Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/M-XB-ej0_7sX6yrE5C1F5qdIcWc.roa
File: M-XB-ej0_7sX6yrE5C1F5qdIcWc.roa (raw, json)
Hash identifier: Wvu0t3ovFRP770A34YEl70mYhw5tv/T7jwOdY60nRH8=
Subject key identifier: 33:E5:C1:F9:E8:F4:FF:BB:17:EB:2A:C4:E4:2D:45:E6:A7:48:71:67
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0182449604EA2BD1F7E3DB7535A17C378294
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/M-XB-ej0_7sX6yrE5C1F5qdIcWc.roa
Signing time: Thu 28 Jul 2022 11:34:18 +0000
ROA not before: Thu 28 Jul 2022 11:34:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60602
IP address blocks: 141.11.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:44:96:04:ea:2b:d1:f7:e3:db:75:35:a1:7c:37:82:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 28 11:34:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33e5c1f9e8f4ffbb17eb2ac4e42d45e6a7487167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dc:32:32:c7:a7:8f:20:b2:7f:be:75:22:40:
2c:fa:d5:ab:1e:7c:8a:71:c0:d3:e2:7a:6f:c4:08:
21:ea:ba:61:48:53:df:33:1d:97:74:c0:3c:7d:df:
61:d1:a3:08:d8:bc:0b:51:f7:20:d2:d3:bf:2d:57:
93:34:dc:f4:d5:42:37:08:0f:09:69:42:91:67:47:
f5:42:77:b6:a0:a0:d6:d4:c7:c6:29:1f:99:e1:cf:
af:28:18:39:4a:93:c1:b6:4c:7a:7e:59:6c:e0:5c:
76:da:6c:2f:23:8a:08:71:42:d1:75:7c:1b:88:c9:
d3:d8:d5:df:b9:06:ac:75:68:7c:9e:32:70:12:ee:
93:77:40:da:5f:34:52:48:15:44:a9:52:e9:b9:19:
cd:73:1f:e9:4c:4b:67:0c:30:09:00:7a:d2:28:b6:
fb:a2:17:d7:79:78:38:d9:96:2d:e3:55:5a:7f:99:
2f:5d:1e:81:bd:fa:97:b7:1a:48:74:64:7c:65:0c:
76:f0:f8:71:b3:4c:11:12:c3:eb:80:e0:6f:87:a3:
1d:04:e0:14:11:13:a5:8f:69:b2:3f:e4:b9:b3:0e:
1a:f4:2e:13:9a:3e:e2:e6:f5:03:06:91:2b:49:66:
26:f9:f0:2b:9d:a7:53:65:48:c1:e3:d1:15:59:df:
b5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E5:C1:F9:E8:F4:FF:BB:17:EB:2A:C4:E4:2D:45:E6:A7:48:71:67
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/M-XB-ej0_7sX6yrE5C1F5qdIcWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.80.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:e4:5c:cd:b1:69:46:bd:52:f4:19:ca:f3:10:33:d3:e4:4a:
1e:e3:2f:43:86:28:8e:db:bb:eb:7e:ff:65:a5:31:41:c8:d6:
08:19:06:f1:5e:98:a5:f6:c4:2e:df:9e:9f:f5:08:3f:19:b8:
bd:27:ec:16:e6:d8:d7:39:43:d9:46:8a:69:ba:09:fb:19:6b:
31:e8:c5:dc:db:03:ea:81:28:34:4e:60:93:ee:cb:f3:b7:b3:
f7:5e:e6:bb:45:4d:4b:e3:0e:95:24:c4:30:95:a7:da:77:a5:
9b:7d:cc:0c:b0:02:95:79:29:03:12:db:be:18:da:dd:d2:a1:
dc:1b:37:a2:87:22:14:58:72:c3:77:ba:89:ca:7d:f6:f5:d8:
d3:cb:2a:62:48:e5:b1:3f:cd:71:e3:fa:5f:fb:bb:8f:79:e3:
b7:f8:64:12:2a:4e:54:6c:34:a4:24:26:b7:1b:1c:02:2e:1f:
ce:de:94:cb:8f:61:60:90:49:20:1d:d0:0d:44:64:c7:09:5b:
ca:07:50:99:9f:f2:e6:26:27:45:62:49:e3:8c:f4:60:48:63:
35:8c:80:4e:d8:0a:0d:55:09:14:26:b2:d3:f5:05:15:63:4d:
21:b4:75:97:fd:7d:92:bf:19:85:20:80:e1:eb:1c:e1:16:0c:
03:02:25:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:53 2024 by rpki-client on console-fra.rpki-client.org