Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/tohtckt-fVYEzFjltvdLpFEpI4c.roa
File: tohtckt-fVYEzFjltvdLpFEpI4c.roa (raw, json)
Hash identifier: BBHfiig8ErX8IDNw9PST/ffu82yovpAbNt2wZ6euq30=
Subject key identifier: B6:88:6D:72:4B:7E:7D:56:04:CC:58:E5:B6:F7:4B:A4:51:29:23:87
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0293B16C
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/tohtckt-fVYEzFjltvdLpFEpI4c.roa
Signing time: Sat 08 Jan 2022 18:40:35 +0000
ROA not before: Sat 08 Jan 2022 18:40:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 141.11.97.0/24 maxlen: 24
141.11.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43233644 (0x293b16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jan 8 18:40:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6886d724b7e7d5604cc58e5b6f74ba451292387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a3:49:58:86:00:da:16:f5:9c:0b:2d:a8:df:
61:49:0e:d8:73:f1:f9:67:27:65:98:77:78:56:63:
8b:85:64:bc:8e:bc:aa:52:e8:c3:58:a8:4e:ee:e0:
07:ee:d7:dc:ca:f6:7c:56:96:3c:f2:3d:b2:4c:2a:
a6:f2:b0:1c:c2:af:79:8c:c9:78:10:db:37:3e:98:
2f:ef:a9:27:7d:9a:71:73:10:8d:ff:20:de:fd:39:
15:c7:8e:6d:73:d6:f9:9e:2e:3b:f7:4a:06:da:b1:
7b:5d:1a:91:53:40:f0:4d:c3:02:d7:06:39:0b:5f:
f7:2d:2d:04:65:71:3c:cf:6d:cb:70:db:c2:b0:55:
88:f9:b7:45:e8:c7:5f:88:74:10:de:15:da:42:4f:
cb:de:cb:52:c3:89:e4:73:2f:5c:5b:b6:c0:4a:d5:
79:27:86:0e:1b:20:e3:e8:46:b9:3e:e6:81:47:4a:
be:0e:a9:9a:63:72:fe:8e:f8:35:e6:11:fe:1b:dd:
0d:b4:72:96:ef:f2:0e:d0:3a:a7:a2:08:97:68:8f:
45:c8:78:29:7f:27:89:79:97:29:ad:41:98:a4:81:
51:3d:82:00:be:0a:98:4b:b1:2a:4e:56:16:c4:89:
51:a9:24:03:23:e3:54:ac:f0:67:89:00:00:e4:f0:
e4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:88:6D:72:4B:7E:7D:56:04:CC:58:E5:B6:F7:4B:A4:51:29:23:87
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/tohtckt-fVYEzFjltvdLpFEpI4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.7.0/24
141.11.97.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a3:c6:89:b5:f9:d6:5f:93:4c:9c:26:54:c0:b6:1a:d7:24:
1e:3c:c7:15:71:12:62:b8:08:ad:8d:12:d4:2c:74:e5:47:6d:
09:4f:fc:9b:8d:32:26:97:23:ef:24:2f:3a:c9:05:3d:1b:91:
25:45:10:92:f9:0c:5a:db:dd:70:bd:4d:7e:01:8a:0b:f7:8b:
44:82:51:8a:7e:b8:57:fb:84:42:0e:4e:1a:2f:c7:1e:82:85:
47:7b:84:b8:a6:d4:c3:f4:7b:23:94:86:0f:ce:b9:8d:09:c1:
f8:ac:87:2f:f7:cc:8c:62:fe:99:b2:3c:b1:65:97:60:24:1f:
cd:c5:e9:d8:19:f3:63:3c:cc:b1:c1:d7:d1:cf:b6:33:fc:0c:
dd:a3:d1:95:03:dc:20:49:4c:54:c1:f9:d9:69:4f:cc:39:ce:
24:2e:87:89:26:8b:b3:24:72:4d:43:65:c6:01:37:82:0f:f3:
9e:38:04:d9:74:b7:e7:85:6c:1d:c5:5e:58:f9:83:f9:8e:8c:
70:99:e6:32:34:95:5f:52:2b:2d:4e:20:70:58:c6:4a:29:f8:
2e:dc:b7:1c:78:cb:81:16:cb:9c:eb:e7:d4:b1:29:d6:f1:8e:
ae:36:80:c9:c3:33:e7:02:83:2a:25:25:94:e0:82:cc:14:1a:
9b:18:2c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:54 2024 by rpki-client on console-fra.rpki-client.org