Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/o7_NOoJYNvndIvvacW-tJ_grxpk.roa
File: o7_NOoJYNvndIvvacW-tJ_grxpk.roa (raw, json)
Hash identifier: 9GtqtxkWaFWu+U6uIzYYSdkcY353pXE1qHPqd7r8RuU=
Subject key identifier: A3:BF:CD:3A:82:58:36:F9:DD:22:FB:DA:71:6F:AD:27:F8:2B:C6:99
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 018534AC6398CDEF1C1852B7CC6EB6A6A65A
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/o7_NOoJYNvndIvvacW-tJ_grxpk.roa
Signing time: Wed 21 Dec 2022 12:33:10 +0000
ROA not before: Wed 21 Dec 2022 12:33:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57935
IP address blocks: 141.11.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:34:ac:63:98:cd:ef:1c:18:52:b7:cc:6e:b6:a6:a6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Dec 21 12:33:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3bfcd3a825836f9dd22fbda716fad27f82bc699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a5:23:ef:04:e3:77:2d:d7:f6:10:80:8e:7b:
16:d9:a5:1b:18:71:a5:3b:ac:59:cd:7e:f7:e4:20:
98:27:4d:c2:1f:46:e6:47:52:a7:d7:fe:40:cc:0e:
f8:7f:59:09:6c:31:0c:e9:d1:c5:47:4e:29:59:70:
22:ed:f9:3a:cd:91:5d:4e:aa:3f:5b:9e:79:b9:56:
17:9b:79:26:6e:93:ca:59:b2:61:b8:06:df:8b:dd:
66:55:31:67:62:ba:8e:6c:d8:1a:cc:78:10:ce:76:
bb:af:e7:92:e1:d9:6d:e6:20:3d:87:da:40:85:e3:
23:3c:ac:e9:9b:cb:50:d2:1d:49:ab:e3:11:52:da:
06:8c:14:c2:18:13:68:6b:ce:17:d9:62:f0:99:f5:
9f:77:44:0b:53:b1:95:5e:c9:69:44:82:c7:69:ea:
f7:f8:1c:7d:5f:bc:fa:45:78:d5:8b:63:d1:18:86:
d0:a6:37:fb:da:12:76:03:d2:d9:e8:fc:a4:02:5c:
e7:82:92:50:cf:9c:c0:a8:48:86:7b:81:c7:b9:5d:
18:7f:03:8f:3c:50:9c:67:05:78:f0:ec:ec:e5:85:
a1:fd:e8:80:db:6f:06:51:6a:29:05:20:8a:8f:81:
8e:2e:07:55:5f:b8:0d:a3:d2:57:b4:b3:da:d6:28:
e6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BF:CD:3A:82:58:36:F9:DD:22:FB:DA:71:6F:AD:27:F8:2B:C6:99
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/o7_NOoJYNvndIvvacW-tJ_grxpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.120.0/24
Signature Algorithm: sha256WithRSAEncryption
11:3d:91:b0:9a:b5:0a:c2:92:ff:d9:0d:5c:37:11:81:78:8e:
85:5b:67:f9:81:16:3b:2e:9e:14:ae:1c:de:32:09:d7:c6:59:
f7:d9:4e:e6:fa:2c:91:04:a6:4a:14:87:1c:e6:34:ef:77:40:
10:ce:da:e9:5d:cc:c4:e3:96:b2:35:3a:62:c5:e3:42:34:4e:
c9:58:2c:ad:60:ed:bc:e0:54:5a:c3:49:6d:34:d2:04:db:62:
a9:00:7c:45:0c:70:09:a4:d6:13:fa:7c:a5:d6:c6:16:40:4b:
7a:84:74:a2:e5:a4:5f:78:0f:d3:48:74:e3:66:fb:b1:8e:02:
d0:a2:58:af:9e:5d:ba:90:71:6c:b1:25:4d:e7:26:70:0d:25:
7e:36:a7:5c:8e:c5:17:dc:15:e7:c4:55:e2:46:b3:fe:f1:b0:
91:61:d0:4b:00:58:cb:ba:89:07:0a:08:05:ee:f5:b1:f4:c9:
2f:31:34:63:49:9c:d4:a8:d3:a2:99:93:90:2f:d8:86:81:a6:
eb:e2:71:a3:ba:d9:89:37:8e:11:41:a2:62:0f:5f:22:ca:09:
40:1f:e6:64:8a:09:bb:71:ac:5e:d4:a8:69:f0:6a:11:56:1b:
d0:60:aa:98:fc:e0:b8:f9:03:61:8d:12:68:30:97:87:9c:29:
c8:51:f9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:53 2024 by rpki-client on console-fra.rpki-client.org