Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/30Bz9ehEZClOO4XTcq3m_cfAZ_M.roa
File: 30Bz9ehEZClOO4XTcq3m_cfAZ_M.roa (raw, json)
Hash identifier: chHAJ7VQ8iXkdzSyBz4uUklHHjXmRl3+fr0NhM4fLzo=
Subject key identifier: DF:40:73:F5:E8:44:64:29:4E:3B:85:D3:72:AD:E6:FD:C7:C0:67:F3
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04C23DB4
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/30Bz9ehEZClOO4XTcq3m_cfAZ_M.roa
Signing time: Fri 20 May 2022 14:03:29 +0000
ROA not before: Fri 20 May 2022 14:03:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 141.11.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79838644 (0x4c23db4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 20 14:03:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df4073f5e84464294e3b85d372ade6fdc7c067f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3c:b6:f6:2b:a3:00:53:34:87:d6:3b:7b:af:
4e:e6:89:4f:d9:eb:61:ce:93:64:62:86:86:48:5e:
45:96:27:03:2a:00:de:ef:2e:51:a4:dd:31:01:5e:
c8:2c:0b:4b:92:af:97:be:92:ee:c3:3c:ad:c9:e7:
cc:08:65:ef:2b:ca:a6:bc:08:55:ec:9f:30:e1:e1:
6f:a0:09:f8:2f:10:97:00:ef:13:de:d8:96:76:76:
7c:a7:19:22:f5:15:9a:0a:39:59:29:30:08:83:c5:
1d:7c:08:1d:df:f8:e4:de:5e:12:ab:79:35:6b:18:
b4:a1:1a:9f:87:5f:59:fd:39:c4:fe:1d:66:e5:d2:
fa:c1:65:6f:9b:c8:6a:ab:c8:ce:83:81:4d:bd:b6:
60:b4:51:1d:1f:2f:9e:dc:b2:86:d2:d2:69:53:6e:
10:e3:3b:8e:e6:01:de:a8:a5:71:85:2d:41:3e:48:
16:57:4f:96:d3:53:e0:8e:b2:de:cd:5b:9c:e9:65:
ee:88:34:79:fe:94:e4:ff:d7:d4:d9:73:5a:1c:df:
19:72:f9:28:7b:d1:35:d5:8d:2d:f9:bf:5e:16:40:
83:25:46:19:42:c7:24:75:8a:05:51:6f:8a:8a:6f:
1a:97:76:d1:e1:ed:61:a0:10:f0:5f:9f:ef:8f:7f:
8d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:40:73:F5:E8:44:64:29:4E:3B:85:D3:72:AD:E6:FD:C7:C0:67:F3
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/30Bz9ehEZClOO4XTcq3m_cfAZ_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.236.0/22
Signature Algorithm: sha256WithRSAEncryption
32:43:06:84:23:2b:35:cc:f8:da:4a:53:99:27:2c:68:0a:f3:
43:67:2b:ac:7c:fb:12:de:ba:be:eb:c9:3d:b8:45:e4:70:51:
c3:bd:e0:a6:43:b7:80:10:c5:8c:03:8b:59:a8:30:97:44:ea:
e3:95:da:44:e5:95:1c:5e:a2:cc:8e:ae:60:fb:7e:f7:b1:04:
64:be:77:f9:0f:be:7e:83:08:f4:c3:91:4d:04:30:89:03:63:
e5:3d:f5:fe:3e:a7:6a:1d:cb:a0:45:4e:ac:24:af:3e:4e:ec:
56:31:24:76:ba:96:95:49:a0:96:d8:2e:be:ef:30:81:22:65:
59:3f:f8:59:8c:a3:40:9d:d3:44:71:50:11:16:46:a9:f5:37:
3a:04:5d:44:f2:bb:26:e4:cd:30:ca:07:65:7d:98:fe:ca:10:
06:a9:83:20:2e:67:35:44:4d:81:c3:30:29:a6:d6:bd:cd:e5:
7a:0b:0e:ac:b7:44:02:f2:9f:d0:ea:a8:cf:21:9c:a7:4e:53:
1d:b6:76:43:a8:8d:16:09:3e:e1:3b:f8:d6:6f:4d:07:97:45:
d4:66:86:20:7c:53:15:b0:bf:65:20:50:54:61:2c:cc:59:dd:
9e:e0:df:f3:4a:a4:c2:11:33:2a:61:c1:bd:b9:0d:66:3b:80:
d3:61:cb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:53 2024 by rpki-client on console-fra.rpki-client.org