Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/laK-dqjYhi7oZr-zjoTFlYqRpKE.roa
File: laK-dqjYhi7oZr-zjoTFlYqRpKE.roa (raw, json)
Hash identifier: RvG7IQqMj0MAXuJ7dpW5ByE9dLGUjWSJmuBUP5/6jzM=
Subject key identifier: 95:A2:BE:76:A8:D8:86:2E:E8:66:BF:B3:8E:84:C5:95:8A:91:A4:A1
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04C3E949
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/laK-dqjYhi7oZr-zjoTFlYqRpKE.roa
Signing time: Fri 20 May 2022 14:03:30 +0000
ROA not before: Fri 20 May 2022 14:03:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 141.11.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79948105 (0x4c3e949)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 20 14:03:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95a2be76a8d8862ee866bfb38e84c5958a91a4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:c8:73:0e:db:4e:92:3e:06:fd:ef:23:da:
cd:84:42:6d:0c:b0:08:93:41:6c:7a:cb:37:8c:58:
2e:e1:7c:41:de:f4:41:8e:f8:02:07:74:27:93:58:
97:cf:6b:b6:de:2e:d8:79:17:33:5a:81:f4:e1:14:
59:c8:4e:7e:c7:be:39:a7:75:39:25:e3:16:4a:46:
14:b1:27:7c:b0:87:ef:32:b6:de:25:ed:42:61:ad:
2b:c7:d0:e5:55:04:4b:6c:8e:13:05:54:48:dd:3a:
c3:c0:9b:06:e8:7f:52:56:aa:80:0b:cb:43:17:bf:
7c:75:bf:b4:af:a9:46:11:4a:ff:9b:d3:8d:d6:9a:
eb:4e:61:4b:42:de:2a:fa:9c:e5:84:e0:49:88:d8:
1a:99:54:53:d8:80:74:c4:f7:8f:68:73:d0:a8:de:
7b:95:3b:57:72:af:66:36:b9:b2:8b:95:10:c6:c0:
0e:14:39:e6:6d:d4:b4:b4:98:b3:e5:64:07:c9:af:
31:0c:bd:53:bc:54:64:80:c9:ef:3f:e5:1f:49:03:
3f:0f:59:bc:36:9a:25:e7:86:70:69:62:ee:0d:b3:
54:b4:a3:84:3a:d6:c2:bb:83:36:9b:b7:3c:b3:be:
aa:52:98:26:0f:de:cc:75:13:7a:ff:c8:a0:a7:51:
88:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A2:BE:76:A8:D8:86:2E:E8:66:BF:B3:8E:84:C5:95:8A:91:A4:A1
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/laK-dqjYhi7oZr-zjoTFlYqRpKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.236.0/22
Signature Algorithm: sha256WithRSAEncryption
19:42:bf:5b:e3:bd:77:bf:7c:b0:f3:fe:83:3c:31:c2:c7:4f:
38:54:cb:f4:bb:e6:e5:68:37:4e:be:5f:9e:ec:bd:3d:f0:3c:
29:ea:12:64:43:c0:bf:13:f9:7f:a5:a5:eb:cb:49:81:63:32:
7c:6e:ec:11:31:33:d1:c6:c4:62:59:c8:04:65:f4:92:33:13:
e8:8d:00:5a:db:1f:b9:f5:12:10:03:36:bf:35:dd:76:4b:ef:
0a:ca:43:9b:1f:4b:7c:2e:57:9e:6a:80:2b:ea:95:31:36:88:
53:6b:03:9a:a5:c6:bc:df:56:7d:c7:09:1f:e4:cd:ae:29:44:
1c:31:15:dc:b1:f5:20:42:4e:ee:11:3c:40:c6:03:3f:91:27:
d7:24:5f:d3:59:0f:79:9f:d9:ad:f7:c5:2c:d8:4b:f3:74:9d:
96:a6:ab:5c:51:44:52:49:87:d9:5e:eb:15:c4:31:7e:b4:e0:
1e:d1:73:66:f6:2f:3c:4c:4a:00:07:3c:d5:d3:04:c8:da:9d:
f1:6d:bf:a6:46:b8:09:e0:b9:e1:ff:96:8b:32:74:17:e1:9d:
fc:ee:fb:f9:8b:e7:26:64:47:22:c3:cd:3c:ad:59:a4:bd:2e:
eb:ef:a3:f5:32:6a:e4:72:06:08:3e:bd:b8:48:bf:40:67:df:
6d:fc:82:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org