Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/DqiYbr25pmbo3sbjcvjakWLnA_c.roa
File: DqiYbr25pmbo3sbjcvjakWLnA_c.roa (raw, json)
Hash identifier: y7spDajGrQ9Tc4FI0/c8lnkPNkBjvt/JxJrUH4YAe70=
Subject key identifier: 0E:A8:98:6E:BD:B9:A6:66:E8:DE:C6:E3:72:F8:DA:91:62:E7:03:F7
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 038A785A
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/DqiYbr25pmbo3sbjcvjakWLnA_c.roa
Signing time: Sat 19 Mar 2022 19:33:12 +0000
ROA not before: Sat 19 Mar 2022 19:33:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212598
IP address blocks: 141.11.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59406426 (0x38a785a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Mar 19 19:33:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ea8986ebdb9a666e8dec6e372f8da9162e703f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:48:93:f1:5c:8a:25:66:17:7f:de:63:fa:29:
db:c3:4a:29:bb:c7:35:0a:3e:9d:74:9e:f7:6a:54:
c1:f8:c3:90:9e:af:4a:39:98:43:c2:2d:80:fe:30:
fa:b9:3f:2b:0e:0d:ab:06:2e:cd:de:09:57:59:a3:
74:c8:2f:06:15:a8:59:c3:61:41:3d:6b:86:c9:be:
4d:48:7a:d4:d8:fd:26:d7:f8:48:fb:44:75:59:61:
8a:4c:43:11:12:73:22:ac:9c:50:8c:14:92:c3:3e:
e3:01:60:fb:d5:d7:16:17:fe:8e:36:ce:83:b7:01:
38:7d:6d:84:83:80:bc:42:81:aa:2d:46:1e:97:21:
67:4c:27:05:a8:61:b1:e1:90:ba:cb:9b:ce:87:84:
aa:7a:38:9c:9c:3b:2c:46:22:cb:67:ca:71:0b:2c:
d5:dc:32:80:b4:6c:64:0b:2c:0f:fd:a2:f0:1e:28:
52:8f:0b:1f:eb:0f:88:cd:b0:09:51:c8:1a:5c:15:
63:46:d7:2d:f5:de:0d:d9:39:f2:f1:42:2b:88:95:
f1:2a:47:a3:06:b9:f1:90:46:ba:6e:36:3e:16:97:
db:60:00:57:c4:e9:53:58:90:30:b3:77:81:2b:2b:
59:98:c4:84:44:94:ac:5b:89:fe:14:b9:ba:c4:c8:
f5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A8:98:6E:BD:B9:A6:66:E8:DE:C6:E3:72:F8:DA:91:62:E7:03:F7
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/DqiYbr25pmbo3sbjcvjakWLnA_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.16.0/24
Signature Algorithm: sha256WithRSAEncryption
74:5b:03:7f:18:59:c2:14:9e:31:4b:22:6d:a1:9d:dd:a6:b4:
03:6d:66:08:c3:67:63:07:c5:49:bc:55:2e:ed:68:de:7f:80:
40:d3:fe:0b:6b:87:b9:cb:53:17:2d:83:68:7d:a5:09:7c:e3:
09:c5:90:ad:8d:b0:9e:81:d9:f7:cb:43:f3:d8:65:f4:b3:cf:
52:7c:c9:6d:f4:65:9a:a8:f8:6b:39:35:c4:22:b9:2a:a4:50:
14:b3:aa:56:9e:ee:da:42:51:dc:60:54:c4:e7:3c:e8:71:06:
7c:56:60:a2:c0:b1:02:a4:57:5e:64:36:a6:9a:cd:92:9d:f5:
74:ce:54:1f:bd:2d:33:43:97:ec:c1:ed:89:9c:c5:e8:77:da:
06:e4:60:b4:8d:8c:4f:94:15:41:64:d9:c0:25:77:4f:f7:c0:
f7:42:1f:7c:fe:0f:63:2c:88:f9:5f:b4:ac:35:ef:5c:05:6a:
38:9b:2a:9f:7d:ea:33:36:78:dd:0b:02:a4:4b:6d:e1:51:e5:
ab:03:be:84:cb:d9:f6:1e:d2:59:a2:2a:f7:ca:bb:44:92:1d:
dc:92:44:36:df:fb:ba:f3:cf:d3:03:45:d1:0f:e8:5b:bd:fb:
f2:be:27:f3:eb:d6:65:a9:34:72:c1:45:37:2a:da:b6:32:b6:
84:8b:dd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:53 2024 by rpki-client on console-fra.rpki-client.org