Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/MHXzBT37A3xvOtYxbTlh75Yhwss.roa
File: MHXzBT37A3xvOtYxbTlh75Yhwss.roa (raw, json)
Hash identifier: 2F0gaOAC6szPDqNlm02UxQ0WpfUAjO2+gEXF1S6QwnI=
Subject key identifier: 30:75:F3:05:3D:FB:03:7C:6F:3A:D6:31:6D:39:61:EF:96:21:C2:CB
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 050154D4
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/MHXzBT37A3xvOtYxbTlh75Yhwss.roa
Signing time: Thu 09 Jun 2022 14:47:03 +0000
ROA not before: Thu 09 Jun 2022 14:47:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 141.11.127.0/24 maxlen: 24
141.11.240.0/22 maxlen: 24
141.11.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83973332 (0x50154d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jun 9 14:47:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3075f3053dfb037c6f3ad6316d3961ef9621c2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:63:ff:7e:0f:71:4d:13:a1:02:50:54:49:f4:
37:01:a0:06:bf:1b:b7:fe:5a:09:3d:b0:da:ca:df:
82:7d:00:32:36:c6:1f:52:20:8d:47:34:27:f7:7a:
72:7b:e5:47:0d:49:25:8f:4e:2d:96:a9:01:92:56:
74:68:0a:a3:56:b9:6a:15:8e:ce:57:6d:ef:4e:c1:
23:05:9f:9d:d4:7e:fd:bd:d6:db:ba:f5:84:b1:fb:
ab:41:60:a3:e6:ba:58:87:5d:e6:6a:62:c8:b3:ad:
fc:fa:c1:6a:d4:9e:b4:87:bb:b6:16:90:41:3e:be:
08:2f:9a:d8:6d:99:79:eb:ff:6f:9b:61:8b:6a:83:
cd:eb:0e:44:bf:cb:23:c5:04:f4:2b:0a:70:ea:db:
e3:1a:e0:03:0c:fa:fc:67:9b:93:f4:39:f5:75:b0:
7c:ed:35:9d:6c:ea:8a:b9:4e:fa:42:e6:d5:01:aa:
42:2c:dd:a8:a9:65:6d:93:ae:29:dd:63:c9:9b:a3:
4e:f1:e7:1d:76:73:eb:c1:a1:fe:62:50:2c:cd:ee:
92:64:3a:e1:cf:0a:5e:78:e6:88:3e:b5:bf:54:90:
44:68:84:7d:fd:9b:ef:8d:a8:a6:8e:e5:40:64:2b:
6f:29:55:c8:74:2c:0b:45:b4:73:77:72:89:26:bb:
e8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:75:F3:05:3D:FB:03:7C:6F:3A:D6:31:6D:39:61:EF:96:21:C2:CB
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/MHXzBT37A3xvOtYxbTlh75Yhwss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.127.0/24
141.11.240.0/22
141.11.248.0/22
Signature Algorithm: sha256WithRSAEncryption
63:2e:a7:51:0a:94:24:95:b2:12:65:7e:20:9f:2c:be:3d:49:
cd:cd:c5:3b:35:af:ee:d4:ed:c3:8c:bc:77:2b:c5:ca:bc:c5:
2a:fc:d9:13:83:33:60:11:b5:6f:68:c1:63:eb:ae:03:27:24:
b3:16:06:46:67:3b:11:82:cf:02:9a:80:e7:5d:4f:22:77:67:
3a:ae:eb:c8:3d:86:85:6b:d0:0f:cd:9c:47:e6:f0:e2:e7:9b:
6e:9d:08:ab:07:b1:de:18:74:77:53:ba:dc:55:50:fe:9e:a0:
e7:54:db:c7:05:49:d7:06:1b:15:1f:53:5f:c9:93:ac:fb:b6:
0a:76:ce:6d:fc:44:42:09:56:33:5f:ad:0e:10:a3:25:2a:e6:
36:49:73:69:04:3b:53:de:c0:0d:d8:2a:70:5b:6e:81:81:5c:
58:7b:1f:20:92:e5:13:cc:91:58:7a:93:e3:ff:f0:1e:37:4d:
a5:74:d9:83:f6:98:15:e3:e0:4f:91:7c:f8:16:71:e2:dc:4f:
5c:cd:16:22:8d:74:ee:36:58:9f:73:b3:9c:8d:72:74:e3:67:
8a:92:b5:d6:1d:e7:40:f4:8a:c7:7e:11:24:63:95:8c:f8:1c:
32:23:6d:90:3c:e5:ae:ae:4a:c8:a0:15:2c:25:02:74:df:5b:
aa:9f:1e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:53 2024 by rpki-client on console-fra.rpki-client.org