Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ar6jpI5yUDklxtIOkI1zFCvMGuY.roa
File: ar6jpI5yUDklxtIOkI1zFCvMGuY.roa (raw, json)
Hash identifier: 6pXS3rzl+i9C/Ps3eu0nNBSmb/XUGizVgRT/8Ou1fpg=
Subject key identifier: 6A:BE:A3:A4:8E:72:50:39:25:C6:D2:0E:90:8D:73:14:2B:CC:1A:E6
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01843D737EC6AC950365EF391A7DD8061E99
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ar6jpI5yUDklxtIOkI1zFCvMGuY.roa
Signing time: Thu 03 Nov 2022 12:24:50 +0000
ROA not before: Thu 03 Nov 2022 12:24:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49581
IP address blocks: 141.11.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3d:73:7e:c6:ac:95:03:65:ef:39:1a:7d:d8:06:1e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 3 12:24:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6abea3a48e72503925c6d20e908d73142bcc1ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f5:a3:2f:ff:39:0c:c9:9b:88:ca:0c:b0:e1:
09:d7:2c:70:fe:32:eb:46:8e:02:d1:38:c5:22:36:
41:d8:51:9a:51:88:ee:37:14:d6:54:a7:8e:47:1a:
ed:a1:bf:33:5a:ef:52:82:68:71:b8:c7:01:69:b9:
b4:6f:dc:7f:8b:53:06:91:ef:94:c0:8e:43:38:40:
c2:4a:4d:45:77:04:8e:83:5a:91:88:b8:7e:6a:6d:
a9:97:59:4c:ba:96:2e:b3:6e:6e:64:e8:a9:f6:5d:
fa:fa:25:34:c9:3a:22:cd:7e:36:05:d8:6f:86:35:
e0:7e:ef:4e:1e:8d:2f:27:92:e5:85:c7:14:10:a5:
dc:27:cb:67:da:af:70:4d:02:fc:33:0e:ee:f0:8a:
da:53:e5:75:da:2f:1a:46:a1:ff:b8:39:22:73:36:
c8:df:88:0d:a5:75:17:06:d3:89:7a:15:e2:28:0f:
4f:37:8f:db:c9:7b:dc:1e:ce:3c:3f:4b:c9:c6:78:
0b:99:d9:85:f6:6c:26:d7:33:87:7d:4a:e0:ee:8a:
9e:d9:df:eb:6b:4d:b0:05:67:2e:4e:61:92:e2:62:
09:f2:ec:70:0e:a9:c2:e6:49:24:37:af:18:c5:3e:
29:58:8a:ba:88:a6:eb:56:d0:69:9c:51:4e:f3:80:
ca:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BE:A3:A4:8E:72:50:39:25:C6:D2:0E:90:8D:73:14:2B:CC:1A:E6
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ar6jpI5yUDklxtIOkI1zFCvMGuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.249.0/24
Signature Algorithm: sha256WithRSAEncryption
37:b9:c8:63:c3:6b:a9:eb:8b:7a:26:cc:36:66:89:c6:e7:5e:
60:5c:00:86:dd:de:f9:8b:c1:1e:cd:5a:66:5b:18:ef:04:d4:
c9:ee:69:a6:9e:99:a1:ff:82:48:17:25:f8:e4:15:29:cf:dd:
50:45:02:cc:a7:24:b3:70:c7:58:18:b6:7c:63:e7:01:2b:30:
19:5a:9c:9a:93:d6:7c:d7:d0:63:70:2a:5d:f9:14:1a:05:b0:
63:8c:16:84:c1:5c:57:a0:2d:11:0a:40:8b:66:be:ed:55:e3:
b8:cc:b2:ee:5d:fe:f9:63:3b:52:51:e7:cf:86:68:98:92:87:
11:95:91:3f:e2:a3:30:cc:da:10:f3:36:f5:58:30:c4:32:46:
a2:86:a5:b6:04:8a:73:b8:2a:b8:df:1d:8b:3c:0a:2f:45:8c:
c5:9e:80:7f:9a:f1:e7:1b:f0:28:d3:fe:fb:49:42:16:9e:15:
41:dd:c2:d4:11:84:8d:fd:95:10:18:01:a9:0a:14:12:13:2a:
33:0b:81:b7:87:40:ec:1f:11:2f:97:a4:ce:8c:57:5f:b6:0b:
12:25:e6:e2:3b:d2:2e:ec:81:bb:34:7c:2f:7c:94:0e:6b:bb:
65:db:4b:54:f2:5b:10:40:40:13:9e:b4:58:f5:a5:bc:f8:5b:
b5:52:4f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org