Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/fc6800-b6e0-4a0b-92c1-604444f96290/1/43KrS8dWhrOlVAQXMc6q19HPYuU.roa
File: 43KrS8dWhrOlVAQXMc6q19HPYuU.roa (raw, json)
Hash identifier: 5p4QzJFITLwSviD65JhHEeZg7mmSp1Rc++vhtEtMMos=
Subject key identifier: E3:72:AB:4B:C7:56:86:B3:A5:54:04:17:31:CE:AA:D7:D1:CF:62:E5
Certificate issuer: /CN=da0558d734b16c0a798b90344570e5e5cc05399d
Certificate serial: 078500
Authority key identifier: DA:05:58:D7:34:B1:6C:0A:79:8B:90:34:45:70:E5:E5:CC:05:39:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gVY1zSxbAp5i5A0RXDl5cwFOZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/fc6800-b6e0-4a0b-92c1-604444f96290/1/43KrS8dWhrOlVAQXMc6q19HPYuU.roa
Signing time: Tue 17 May 2022 18:30:08 +0000
ROA not before: Tue 17 May 2022 18:30:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210574
IP address blocks: 141.98.112.0/24 maxlen: 24
141.98.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 492800 (0x78500)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0558d734b16c0a798b90344570e5e5cc05399d
Validity
Not Before: May 17 18:30:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e372ab4bc75686b3a554041731ceaad7d1cf62e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:86:cc:b5:36:e3:79:c2:0b:1c:64:1e:85:e6:
ee:72:1b:0f:18:01:49:2d:11:f4:3d:b0:cd:4e:60:
ce:74:50:ac:e2:24:69:f6:e1:99:a2:6a:46:61:4e:
33:89:52:10:d8:8d:0c:2d:4d:2e:a6:80:85:8d:86:
5e:5d:2e:33:13:eb:a9:25:28:5d:8d:3e:9e:17:21:
e9:63:d9:e1:b7:ea:c5:fb:e2:02:57:c8:10:9b:ac:
18:7c:2c:55:5c:3c:ff:f2:15:9b:b2:00:82:3d:b5:
80:59:ff:4a:b6:c7:9c:f7:f4:b5:9a:84:ae:d1:e9:
36:b0:da:92:93:c6:31:d1:c8:5b:2d:5d:b4:fd:ca:
b0:e9:33:bf:19:7d:be:1c:13:b5:f1:6f:e5:7b:ed:
ec:c0:e2:69:c4:d1:e8:24:34:8d:2c:7f:8b:11:63:
0d:80:a8:02:ae:40:0d:b0:ab:7d:07:85:eb:61:08:
b2:8f:2d:72:2f:99:ca:a5:5a:87:73:44:d8:58:d7:
fd:c7:2c:d1:ba:c9:86:08:92:43:8b:85:fd:7a:83:
b0:50:30:e4:1f:82:c6:01:29:f3:b5:5b:65:86:1b:
77:56:8e:17:6d:93:46:c3:fc:2c:0b:e1:07:b8:71:
3f:15:d0:bf:a7:9b:a7:a6:dd:5e:80:b3:aa:92:e3:
69:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:72:AB:4B:C7:56:86:B3:A5:54:04:17:31:CE:AA:D7:D1:CF:62:E5
X509v3 Authority Key Identifier:
keyid:DA:05:58:D7:34:B1:6C:0A:79:8B:90:34:45:70:E5:E5:CC:05:39:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gVY1zSxbAp5i5A0RXDl5cwFOZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/fc6800-b6e0-4a0b-92c1-604444f96290/1/43KrS8dWhrOlVAQXMc6q19HPYuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/fc6800-b6e0-4a0b-92c1-604444f96290/1/2gVY1zSxbAp5i5A0RXDl5cwFOZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.112.0/24
141.98.115.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:e5:7c:39:bc:c4:4a:e8:2b:fa:da:85:0c:b2:f2:4d:2a:d4:
f1:51:06:1c:f2:cb:23:cc:07:92:21:3c:67:54:6e:e0:76:87:
cc:10:13:43:4f:f6:94:f1:06:aa:5e:d3:d6:0b:a8:4b:de:a8:
96:77:3c:06:74:7e:12:da:6e:80:28:70:01:c8:3d:59:81:38:
aa:85:88:28:e3:2c:25:8a:47:df:de:d7:df:81:b6:96:3b:4d:
64:50:e1:15:86:01:81:14:23:b6:4b:17:6c:2c:f7:e4:db:23:
ba:33:ef:81:b1:99:3d:6c:2a:3a:19:63:c6:ab:18:bb:e5:d5:
c3:82:af:c3:42:08:e5:09:2a:d0:c5:7e:5a:43:1a:05:b7:06:
57:4b:42:8e:e6:5a:9e:21:fc:8b:9b:8a:97:a0:dd:7e:c8:52:
f9:88:b9:db:8f:73:3d:a9:28:d5:74:ce:c8:b6:e7:f5:7d:5d:
cd:64:72:2e:3e:70:e3:c4:2a:1c:c5:b1:53:6e:57:c1:04:06:
d8:40:74:9c:53:bf:8d:64:98:0b:c1:1a:57:b0:ee:d4:2a:9c:
59:3c:c6:72:03:cc:18:b3:f7:b2:b7:59:13:a8:b2:40:b2:b4:
d1:7c:60:80:df:19:61:8b:22:54:8d:07:2b:33:53:63:95:77:
5f:71:78:8c
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIDB4UAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRh
MDU1OGQ3MzRiMTZjMGE3OThiOTAzNDQ1NzBlNWU1Y2MwNTM5OWQwHhcNMjIwNTE3
MTgzMDA4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlMzcyYWI0YmM3NTY4
NmIzYTU1NDA0MTczMWNlYWFkN2QxY2Y2MmU1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArIbMtTbjecILHGQehebuchsPGAFJLRH0PbDNTmDOdFCs4iRp
9uGZompGYU4ziVIQ2I0MLU0upoCFjYZeXS4zE+upJShdjT6eFyHpY9nht+rF++IC
V8gQm6wYfCxVXDz/8hWbsgCCPbWAWf9Ktsec9/S1moSu0ek2sNqSk8Yx0chbLV20
/cqw6TO/GX2+HBO18W/le+3swOJpxNHoJDSNLH+LEWMNgKgCrkANsKt9B4XrYQiy
jy1yL5nKpVqHc0TYWNf9xyzRusmGCJJDi4X9eoOwUDDkH4LGASnztVtlhht3Vo4X
bZNGw/wsC+EHuHE/FdC/p5unpt1egLOqkuNpIQIDAQABo4ICDzCCAgswHQYDVR0O
BBYEFONyq0vHVoazpVQEFzHOqtfRz2LlMB8GA1UdIwQYMBaAFNoFWNc0sWwKeYuQ
NEVw5eXMBTmdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
MmdWWTF6U3hiQXA1aTVBMFJYRGw1Y3dGT1owLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC85Ni9mYzY4MDAtYjZlMC00YTBiLTkyYzEtNjA0NDQ0Zjk2MjkwLzEv
NDNLclM4ZFdock9sVkFRWE1jNnExOUhQWXVVLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9m
YzY4MDAtYjZlMC00YTBiLTkyYzEtNjA0NDQ0Zjk2MjkwLzEvMmdWWTF6U3hiQXA1
aTVBMFJYRGw1Y3dGT1owLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjWJwAwQAjWJzMA0GCSqGSIb3DQEB
CwUAA4IBAQCx5Xw5vMRK6Cv62oUMsvJNKtTxUQYc8ssjzAeSITxnVG7gdofMEBND
T/aU8QaqXtPWC6hL3qiWdzwGdH4S2m6AKHAByD1ZgTiqhYgo4ywlikff3tffgbaW
O01kUOEVhgGBFCO2SxdsLPfk2yO6M++BsZk9bCo6GWPGqxi75dXDgq/DQgjlCSrQ
xX5aQxoFtwZXS0KO5lqeIfyLm4qXoN1+yFL5iLnbj3M9qSjVdM7Ituf1fV3NZHIu
PnDjxCocxbFTblfBBAbYQHScU7+NZJgLwRpXsO7UKpxZPMZyA8wYs/eyt1kTqLJA
srTRfGCA3xlhiyJUjQcrM1NjlXdfcXiM
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:29 2023 by rpki-client on console-ams.rpki-client.org