Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/s3mmHh5umKBo8t1pAxDTcCj4u5w.roa
File: s3mmHh5umKBo8t1pAxDTcCj4u5w.roa (raw, json)
Hash identifier: VQxSFP8e0M1zHE5bdUiCFALIlwW7qPNw68hjC7K3scw=
Subject key identifier: B3:79:A6:1E:1E:6E:98:A0:68:F2:DD:69:03:10:D3:70:28:F8:BB:9C
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01838E3B35BBC8A7992AD7BCC8BC05368717
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/s3mmHh5umKBo8t1pAxDTcCj4u5w.roa
Signing time: Fri 30 Sep 2022 11:49:48 +0000
ROA not before: Fri 30 Sep 2022 11:49:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210439
IP address blocks: 141.11.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8e:3b:35:bb:c8:a7:99:2a:d7:bc:c8:bc:05:36:87:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 30 11:49:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b379a61e1e6e98a068f2dd690310d37028f8bb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:60:eb:d3:49:ee:13:b5:87:10:66:5b:27:48:
ca:01:06:84:cc:22:30:82:40:27:04:a5:87:9a:8b:
a9:23:8a:c2:0e:27:99:16:e5:1d:84:e1:49:96:7d:
7b:55:6e:70:3d:72:ad:b6:d9:5f:07:9a:86:b4:f2:
25:c4:0c:99:fb:20:ad:2f:8d:78:dc:34:97:0d:ff:
f0:f0:7a:67:06:e7:ad:39:c4:7d:91:26:91:f9:b5:
2e:cd:e2:e5:7c:42:ec:99:e5:ce:68:8c:80:4f:cf:
7b:3f:51:4f:c0:fe:4b:a5:25:87:fe:ed:e6:04:bd:
aa:7d:ca:d0:ad:c4:b7:73:66:86:9c:0e:13:8e:70:
f8:33:3f:e6:1f:50:3b:eb:69:48:ec:a7:84:e6:35:
dd:01:16:90:b1:07:49:5e:1e:3e:97:dd:21:cc:85:
9d:85:6c:35:a0:4b:a4:90:58:29:f6:19:40:d0:f6:
9a:92:73:67:88:83:9c:7b:7e:50:2a:1c:e5:1c:c3:
1b:d4:13:68:f2:48:10:93:7a:05:5d:20:00:41:32:
e5:76:73:a1:3b:0f:7c:19:72:52:ab:60:60:67:ce:
46:e8:55:4f:99:02:ca:0b:44:3e:b6:a7:3e:1b:0d:
83:c0:3a:cd:1f:72:3c:b1:8a:c8:c1:5d:69:7a:77:
c2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:79:A6:1E:1E:6E:98:A0:68:F2:DD:69:03:10:D3:70:28:F8:BB:9C
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/s3mmHh5umKBo8t1pAxDTcCj4u5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.249.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:15:f7:ff:b7:66:dd:d1:23:72:9c:ab:e4:7e:9e:46:32:06:
78:f2:98:8e:06:70:77:47:8f:25:b3:03:71:9d:2f:ab:e7:61:
6e:d0:9a:d9:d9:36:01:69:2d:ec:dd:a8:00:8d:03:62:3e:60:
e2:46:4c:11:90:13:c4:06:bc:54:04:3f:33:c8:3a:26:04:7b:
da:dc:12:69:f2:9d:ce:fa:cb:2f:44:9b:49:89:5f:f1:9d:76:
8b:3d:b5:13:76:28:ce:f4:79:1f:e1:3b:78:8d:af:13:10:97:
4f:a9:c4:cb:cd:2d:15:12:e0:36:ad:4a:21:1e:66:af:a4:3d:
42:5c:e9:05:c1:bf:03:ea:3d:7e:ef:1e:5a:61:73:18:ff:20:
40:76:fc:f0:cd:88:16:33:ca:16:eb:b9:b3:da:5c:76:f4:0e:
a3:74:87:8c:90:41:09:19:e2:c2:50:16:46:11:5f:e9:82:d7:
8c:1d:4a:35:fb:89:f7:c8:9e:8b:9f:0f:77:de:1b:a4:d0:dc:
16:1f:bd:1f:fe:e5:eb:aa:cc:16:03:cf:c2:f3:f8:dc:c0:05:
77:33:8b:85:62:f7:fc:41:38:5b:64:3a:57:c2:74:a9:14:18:
20:e1:1c:c8:fb:bf:17:80:6d:e5:89:ea:09:76:49:fa:d0:e6:
5c:3d:68:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org