Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/l8xVfNMBxZmx503whbXsYRgRSQA.roa
File: l8xVfNMBxZmx503whbXsYRgRSQA.roa (raw, json)
Hash identifier: 7LMklae8vy3QFSqxRWaksTlQRltwz6DqX1j3qyeVARQ=
Subject key identifier: 97:CC:55:7C:D3:01:C5:99:B1:E7:4D:F0:85:B5:EC:61:18:11:49:00
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 03D10230
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/l8xVfNMBxZmx503whbXsYRgRSQA.roa
Signing time: Mon 11 Apr 2022 12:52:49 +0000
ROA not before: Mon 11 Apr 2022 12:52:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142617
IP address blocks: 141.11.36.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64029232 (0x3d10230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 11 12:52:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97cc557cd301c599b1e74df085b5ec6118114900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:70:49:ae:b0:d9:86:cc:69:39:33:72:85:09:
7d:45:0c:c5:89:2a:46:9b:fc:97:4e:8c:35:93:ad:
d5:e5:1a:02:c4:c7:30:74:5a:5b:6b:5f:36:de:d9:
ea:15:1f:5c:ae:94:2b:1a:db:a1:20:90:42:40:17:
8d:a0:e2:91:1e:89:f1:a9:5e:f1:61:1c:e1:fc:77:
b9:10:e2:d3:49:c9:70:95:3e:ab:a0:3a:e5:6b:bc:
8e:ca:fa:b9:c1:9b:9e:ff:34:2e:c0:8d:16:31:09:
7b:f0:8f:e4:ce:58:eb:b1:b3:29:d7:76:a9:da:6c:
98:42:ae:61:1b:69:55:9c:74:e4:30:74:6f:8b:ba:
d7:4f:08:7f:1e:9a:a0:8e:b6:05:ad:e1:31:77:bb:
1e:8b:58:6c:ca:bf:39:3a:74:a3:bb:01:3a:75:08:
b4:a1:0b:a6:85:3b:3c:31:00:f6:49:00:1a:56:17:
f3:6c:7c:c5:b0:f1:86:44:26:58:00:8d:26:8d:2d:
dc:d2:db:4a:12:e4:15:ab:c4:73:e8:5f:62:ea:2a:
d1:0d:ae:e3:29:53:a2:be:0b:8e:64:05:de:06:a1:
60:74:eb:02:6d:79:c9:20:ef:4a:9c:10:a2:2e:8f:
26:49:16:01:30:58:97:1e:3b:a6:5c:aa:b9:5b:28:
4b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CC:55:7C:D3:01:C5:99:B1:E7:4D:F0:85:B5:EC:61:18:11:49:00
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/l8xVfNMBxZmx503whbXsYRgRSQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.36.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:1d:7a:77:1c:d8:ad:81:cd:7c:32:ec:7f:03:51:c0:d9:fa:
8a:18:ce:58:74:5b:60:9d:cc:3f:2b:73:df:6f:36:3f:9d:d6:
96:c4:73:ab:86:bf:08:01:64:38:9a:3b:88:7f:7e:c6:75:19:
41:74:f6:a7:5b:ce:54:bd:05:f3:76:8b:53:ed:ff:c4:70:6c:
2a:f6:73:71:00:9f:cb:4c:16:eb:ac:ac:a7:2c:6b:32:84:f0:
f9:bd:80:fd:db:37:56:ee:58:9f:d1:3e:a3:09:b9:1b:bc:82:
5b:4d:38:37:67:48:a9:d1:78:dd:11:05:97:fc:72:77:69:4b:
2d:4c:22:10:2d:73:04:42:b5:5d:43:db:e7:68:8c:87:7d:dd:
51:39:ba:70:2e:03:8e:33:d4:e5:c1:39:a0:ff:e8:f9:8e:77:
f6:a2:3b:a8:66:b5:54:13:06:cf:a1:e7:50:b5:e6:7f:5f:47:
4e:cb:6e:4a:1b:41:ca:2d:20:1c:55:c9:a7:8c:d9:f8:dc:7c:
33:61:14:c4:0d:20:17:6d:60:54:8b:a2:48:f1:da:58:cb:cd:
b5:e3:fa:4a:ef:71:d7:96:06:71:02:f0:dd:d8:31:10:43:c0:
e1:a3:e6:38:c7:e5:73:0b:06:9f:14:c9:25:ea:78:b2:e9:e3:
c6:6b:00:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org