Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/n8W6FsgCq6fbZWttBlY-I8LuRsE.roa
File: n8W6FsgCq6fbZWttBlY-I8LuRsE.roa (raw, json)
Hash identifier: DZOKpw46ckTT4y80XIBJ39WxkTkU7PKSa4NeV/Sl64k=
Subject key identifier: 9F:C5:BA:16:C8:02:AB:A7:DB:65:6B:6D:06:56:3E:23:C2:EE:46:C1
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 041575C3
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/n8W6FsgCq6fbZWttBlY-I8LuRsE.roa
Signing time: Fri 22 Apr 2022 09:51:52 +0000
ROA not before: Fri 22 Apr 2022 09:51:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210122
IP address blocks: 141.11.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68515267 (0x41575c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 22 09:51:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fc5ba16c802aba7db656b6d06563e23c2ee46c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cd:24:4a:78:b2:ce:27:f3:73:01:33:df:78:
3f:72:4c:4c:2d:6e:07:3c:b7:17:df:6e:19:09:2b:
75:8c:78:e7:e7:ff:c2:5a:36:e7:61:72:91:51:8d:
43:6b:f4:d9:04:f6:3f:a2:a9:9d:4b:21:85:b9:76:
d3:10:c1:19:b0:4d:81:e9:a0:6e:c4:84:dc:70:13:
f1:bc:9f:1f:aa:e0:3b:8c:ce:aa:68:51:0a:74:e8:
29:67:c3:0b:80:45:f5:7f:ed:ac:51:bf:b8:83:77:
cb:0a:08:2e:a1:f7:ce:64:e4:06:29:a8:12:ef:90:
4a:01:50:8b:47:9f:2a:cb:80:80:f3:b7:bc:b6:ae:
f8:b5:b9:a4:f1:f2:70:51:b6:98:ff:26:b5:44:42:
d0:c8:b9:12:af:89:87:01:cd:a6:15:90:ef:8f:93:
8d:f6:a9:d4:4e:78:2b:16:fc:87:e2:e0:dc:b0:64:
61:b2:43:47:1c:c7:7d:ae:86:31:74:eb:e5:09:b7:
f3:dc:46:78:fd:9a:de:20:1b:2b:8f:29:8a:3b:bd:
43:10:21:1f:8e:44:07:7c:bd:a1:fd:28:3e:a8:ca:
7b:2c:f0:22:e8:04:25:97:02:d4:d4:2b:5f:39:eb:
3f:38:71:fa:0c:67:70:05:2d:de:63:50:c1:62:b6:
c9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C5:BA:16:C8:02:AB:A7:DB:65:6B:6D:06:56:3E:23:C2:EE:46:C1
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/n8W6FsgCq6fbZWttBlY-I8LuRsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.99.0/24
Signature Algorithm: sha256WithRSAEncryption
34:8d:36:81:1d:87:fd:98:bb:72:c3:41:3e:7a:f7:a8:6d:0f:
be:df:ac:4a:52:c3:af:9d:3a:1f:8c:5a:68:77:18:47:49:32:
e9:a8:4a:45:12:0e:48:e4:98:e0:88:08:f1:93:38:f8:11:e8:
a0:29:9b:52:54:fc:7e:14:88:c9:de:f6:9c:2e:f1:fa:f8:d3:
35:98:a5:98:6d:26:b9:41:f4:5c:bb:87:9b:9b:49:68:2d:1b:
ce:c4:6e:4b:a0:b0:ac:42:91:f2:24:64:10:36:9d:9d:4f:c6:
bb:93:9e:0d:e9:21:07:a0:9f:91:96:de:a1:7c:8e:aa:e0:47:
0e:f9:f2:f6:30:61:5e:91:05:fe:30:c0:04:77:f4:4d:41:b8:
59:93:e3:c6:f4:29:a4:8c:31:ed:9c:b0:4b:21:73:e1:e2:cf:
c3:60:ff:02:db:fc:e9:5d:ab:4a:72:53:e5:33:53:1a:e2:98:
68:ba:5d:08:ac:51:a6:70:0f:0b:10:1b:4d:66:22:4b:e5:7a:
43:76:5e:c7:8d:13:84:2a:a3:3a:8d:07:20:8f:0c:63:69:30:
c0:fe:71:fb:91:fe:9d:fd:c7:ec:75:03:08:e4:24:f9:ed:44:
d8:51:5e:f6:f2:4b:6d:41:67:c9:56:d1:4c:fb:27:33:ed:52:
bb:4c:5d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org