Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/fc6800-b6e0-4a0b-92c1-604444f96290/1/kRN0y9actM2eOfZmz2WYa6IHVkM.roa
File: kRN0y9actM2eOfZmz2WYa6IHVkM.roa (raw, json)
Hash identifier: gKFvb/fFiM+dpK7Sp35miDhfrg3ctOUuenHrAd4zE0I=
Subject key identifier: 91:13:74:CB:D6:9C:B4:CD:9E:39:F6:66:CF:65:98:6B:A2:07:56:43
Certificate issuer: /CN=da0558d734b16c0a798b90344570e5e5cc05399d
Certificate serial: 031B7A
Authority key identifier: DA:05:58:D7:34:B1:6C:0A:79:8B:90:34:45:70:E5:E5:CC:05:39:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gVY1zSxbAp5i5A0RXDl5cwFOZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/fc6800-b6e0-4a0b-92c1-604444f96290/1/kRN0y9actM2eOfZmz2WYa6IHVkM.roa
Signing time: Tue 17 May 2022 17:37:25 +0000
ROA not before: Tue 17 May 2022 17:37:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29262
IP address blocks: 141.98.112.0/24 maxlen: 24
141.98.115.0/24 maxlen: 24
141.98.114.0/24 maxlen: 24
141.98.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203642 (0x31b7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0558d734b16c0a798b90344570e5e5cc05399d
Validity
Not Before: May 17 17:37:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=911374cbd69cb4cd9e39f666cf65986ba2075643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:69:e3:dc:c8:c7:00:ce:df:d9:33:59:8c:51:
0a:5c:41:00:84:6e:c8:84:a2:08:97:61:9d:96:40:
32:e2:a6:a8:ff:a1:ae:25:40:17:a6:ff:2f:34:60:
7e:97:b8:04:19:db:da:48:12:c5:45:54:41:62:d7:
1b:e1:10:d3:f0:ad:36:b4:71:27:98:f8:5e:a2:59:
f0:6b:2e:3c:be:44:c7:b8:ec:0a:cc:47:68:23:ba:
aa:81:43:8a:bb:a3:47:00:9b:24:e4:4c:d7:25:99:
f0:18:12:f8:e6:13:3c:e6:8d:7e:e0:7e:b3:00:45:
53:02:ca:69:fb:31:46:22:45:fe:44:50:ec:65:70:
ef:29:3f:41:1e:30:25:16:93:33:34:46:e8:a5:89:
2a:af:99:a5:50:90:4e:c0:f4:dd:2a:e0:31:51:9a:
b0:c8:04:b0:4a:a7:f7:f5:41:49:52:b1:f1:5a:b7:
d4:28:4d:02:79:df:5b:ba:4f:d9:d2:99:ab:53:49:
bc:24:6b:1e:28:aa:81:ab:1f:f1:11:cb:c5:ca:03:
d5:ad:c0:96:52:cc:a4:b0:d0:af:4e:c4:59:32:1e:
85:6a:ca:34:3f:37:f4:61:89:79:e9:c1:f2:fd:e9:
02:84:46:17:1a:cd:f3:b2:05:50:0c:80:ae:f2:3a:
a8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:13:74:CB:D6:9C:B4:CD:9E:39:F6:66:CF:65:98:6B:A2:07:56:43
X509v3 Authority Key Identifier:
keyid:DA:05:58:D7:34:B1:6C:0A:79:8B:90:34:45:70:E5:E5:CC:05:39:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gVY1zSxbAp5i5A0RXDl5cwFOZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/fc6800-b6e0-4a0b-92c1-604444f96290/1/kRN0y9actM2eOfZmz2WYa6IHVkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/fc6800-b6e0-4a0b-92c1-604444f96290/1/2gVY1zSxbAp5i5A0RXDl5cwFOZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.112.0/22
Signature Algorithm: sha256WithRSAEncryption
37:db:11:3e:cb:cc:80:9e:d2:22:09:c5:d0:2c:4a:f0:15:52:
e4:d3:91:e7:6c:68:d1:39:e7:88:60:ec:e1:07:9e:c6:65:17:
b4:3c:ae:4f:4b:0c:33:ea:bc:8c:00:b5:fd:f9:10:14:4f:10:
28:99:43:56:17:1d:03:84:a4:99:35:e2:e1:4c:f7:ca:26:a7:
b3:f0:1b:c4:f4:c5:ce:01:2e:77:92:df:3d:b1:d4:4e:69:29:
1a:7e:f4:03:1c:a6:b9:3b:f0:28:bd:5c:d2:91:70:42:00:1a:
a2:fd:ad:a3:b8:00:fd:7e:8e:17:00:0e:59:36:63:f5:71:09:
6f:9b:14:ff:27:8f:a1:23:64:d7:7a:5c:52:f8:18:51:b3:31:
db:41:78:f0:04:ef:02:89:a0:76:42:03:3f:00:77:a8:d9:1d:
75:d8:34:34:05:7e:2b:d0:e9:c6:1c:63:6a:22:90:42:07:98:
4a:da:40:7f:60:07:5e:9f:d7:1b:9a:54:a1:67:de:64:d8:53:
8a:d2:71:ed:b5:db:db:fa:eb:07:23:f9:15:47:ab:e6:48:25:
c4:f9:93:e1:4c:af:df:0f:d2:1c:d6:b9:6c:1e:cc:f0:14:4a:
30:67:8a:14:f1:7c:da:1f:63:49:a4:67:9b:82:c0:b4:62:22:
30:10:0c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:29 2023 by rpki-client on console-ams.rpki-client.org