Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/CQwYomVIcQQQJLvocjCLgmqo8KY.roa
File: CQwYomVIcQQQJLvocjCLgmqo8KY.roa (raw, json)
Hash identifier: nxZPXPSrgOmpe7yYqqGGAGxxl0Ne87ofHL9eWwqwvbQ=
Subject key identifier: 09:0C:18:A2:65:48:71:04:10:24:BB:E8:72:30:8B:82:6A:A8:F0:A6
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0183317F9B6E24ACFE4542E8A37946E22467
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/CQwYomVIcQQQJLvocjCLgmqo8KY.roa
Signing time: Mon 12 Sep 2022 11:39:49 +0000
ROA not before: Mon 12 Sep 2022 11:39:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 141.11.105.0/24 maxlen: 24
141.11.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:31:7f:9b:6e:24:ac:fe:45:42:e8:a3:79:46:e2:24:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 12 11:39:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=090c18a2654871041024bbe872308b826aa8f0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:00:00:a6:86:8b:77:38:e6:f5:8f:3c:e4:
86:8b:69:ae:30:1c:5b:7a:98:4a:bf:cd:53:61:bb:
dd:79:7d:c7:54:9d:9e:9d:38:67:d3:df:85:11:ef:
ed:46:8a:c8:82:4e:c3:9a:94:e6:f6:30:b4:74:b6:
ed:76:fa:67:83:92:00:7c:c8:42:9d:3d:7d:7a:af:
80:e8:ca:ad:73:e2:24:3f:8c:0a:f3:c5:52:42:9e:
1e:35:fc:bc:2b:98:74:5a:7c:78:aa:d8:ab:52:70:
81:7a:d9:5f:08:45:d6:93:7d:04:ea:59:d9:3b:e0:
af:74:1e:d0:1c:b0:4e:9c:32:ea:cb:b8:da:1f:4e:
6b:e2:cf:0e:9f:b1:2b:7c:aa:6c:f0:d3:a0:b7:cc:
a5:9a:cb:12:43:93:e3:b0:a8:80:a7:03:2f:a4:20:
e7:14:3a:89:b0:cd:c7:71:6a:54:72:94:79:f9:eb:
34:dd:5f:c1:0d:4c:8f:c1:7e:ce:6b:c9:e9:1f:db:
3a:bb:f0:1e:72:88:82:a0:d4:a5:d3:82:0d:19:0e:
a4:18:a5:4a:7b:87:a2:f4:53:a4:ea:f0:48:39:19:
9e:4e:3c:69:e7:6a:29:f3:7a:a6:48:9b:b6:8d:11:
37:9b:d1:b3:ad:19:4d:09:d3:a6:33:02:29:10:37:
49:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0C:18:A2:65:48:71:04:10:24:BB:E8:72:30:8B:82:6A:A8:F0:A6
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/CQwYomVIcQQQJLvocjCLgmqo8KY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.38.0/24
141.11.105.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:bc:16:57:12:45:ea:c9:64:1a:10:5c:2e:4a:0e:64:de:7f:
8a:03:bc:15:29:f0:95:7e:f0:11:f7:57:66:df:87:b3:84:fb:
61:d2:a5:e5:fc:d2:50:a6:56:07:1b:07:8f:35:c9:8f:42:a1:
f3:e6:f1:91:8d:5d:d3:19:c6:b1:3d:0f:f4:bd:ce:4b:78:db:
8c:c6:a7:73:95:9d:59:ab:fe:26:93:33:df:61:ba:88:24:a0:
60:ea:bf:ff:10:29:ac:32:83:f2:e7:4f:0e:7e:b1:54:41:78:
d8:06:e8:ce:70:64:91:21:30:a6:07:71:9c:58:86:9a:9c:9a:
a7:fa:a2:a8:52:93:38:62:d4:05:fe:11:75:71:6d:38:7e:a3:
c1:e1:a8:6d:f9:2c:63:81:74:42:8d:4b:9f:4d:62:44:17:e3:
1d:22:12:8f:53:0c:fd:7d:3c:71:5f:54:66:40:60:99:aa:ee:
06:b0:f0:87:5d:bd:47:8a:44:4d:63:3e:de:b3:4d:0e:82:10:
99:08:7d:7b:e3:b6:8e:39:2a:72:bb:31:b0:4e:53:4d:6c:bc:
db:c3:02:27:7b:e2:d0:ae:b6:85:7a:95:c1:12:b0:7d:40:a0:
b9:1f:ae:79:3b:c2:9e:d7:66:0e:db:37:c7:2f:7d:9d:f3:27:
2e:e3:19:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org