Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/5s8aT6sYT9tfUh2WRgTGvDJjN6A.roa
File: 5s8aT6sYT9tfUh2WRgTGvDJjN6A.roa (raw, json)
Hash identifier: FQrRSfPtyaSIuHbQ7YSqXggfaFn0lgTYCSeokEDYCZQ=
Subject key identifier: E6:CF:1A:4F:AB:18:4F:DB:5F:52:1D:96:46:04:C6:BC:32:63:37:A0
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01837981BD15491CE1B831790BED0330A96C
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/5s8aT6sYT9tfUh2WRgTGvDJjN6A.roa
Signing time: Mon 26 Sep 2022 11:14:49 +0000
ROA not before: Mon 26 Sep 2022 11:14:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 141.11.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:79:81:bd:15:49:1c:e1:b8:31:79:0b:ed:03:30:a9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 26 11:14:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6cf1a4fab184fdb5f521d964604c6bc326337a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3c:f3:ae:54:03:7b:7e:e4:98:b0:4d:67:79:
ce:81:ae:2f:0d:3d:64:d5:0e:1a:9c:06:85:f4:db:
88:dd:a2:9e:f6:75:65:66:15:6c:b3:b5:b2:41:67:
bb:d4:f1:4e:20:b7:b1:a6:7b:6d:91:ac:f5:e2:27:
ff:28:88:9c:33:73:f7:13:59:cb:fa:31:ba:c1:17:
5e:ea:52:47:39:7f:69:19:26:84:b0:83:09:7b:a1:
22:88:83:55:9b:90:6c:c8:0a:04:32:49:f1:3e:c4:
1f:ca:fb:14:b6:e5:b7:34:9a:b4:a0:4d:63:6c:ee:
f7:f7:4a:eb:8d:19:4f:5c:bd:54:21:56:ce:c2:c2:
4a:e2:c5:fc:56:07:13:4e:c1:4d:56:ec:2e:5b:27:
a3:64:c7:d1:0b:91:73:1b:19:22:37:77:7d:07:d1:
39:f9:a8:18:1a:98:9b:f1:81:e0:2c:af:bd:b4:b6:
61:66:a2:42:85:12:72:97:45:c0:ad:61:42:3b:ba:
89:5a:df:34:bc:56:4e:b1:05:0c:91:05:e0:9a:42:
c2:be:ee:1d:d2:f4:f6:45:af:d0:db:a5:7b:f3:57:
67:ed:96:ce:48:3c:94:b4:ef:c9:05:19:9c:9c:08:
a0:c2:97:34:17:ff:c6:58:bc:34:29:dd:82:d0:22:
68:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CF:1A:4F:AB:18:4F:DB:5F:52:1D:96:46:04:C6:BC:32:63:37:A0
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/5s8aT6sYT9tfUh2WRgTGvDJjN6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.248.0/22
Signature Algorithm: sha256WithRSAEncryption
02:dd:a7:bf:e5:05:28:f4:c8:ab:5e:f0:ef:ed:46:ad:67:72:
44:73:2e:17:bc:27:0d:82:6e:ea:f1:75:bf:d7:c4:eb:ea:6d:
06:59:4b:ea:fe:46:89:0d:47:67:98:d5:8d:cf:2d:93:fa:ee:
c6:7d:b7:ff:1d:82:2a:6c:95:fc:77:09:7c:05:27:4c:6f:1e:
3e:1a:8f:39:43:b0:84:6d:b0:79:ae:78:07:ef:57:d1:02:71:
69:45:a0:18:47:6b:1a:27:29:33:1b:b0:12:a0:e9:51:db:a0:
17:65:36:1b:06:cd:7e:f7:59:ee:05:8f:5c:77:97:5d:50:78:
ac:49:ce:36:5e:c5:54:1c:23:ab:78:a9:75:ed:0e:ed:5d:3c:
c4:34:3c:2f:1f:74:cd:e5:2b:3c:c1:6c:94:25:18:ac:f6:f9:
cd:f9:b4:ac:1e:64:9d:b5:03:9b:91:d2:0e:e6:d6:73:64:de:
54:6c:97:ce:d7:dd:f9:bd:e8:41:ca:c8:3d:47:30:68:41:36:
2b:c2:c5:c5:59:25:77:11:50:00:25:eb:44:4d:e7:cd:40:62:
b1:f1:b1:b1:eb:b8:e3:75:9d:93:9c:ff:3b:41:64:d3:f6:a2:
b4:fb:a5:1d:b2:ba:11:74:6a:74:eb:ec:94:40:03:13:e7:8b:
66:3d:f8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:53 2024 by rpki-client on console-fra.rpki-client.org