Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/U_pNR2sERZYFodfWwzEq_Qz3MEk.roa
File: U_pNR2sERZYFodfWwzEq_Qz3MEk.roa (raw, json)
Hash identifier: ubEkUWmPTpgUo9zs+pi+XrZsc1faviMkzt4tvTFfRT8=
Subject key identifier: 53:FA:4D:47:6B:04:45:96:05:A1:D7:D6:C3:31:2A:FD:0C:F7:30:49
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01826D6E547C7A3B798FA787C2A71263E3B4
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/U_pNR2sERZYFodfWwzEq_Qz3MEk.roa
Signing time: Fri 05 Aug 2022 09:55:23 +0000
ROA not before: Fri 05 Aug 2022 09:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 95423
IP address blocks: 141.11.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:6e:54:7c:7a:3b:79:8f:a7:87:c2:a7:12:63:e3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Aug 5 09:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53fa4d476b04459605a1d7d6c3312afd0cf73049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a1:b2:84:24:1e:05:e0:e1:78:b7:25:bb:4c:
78:89:ea:6d:f0:5c:f9:b7:b0:bc:11:f2:11:6e:18:
85:33:53:01:a5:27:bb:d2:02:f9:51:c5:f9:a0:83:
90:18:f2:50:13:22:d6:e8:8e:c0:b5:ab:fb:ed:ba:
24:4b:24:f1:a9:28:0c:52:0e:33:ec:1a:a6:c0:1d:
96:19:55:08:ef:2c:a3:9e:bc:eb:9c:0c:2d:75:f1:
1a:bf:1b:cf:fb:af:2e:19:7f:cc:34:ab:53:6e:e3:
70:16:90:21:34:42:1f:aa:d9:91:e6:e0:99:24:e6:
ed:f2:26:a6:8f:6b:34:84:66:a2:4f:74:17:1b:57:
53:c3:32:b0:94:a6:57:5e:9a:be:1b:00:10:32:a9:
bf:63:d3:f8:de:97:48:3e:37:1a:e6:fa:cc:b6:e4:
8b:f8:44:3c:c8:7c:52:89:a9:d2:a0:27:d2:99:56:
47:61:44:ed:80:29:33:9e:d9:86:e1:c5:b0:8b:9c:
fb:ac:8e:15:09:96:5e:4c:4e:80:ee:cc:ad:d9:4c:
b2:cb:a4:3f:df:8f:f3:86:10:62:7d:f3:de:09:3c:
0b:99:09:18:10:56:1f:68:1e:63:8a:b9:db:fe:a0:
08:df:45:48:aa:c8:80:eb:87:74:8a:c7:47:f2:ac:
bb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FA:4D:47:6B:04:45:96:05:A1:D7:D6:C3:31:2A:FD:0C:F7:30:49
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/U_pNR2sERZYFodfWwzEq_Qz3MEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.126.0/24
Signature Algorithm: sha256WithRSAEncryption
88:40:01:cf:5b:4d:b5:ff:bf:94:21:40:66:37:45:cc:10:fa:
ad:04:3f:78:88:98:c3:ab:9c:d3:11:b1:55:0a:63:c6:8b:aa:
71:c5:dc:fd:77:32:10:72:26:e4:a6:8f:b7:7b:b6:dd:56:72:
1c:45:aa:da:97:f8:44:46:91:d0:b2:d9:0b:af:3a:fd:7f:9a:
9c:55:d6:5f:e0:44:3d:3c:15:26:df:6f:6d:66:40:30:ed:b9:
da:7e:2d:54:16:60:f5:9b:0a:fc:d7:1d:a4:f4:58:7c:66:4f:
5f:4f:da:5d:e0:48:0a:26:40:9a:e2:61:30:4e:11:75:66:c0:
cc:14:fc:a1:f7:18:64:7c:6e:35:ac:a7:8c:c4:98:a7:70:28:
75:25:a0:66:5c:54:18:8e:c5:1f:7f:b3:1b:64:b8:40:ec:3e:
60:96:4c:47:63:0b:d9:16:e8:a7:ab:89:d6:34:5d:81:43:46:
a6:80:94:b9:04:9b:e8:c3:7a:6c:fa:5e:d8:59:d5:f4:ee:5d:
eb:a8:a5:44:cd:8e:de:78:fa:16:3b:86:cb:d4:39:14:49:24:
ac:2c:68:56:65:ed:62:12:63:6a:2b:8a:ef:19:6d:66:3e:24:
b7:05:0f:06:3a:86:c0:6c:71:23:c3:fa:48:1f:4b:9a:c2:36:
0f:fd:18:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org