Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/lM2WR9C7gOwVeAWQ9VOdtBFDBGY.roa
File: lM2WR9C7gOwVeAWQ9VOdtBFDBGY.roa (raw, json)
Hash identifier: FH3nbPOxnKXqeJmjUNoU+T13vVY2d2RBj+CRqfozUK8=
Subject key identifier: 94:CD:96:47:D0:BB:80:EC:15:78:05:90:F5:53:9D:B4:11:43:04:66
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 018476067009A049D961752E8E0F51D2EB05
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/lM2WR9C7gOwVeAWQ9VOdtBFDBGY.roa
Signing time: Mon 14 Nov 2022 12:04:04 +0000
ROA not before: Mon 14 Nov 2022 12:04:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210439
IP address blocks: 141.11.40.0/24 maxlen: 24
141.11.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:06:70:09:a0:49:d9:61:75:2e:8e:0f:51:d2:eb:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 14 12:04:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94cd9647d0bb80ec15780590f5539db411430466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ea:50:67:85:87:98:10:56:5d:91:c9:85:7b:
98:df:7a:6b:a5:58:f7:51:3e:29:85:b6:0e:5d:cb:
4e:d2:86:76:04:36:38:ab:7d:90:fd:de:f3:e9:fa:
02:ac:e3:24:fa:1c:0b:16:e3:2b:dd:0d:1e:a6:65:
f8:63:c8:2b:73:48:16:1a:16:37:b0:fb:95:26:81:
ac:08:e2:e3:ee:37:6d:f7:27:50:3a:e1:10:6c:8a:
07:b9:a4:f1:e8:9f:41:88:4a:d3:89:da:83:fd:cb:
31:74:1e:d9:a1:69:ea:bd:e8:2f:dc:70:2d:ea:40:
6b:17:4c:cb:45:61:62:ba:f3:20:37:0f:d9:ff:2e:
66:41:a8:4f:ca:0f:9c:f2:f1:5f:ac:7f:ee:b6:97:
59:34:b7:0a:a2:cd:ec:25:05:fd:bc:78:da:89:fb:
b2:0f:5d:09:97:c2:b9:79:e5:d4:32:65:0c:f2:7d:
8b:51:00:56:77:9e:e8:04:48:3e:d7:fc:cf:d7:c7:
0a:62:ab:4d:cf:b2:58:0e:b2:d7:ea:76:5e:d0:b8:
53:d9:9a:bd:17:e8:64:2d:84:aa:e0:c2:41:98:c0:
3a:f8:24:f1:60:a6:ba:62:b6:3f:74:7b:0c:d7:af:
ad:e3:96:c7:3a:ea:d3:c2:fb:bf:28:c5:60:c7:95:
24:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CD:96:47:D0:BB:80:EC:15:78:05:90:F5:53:9D:B4:11:43:04:66
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/lM2WR9C7gOwVeAWQ9VOdtBFDBGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.40.0/24
141.11.120.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a5:c6:69:3d:ea:23:53:01:66:e4:94:64:c2:00:ff:b8:21:
65:ff:3a:c4:d2:68:70:d3:e6:31:12:cd:97:0b:09:cc:fc:82:
ee:63:b6:1e:31:c6:74:48:4e:6e:92:f8:77:5d:90:60:a1:0f:
16:fb:97:46:3d:c3:25:92:a3:22:3c:58:ab:73:6b:0e:41:74:
d2:fe:04:aa:39:7b:0d:ea:af:f2:b4:32:36:ed:51:2c:2b:9d:
49:27:b0:06:75:0c:f1:35:03:a8:49:cd:9c:7d:89:eb:4d:82:
26:e0:ac:b9:93:dd:7a:10:30:d8:32:5b:a0:dc:2a:98:b7:18:
10:9d:57:53:fc:f2:63:c7:c2:c9:4e:d7:5b:f8:37:d8:4d:53:
e0:ae:bd:29:1a:bf:05:5e:6c:b0:4b:6b:7d:52:87:cd:81:5b:
29:3b:77:b2:df:dc:08:81:a3:75:48:3b:cc:b8:f9:a2:2e:bc:
f7:b3:31:aa:d8:c6:e3:58:8e:93:17:3c:34:50:43:50:0c:77:
53:6d:2f:e0:2a:6d:61:3b:3e:4c:49:82:bb:fd:a6:44:9e:45:
c4:91:30:8f:4d:d0:86:64:dd:76:b9:67:79:37:11:83:65:d2:
6c:1e:04:9b:ed:2a:b2:93:b8:f3:21:c9:3e:87:8d:ea:19:41:
83:59:e1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org