Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3c8f60-3131-4a23-b544-ccb67ee1176c/1/kTLL69NgM-8oS1XLGQlPUb1N9cI.roa
File: kTLL69NgM-8oS1XLGQlPUb1N9cI.roa (raw, json)
Hash identifier: lritduTftE7+8I8E7CZxWyPpUXPGO3UKVhJaWK8WqJo=
Subject key identifier: 91:32:CB:EB:D3:60:33:EF:28:4B:55:CB:19:09:4F:51:BD:4D:F5:C2
Certificate issuer: /CN=5c2d7d1849c88b04ef9dd5a2406eb51508e3c3b4
Certificate serial: 024741EE
Authority key identifier: 5C:2D:7D:18:49:C8:8B:04:EF:9D:D5:A2:40:6E:B5:15:08:E3:C3:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XC19GEnIiwTvndWiQG61FQjjw7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3c8f60-3131-4a23-b544-ccb67ee1176c/1/kTLL69NgM-8oS1XLGQlPUb1N9cI.roa
Signing time: Sat 01 Jan 2022 08:56:38 +0000
ROA not before: Sat 01 Jan 2022 08:56:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51561
IP address blocks: 141.98.208.0/24 maxlen: 24
2a0e:a880::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38224366 (0x24741ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c2d7d1849c88b04ef9dd5a2406eb51508e3c3b4
Validity
Not Before: Jan 1 08:56:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9132cbebd36033ef284b55cb19094f51bd4df5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f6:f4:1a:07:c3:0d:4e:09:e4:c6:ad:92:80:
e0:9e:12:64:ff:b7:85:8d:09:80:e2:c5:2f:f5:7d:
9b:fd:43:62:77:5e:79:0c:bd:e5:b2:21:3d:c2:2b:
de:f5:d1:a6:91:aa:9e:89:ff:93:86:92:d7:3c:19:
5f:ae:44:cd:b8:f0:56:08:86:25:05:b0:f3:de:c5:
b9:5f:01:78:69:c0:c0:46:5b:91:17:b0:d1:81:97:
7f:23:f2:9a:af:b1:fb:80:81:c6:fe:2f:44:63:37:
e5:c0:f2:fe:f5:c8:8f:51:c5:ff:e5:65:47:18:7b:
6b:86:58:4a:4a:8a:59:fb:74:6a:56:e1:0e:80:7d:
a3:45:e6:6b:36:89:4c:24:65:69:8f:0e:b3:83:a2:
bc:14:df:0a:99:a0:74:86:1f:05:63:60:13:e7:21:
c8:da:0f:fa:0c:2b:ed:1e:ef:24:88:43:54:a2:4d:
e1:eb:ac:a8:69:a2:da:85:81:2b:95:19:0b:14:b5:
93:31:f9:aa:54:c1:61:fe:d1:05:e3:99:47:c5:c2:
aa:50:3e:a2:64:28:ca:b5:2e:3f:10:0d:7d:2b:2e:
cc:4b:96:a8:da:6d:d2:4a:d8:b0:21:7b:fa:57:ba:
25:cd:94:a0:25:55:9c:74:9b:04:f1:cd:41:c5:e7:
df:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:32:CB:EB:D3:60:33:EF:28:4B:55:CB:19:09:4F:51:BD:4D:F5:C2
X509v3 Authority Key Identifier:
keyid:5C:2D:7D:18:49:C8:8B:04:EF:9D:D5:A2:40:6E:B5:15:08:E3:C3:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XC19GEnIiwTvndWiQG61FQjjw7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3c8f60-3131-4a23-b544-ccb67ee1176c/1/kTLL69NgM-8oS1XLGQlPUb1N9cI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3c8f60-3131-4a23-b544-ccb67ee1176c/1/XC19GEnIiwTvndWiQG61FQjjw7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.208.0/24
IPv6:
2a0e:a880::/36
Signature Algorithm: sha256WithRSAEncryption
71:3e:68:fb:15:41:5a:ee:a9:78:81:77:53:1c:2f:29:f3:a8:
5f:50:b0:36:b2:9f:e5:3d:d6:09:16:0a:03:8d:6d:1d:c9:2b:
6d:5b:63:21:59:8c:a9:47:ea:23:7a:e5:d0:e7:e0:55:8b:c7:
bf:fe:bf:be:3f:e8:0c:1b:7f:76:8a:ff:6b:eb:a5:fc:a1:85:
3d:1d:f8:88:08:48:2a:ea:c9:5e:fe:85:60:bf:cf:44:45:23:
3d:cd:32:1c:c5:0c:d4:08:e5:cc:d7:87:13:14:66:8c:0a:b5:
6a:43:b9:97:a1:b8:f3:0c:81:97:13:29:a2:37:f8:6e:51:5e:
72:52:b9:dc:6d:2a:aa:2a:e8:19:b5:a3:c2:9d:16:c1:f2:77:
34:db:4b:50:88:48:63:17:86:8d:e1:36:45:4d:d0:93:51:27:
80:b8:3f:29:67:92:ce:82:c5:2d:7c:26:b2:9e:eb:60:56:1a:
e5:ee:9e:04:a3:69:46:c0:b1:7c:47:c3:19:9d:ca:9d:05:aa:
c3:60:4a:55:09:ba:0d:47:13:47:33:f3:6d:da:3e:f0:0c:0f:
35:43:6a:8b:2a:51:01:46:12:2b:05:a3:ae:d4:e1:f9:3c:f4:
a1:3a:88:8b:70:1a:b7:94:95:98:62:0c:66:14:8a:1d:3e:6c:
7b:55:7e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:07 2024 by rpki-client on console-ams.rpki-client.org