Thu 13 Jan 2022 09:54:58 +0000
ROA not before: Thu 13 Jan 2022 09:54:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 141.98.55.0/24 maxlen: 24
141.98.54.0/24 maxlen: 24
141.98.52.0/22 maxlen: 22
141.98.52.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4515529 (0x44e6c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c1acb8b1fab73929045ebd16f00b817b90d6b4
Validity
Not Before: Jan 13 09:54:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b625abe1dacfea77e616b9c0bc3916680c7adb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3b:c6:c7:bb:41:be:c1:55:19:e8:08:a2:9a:
f9:2e:d5:b4:13:73:ef:84:22:8f:09:ff:5a:dc:c6:
95:d5:06:94:03:d6:cb:61:a8:fe:27:e9:5c:68:f6:
3d:65:c9:dc:a9:48:4c:50:12:72:36:cd:0f:35:05:
42:4b:74:8d:0e:82:6b:70:dd:e6:69:7c:b1:0d:d9:
e1:42:a8:d0:26:cc:b6:48:08:bf:82:9a:df:45:98:
77:da:9d:db:e3:80:1f:f8:c5:41:cc:0f:de:cb:01:
9b:d4:87:a6:18:30:b1:e8:33:87:16:99:b8:8c:a5:
4f:fc:b8:b4:0c:ec:79:86:ab:4c:66:3d:09:5d:59:
7d:ad:30:1e:48:90:6e:a3:83:b4:e8:20:1f:39:6b:
f2:e5:81:ec:03:bb:44:b3:dc:6f:ce:6b:dc:18:70:
4c:b1:6c:04:9e:20:06:13:0a:81:1c:48:01:0e:4a:
e4:ba:0c:b7:b1:da:8a:f0:92:9c:bb:5b:a2:72:8b:
23:80:76:dd:f2:12:de:ae:8c:6f:42:45:0f:28:93:
e4:50:78:76:62:b7:49:68:53:fc:b2:e6:d1:2a:98:
95:0d:bc:3f:c8:50:1e:91:83:27:7c:69:06:b9:21:
79:da:0d:e3:23:bc:9b:aa:d6:eb:6b:f2:b5:c8:d4:
31:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:62:5A:BE:1D:AC:FE:A7:7E:61:6B:9C:0B:C3:91:66:80:C7:AD:B2
X509v3 Authority Key Identifier:
keyid:63:C1:AC:B8:B1:FA:B7:39:29:04:5E:BD:16:F0:0B:81:7B:90:D6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8GsuLH6tzkpBF69FvALgXuQ1rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c69e26-3712-474a-b0f3-290f2b6d25ca/1/G2Javh2s_qd-YWucC8ORZoDHrbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c69e26-3712-474a-b0f3-290f2b6d25ca/1/Y8GsuLH6tzkpBF69FvALgXuQ1rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.52.0/22
Signature Algorithm: sha256WithRSAEncryption
23:eb:8e:24:4a:62:70:72:b1:74:b0:fd:47:4e:33:39:21:4e:
b7:b7:48:6e:a4:cd:8a:6d:de:01:77:44:41:11:2e:9e:f3:c1:
51:20:96:59:52:a1:1d:87:6d:ee:3d:0a:92:5a:0c:ea:c6:c2:
aa:f2:77:50:29:b7:98:af:16:c5:98:83:7e:62:42:13:b2:25:
df:cf:6c:4a:e3:ab:b0:17:09:ba:2a:72:e9:c7:49:61:b0:35:
92:a3:8f:fa:6f:f1:29:ca:0e:81:96:e5:ea:62:87:b0:a5:fd:
f1:a5:08:53:69:9c:ef:15:a7:67:d9:de:d0:72:5b:37:c3:70:
2d:85:e0:d0:2b:75:23:bd:f5:48:2d:a2:6f:68:3b:4a:bd:f1:
bd:9c:6c:2b:86:0f:33:78:76:0c:4f:f5:81:16:a5:93:c4:69:
fa:c5:f5:75:4a:09:96:de:e6:9e:3a:31:78:b4:55:00:1e:65:
e9:4a:17:b9:fe:2b:07:cc:25:4e:35:8f:68:a6:a9:82:7d:64:
6f:c9:2a:ce:8e:77:1c:14:76:7e:33:c1:6b:94:e3:e5:42:1a:
b9:da:13:bf:a5:c1:ca:19:eb:3a:fd:d1:8a:90:03:98:90:fe:
3d:95:0f:e5:30:9c:81:08:41:39:8a:56:45:22:c1:a4:16:65:
c7:51:63:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:56 2024 by rpki-client on console-ams.rpki-client.org