Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/A8zqPNbxBUophQrhuQriIvF3Nr0.roa
File: A8zqPNbxBUophQrhuQriIvF3Nr0.roa (raw, json)
Hash identifier: S/ZwGDm+W6/YOvZLVztFwOgi2WovPowedSC9naPYxIQ=
Subject key identifier: 03:CC:EA:3C:D6:F1:05:4A:29:85:0A:E1:B9:0A:E2:22:F1:77:36:BD
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0493E654
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/A8zqPNbxBUophQrhuQriIvF3Nr0.roa
Signing time: Thu 12 May 2022 12:01:02 +0000
ROA not before: Thu 12 May 2022 12:01:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207588
IP address blocks: 141.11.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76801620 (0x493e654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 12 12:01:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03ccea3cd6f1054a29850ae1b90ae222f17736bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:81:32:12:18:2e:84:29:7e:39:d2:a1:a1:88:
de:9f:99:26:8a:e8:85:be:23:a8:83:28:76:43:9f:
85:a1:da:37:47:65:e4:a2:8e:f2:e1:05:d2:1a:5a:
1f:fd:22:db:d5:1c:4b:34:90:7f:8b:99:2b:74:da:
f4:8c:5e:a7:f9:14:70:f9:c5:fa:79:bd:1c:91:39:
72:75:a1:ae:0d:34:eb:13:1e:1e:0c:01:b6:c8:f2:
c0:89:23:2c:0a:06:95:a4:1d:61:d0:2d:68:e9:db:
84:75:3e:0f:81:2e:18:00:2b:83:b7:cd:61:ca:d3:
03:97:89:cb:3a:a4:02:a7:ec:24:13:33:c5:97:2d:
64:d5:9d:7f:5c:c6:c3:75:b1:4d:40:3e:e6:da:74:
f2:89:23:46:6e:97:50:42:df:32:d0:f6:7e:27:4d:
e3:e4:80:12:58:08:37:59:54:6a:d4:29:1d:3e:dd:
92:1a:98:36:19:14:70:f4:8c:4d:44:7a:c3:10:fc:
79:0d:43:ca:ba:3a:06:7c:83:85:a5:8a:13:79:6f:
70:9a:20:6a:66:05:47:31:d1:03:d1:94:ec:f3:c2:
38:41:26:eb:64:8e:58:93:55:58:df:30:87:74:d3:
8f:18:31:3f:d9:ad:b9:37:88:4b:1e:83:ec:85:07:
a3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CC:EA:3C:D6:F1:05:4A:29:85:0A:E1:B9:0A:E2:22:F1:77:36:BD
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/A8zqPNbxBUophQrhuQriIvF3Nr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.120.0/24
Signature Algorithm: sha256WithRSAEncryption
33:d2:59:e2:76:50:44:45:c8:e0:0e:59:ba:23:5b:38:75:3f:
76:5e:b5:f2:09:f7:32:d8:53:e1:68:43:ec:53:21:8d:c9:96:
ac:fa:c1:6f:1d:7e:15:8c:af:17:d5:0a:e8:f1:45:ca:39:7f:
fd:9d:eb:d1:3f:34:20:92:b3:05:c2:e4:db:3d:1f:81:22:b1:
4c:f9:eb:57:77:e5:00:4c:67:82:c0:3a:e7:60:1c:6e:f1:5e:
f0:96:c9:47:f3:87:31:55:7f:8d:a9:b1:d5:c6:82:9f:aa:7a:
99:59:62:b5:9e:dd:3a:21:da:e1:3a:a7:76:54:7a:3d:91:f4:
b8:18:ca:33:65:d2:67:2c:05:01:eb:7c:01:1f:81:54:61:5a:
62:1c:61:df:fe:1a:79:95:8e:46:9a:f4:cd:62:84:ae:3b:1c:
a5:77:ab:cc:02:dc:c3:8d:1e:2b:58:2e:72:d9:5e:c3:69:50:
df:3f:fd:a7:c4:da:05:01:d7:03:c0:24:71:58:b9:1e:4a:c9:
7c:75:e4:be:1d:0f:3b:cc:03:23:cb:2f:57:bf:fd:46:e2:79:
6b:76:c2:aa:83:2b:26:c5:17:b9:72:36:ef:b2:ea:b7:5c:2c:
43:e7:69:7b:2b:2f:db:c8:bf:45:1c:6b:a3:e1:f8:c0:ab:08:
be:bb:ae:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:53 2024 by rpki-client on console-fra.rpki-client.org