Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ag8wLWi2yP29n8q2Hzkd72BIJpY.roa
File: ag8wLWi2yP29n8q2Hzkd72BIJpY.roa (raw, json)
Hash identifier: BpaGdZaRsWhuAJAry/f1mj8xauKxvjJid8Ids14GFoE=
Subject key identifier: 6A:0F:30:2D:68:B6:C8:FD:BD:9F:CA:B6:1F:39:1D:EF:60:48:26:96
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01841B0E4E31EC78CD8BB8C07C32F4873CDE
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ag8wLWi2yP29n8q2Hzkd72BIJpY.roa
Signing time: Thu 27 Oct 2022 20:07:13 +0000
ROA not before: Thu 27 Oct 2022 20:07:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60117
IP address blocks: 141.11.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1b:0e:4e:31:ec:78:cd:8b:b8:c0:7c:32:f4:87:3c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Oct 27 20:07:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a0f302d68b6c8fdbd9fcab61f391def60482696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:1e:f8:87:8e:88:90:95:1d:6c:44:c9:f4:
2b:85:98:ff:19:90:59:4d:f6:87:29:08:72:8b:92:
7f:27:5e:bc:fe:d6:89:b5:bd:5a:b8:0f:eb:7e:3e:
a9:44:bf:1e:16:2b:b0:b3:d6:e7:b1:20:4d:7d:da:
18:12:f4:ae:fa:89:11:c5:ae:46:df:a2:1c:dc:1f:
75:4c:2f:44:0a:f6:4d:bd:22:9a:1a:4c:77:3f:29:
3b:1c:d0:6d:6e:0d:e7:78:41:1d:fe:95:4b:c7:33:
c2:86:d5:71:cd:e4:8c:76:d5:5f:30:0b:15:2d:27:
d7:c7:c5:08:fc:b1:4d:0b:51:83:da:2b:4d:ea:c7:
6d:a9:2e:0d:ca:ca:b9:ac:84:e4:51:1b:64:f7:23:
34:f3:7f:ab:fa:f3:49:a6:a1:35:b4:40:94:5b:41:
1c:22:f2:a5:39:2f:fe:ec:bf:be:2d:6c:c2:43:a9:
a0:4d:51:73:f5:99:7a:fb:44:8a:30:c6:98:e9:9c:
8a:4c:44:2f:f0:1f:c5:22:9c:cf:e7:74:41:3b:81:
82:5b:1c:a5:71:dd:d1:8d:30:ae:d3:c2:a8:34:6a:
9f:4f:04:ba:23:0a:e0:42:97:c6:ef:46:d6:31:c8:
45:40:7f:a6:ee:52:91:16:2d:39:ee:59:60:0c:4c:
40:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0F:30:2D:68:B6:C8:FD:BD:9F:CA:B6:1F:39:1D:EF:60:48:26:96
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ag8wLWi2yP29n8q2Hzkd72BIJpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.132.0/22
Signature Algorithm: sha256WithRSAEncryption
80:69:9f:52:8a:fd:81:99:51:38:c5:46:0f:6e:e1:8a:fa:41:
04:39:8a:aa:78:41:cc:50:a7:14:51:f9:29:59:77:d2:48:86:
dc:39:1a:f1:49:f0:cf:00:6d:05:eb:32:ee:e2:a8:46:1d:21:
46:4a:ca:06:20:24:2a:15:30:50:e0:23:75:1f:5d:79:c5:df:
05:4a:96:dd:9a:5b:fe:21:c5:c2:d4:a6:60:6b:16:e5:e4:db:
8e:30:f9:5a:f8:90:6e:4d:d0:9f:56:ae:b4:c6:0c:27:cb:9a:
01:d4:5b:40:84:7e:9a:85:2e:94:c5:8a:a5:57:a2:5a:40:a2:
f1:72:38:95:ee:38:c6:21:14:a5:6d:85:4d:90:07:cc:8d:d4:
24:0f:2d:5b:71:bb:ca:1a:44:f2:77:bf:81:93:b9:25:a7:cf:
2a:df:79:ff:f1:4e:4f:3f:64:7b:40:83:5c:d2:a5:ee:f5:8d:
45:4f:35:0b:af:b3:40:be:65:4a:fd:bd:e3:7f:33:07:dd:93:
ed:4a:30:01:d0:e6:3d:bb:65:e4:b6:c4:98:c9:3e:19:f4:2a:
e4:dd:30:38:1e:e6:80:de:e9:b0:f5:c4:a5:05:2b:3a:7b:36:
77:5b:b0:b2:5c:f2:c6:ae:e2:dc:68:d7:1e:73:f5:3c:f0:3b:
39:da:be:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:53 2024 by rpki-client on console-fra.rpki-client.org