Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/LvHQRne63tspkV9-UhktqioNqG0.roa
File: LvHQRne63tspkV9-UhktqioNqG0.roa (raw, json)
Hash identifier: J75P4MBDyAl1jIdpWShWt3IY9LrnAgaB1TuFZBE1zyc=
Subject key identifier: 2E:F1:D0:46:77:BA:DE:DB:29:91:5F:7E:52:19:2D:AA:2A:0D:A8:6D
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0181FCE71A40D05260C33083C9FF50D87A43
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/LvHQRne63tspkV9-UhktqioNqG0.roa
Signing time: Thu 14 Jul 2022 13:30:12 +0000
ROA not before: Thu 14 Jul 2022 13:30:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 141.11.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fc:e7:1a:40:d0:52:60:c3:30:83:c9:ff:50:d8:7a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 14 13:30:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ef1d04677badedb29915f7e52192daa2a0da86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7b:19:9f:f2:15:62:16:cb:42:e1:ae:22:fa:
40:e4:29:67:33:5f:1d:18:e3:3c:f7:52:59:8f:c2:
87:07:09:cb:04:65:03:f1:b5:4c:b7:80:92:c7:87:
03:3c:80:d8:ca:34:c0:f0:2e:4c:86:c2:ae:c1:f4:
54:a1:0d:f5:fc:76:37:2c:ef:8b:7e:2f:c1:e3:c5:
9c:91:30:b5:6b:af:0f:fb:78:1b:e6:f0:8a:3d:a6:
a0:4d:a4:8d:8d:dc:3e:02:d7:6d:a1:07:10:32:5c:
9b:5d:dc:36:a3:d8:f6:9b:18:fa:74:ee:0a:ed:c6:
f5:62:1e:88:64:36:69:2f:87:72:ea:db:86:8c:0d:
52:d9:89:91:77:6b:c9:1d:2f:95:4e:78:5a:a5:07:
cb:2b:fc:4d:d6:63:8c:f8:af:e5:f5:4c:9d:12:18:
ad:5c:10:51:27:e5:32:a4:b2:4e:d8:5c:9a:3a:8d:
9b:cb:e6:79:b1:db:f2:de:d4:c2:23:59:df:6d:49:
53:10:56:6f:87:2d:5a:85:1e:10:a1:b1:c3:bd:0a:
1d:07:e3:7a:90:27:66:80:88:b2:cb:94:f3:91:db:
fc:d6:74:11:59:4f:3c:3e:4e:a9:9b:2d:90:d1:76:
ce:31:3c:dc:b5:de:0e:d5:c6:35:9d:1a:e6:86:e7:
d2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F1:D0:46:77:BA:DE:DB:29:91:5F:7E:52:19:2D:AA:2A:0D:A8:6D
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/LvHQRne63tspkV9-UhktqioNqG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.39.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:b0:3e:a6:a7:67:e6:60:fb:3e:27:f1:6a:2d:4f:99:21:b5:
4c:d0:73:6e:10:89:fb:e8:1f:15:e1:9d:8d:2a:15:f6:69:29:
f0:64:29:99:35:3d:5c:3d:93:26:f4:33:82:ae:b7:70:80:30:
29:61:05:6e:19:7b:df:3d:57:30:48:4c:b4:0a:09:3d:66:a9:
a2:7b:a9:93:9f:2c:6d:bd:92:69:4d:6b:ea:29:59:88:d0:b8:
27:d5:01:65:e0:2c:67:eb:ba:54:3d:f3:01:af:ef:3e:ef:de:
c8:3e:f5:69:19:cf:b2:8b:94:62:a8:0e:1b:61:ea:d0:67:f1:
3e:42:d9:af:0c:3a:f7:3b:fb:59:4b:f1:4c:3c:8f:7f:fa:77:
75:30:39:f7:89:6f:d1:e6:11:f8:54:aa:2e:39:3e:04:99:39:
c0:88:43:e2:8e:b7:3d:67:2a:5d:15:41:13:4b:91:3c:0d:cc:
41:c6:ec:e7:52:3f:ed:08:16:1c:85:06:8a:ff:5c:29:c1:9b:
c1:5c:d8:39:44:74:79:ff:d1:5a:bb:c6:a0:0f:9d:0d:61:be:
e8:5b:3d:d4:8a:32:fd:b9:a5:5a:fd:2e:d1:d9:65:9b:98:26:
35:7b:23:3f:84:fd:eb:1f:30:d3:96:79:7c:84:a1:0b:36:f0:
e0:83:ac:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org