Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/0iXGfUUKCatV9PnFjV7_m6z_hT4.roa
File: 0iXGfUUKCatV9PnFjV7_m6z_hT4.roa (raw, json)
Hash identifier: xMASuADoxTJMJYGFemOX5T0VjqU/bv5tIac8cl0+s/0=
Subject key identifier: D2:25:C6:7D:45:0A:09:AB:55:F4:F9:C5:8D:5E:FF:9B:AC:FF:85:3E
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 031BCAEE
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/0iXGfUUKCatV9PnFjV7_m6z_hT4.roa
Signing time: Thu 17 Feb 2022 21:10:44 +0000
ROA not before: Thu 17 Feb 2022 21:10:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 141.11.17.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52153070 (0x31bcaee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Feb 17 21:10:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d225c67d450a09ab55f4f9c58d5eff9bacff853e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ba:b4:1d:3f:25:e7:95:1d:d8:39:8d:2d:47:
9f:6f:18:6f:1b:4b:20:8d:99:68:8a:f0:bf:fe:98:
c0:4e:ae:2e:c6:91:e6:84:ef:93:e6:84:77:a4:31:
96:6e:a1:1a:fe:c2:77:f5:54:46:5e:0a:bf:47:58:
9b:79:84:06:cc:a5:f7:72:70:89:f1:c3:0a:47:d6:
c8:1f:68:c9:b1:3a:32:d1:00:4d:92:91:2a:22:9b:
e1:b0:d7:f8:f9:bf:0b:59:27:ac:3f:ac:68:29:9b:
e5:c4:62:fe:47:e6:09:7d:a2:fb:cf:0a:90:5e:50:
ec:13:31:fc:25:b5:51:33:fb:09:fa:e6:9c:91:72:
f7:ec:54:e3:11:0e:61:88:4a:2a:d0:82:b2:f8:5c:
1f:b5:fd:ec:39:b3:c2:c9:8c:34:d4:35:8f:b8:2c:
16:34:c1:33:58:b5:de:f3:4c:b9:06:17:73:90:ff:
7d:80:1a:c8:4a:2a:46:ec:37:bc:fb:55:69:a8:d4:
1a:c9:00:6a:59:94:2b:f1:65:c9:28:dc:c3:10:7d:
32:f2:e6:55:0e:48:f8:bd:24:83:8d:7a:ae:76:24:
69:d2:ec:25:bc:0e:02:66:5d:8c:86:82:c3:5e:35:
cd:f6:42:17:21:c2:76:a0:8e:b0:21:c3:5e:63:ea:
14:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:25:C6:7D:45:0A:09:AB:55:F4:F9:C5:8D:5E:FF:9B:AC:FF:85:3E
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/0iXGfUUKCatV9PnFjV7_m6z_hT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.17.0-141.11.18.255
141.11.247.0/24
Signature Algorithm: sha256WithRSAEncryption
45:0e:16:98:39:eb:fd:a4:bc:98:ea:98:cd:d9:05:bb:6a:15:
33:45:7d:0e:73:db:6a:81:22:df:c6:6d:c7:b3:26:a0:4d:1f:
78:f0:d4:1a:67:68:ff:cd:be:8a:dc:96:2f:66:e7:03:ff:07:
ac:a4:ba:7e:84:20:a2:ab:87:b5:fb:17:eb:27:cf:f5:96:7a:
d5:03:5b:19:c8:bd:42:7c:5f:04:7b:23:f9:8e:a8:61:64:30:
46:aa:cf:fb:27:b2:96:ee:4c:af:f8:56:33:68:18:63:db:68:
a7:ed:9f:76:0f:57:15:e5:46:18:9b:32:ee:e0:c9:e0:a6:ab:
9b:66:87:28:0b:ba:70:53:ba:db:83:fe:1c:19:23:72:5c:ad:
f2:2c:99:a0:65:19:e3:5e:0d:05:8a:2c:1c:25:90:1c:f9:2f:
b7:42:fd:11:41:f0:98:6a:4b:d2:b1:24:55:74:39:79:b0:b0:
71:77:f6:a0:72:73:bd:ab:b1:70:49:fc:23:e4:e7:82:89:68:
38:27:ac:b0:b0:6a:7d:fa:1b:6d:06:1d:87:f7:f9:5a:46:75:
51:22:98:d8:71:2a:47:db:9a:77:39:4d:d5:1f:33:bc:fd:90:
c8:3d:aa:16:75:1e:66:fc:0d:21:25:c4:87:0e:14:98:69:24:
cd:ef:c0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:56 2023 by rpki-client on console.sobornost.net