Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/I5e1VpPF28LH0vp9pMtITze5W-0.roa
File: I5e1VpPF28LH0vp9pMtITze5W-0.roa (raw, json)
Hash identifier: GMKmyrVFa5yfLa2mPWyUxewonFgupsmjT57h9MQWapk=
Subject key identifier: 23:97:B5:56:93:C5:DB:C2:C7:D2:FA:7D:A4:CB:48:4F:37:B9:5B:ED
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0557FC60
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/I5e1VpPF28LH0vp9pMtITze5W-0.roa
Signing time: Mon 04 Jul 2022 11:24:25 +0000
ROA not before: Mon 04 Jul 2022 11:24:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 141.11.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89652320 (0x557fc60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 4 11:24:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2397b55693c5dbc2c7d2fa7da4cb484f37b95bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:c0:98:6b:c4:16:3e:74:db:94:d1:d1:e9:
93:d6:b7:2a:f3:62:ae:ab:b9:d4:a3:ca:32:87:3a:
53:c8:53:b5:df:fe:99:1d:a6:0e:3b:8f:f9:e7:e6:
67:93:fb:d2:f0:34:3c:4b:e1:d4:39:6a:ad:db:be:
9b:cc:ef:e0:a7:51:db:66:e4:e8:37:b1:d4:fb:b5:
ea:42:6a:8d:ef:04:b9:58:3b:3e:c3:18:87:1c:af:
30:1e:46:4b:82:52:83:8c:08:9d:b1:59:ce:3f:d2:
9a:cf:d3:d4:ef:16:7e:b6:6b:81:cb:1b:4d:c4:ae:
48:c1:da:07:30:89:54:f0:4c:7f:b2:89:d3:a1:aa:
5a:92:9c:91:a5:59:71:96:1a:aa:39:d0:33:0b:f5:
d2:a1:82:f3:72:43:ea:84:6d:5f:9a:46:48:2a:7c:
49:bc:72:ca:54:e2:27:56:04:00:6a:94:88:cf:0f:
c5:b3:dd:22:db:66:37:12:56:03:01:7a:3c:32:4e:
70:3c:09:d8:32:d1:62:43:0a:33:90:fd:88:09:c7:
39:e1:de:78:50:e9:fa:bb:da:20:08:c8:a1:81:96:
cb:f7:c7:f1:b9:85:0f:c7:34:1b:f2:ce:9d:e7:90:
4a:e4:f7:df:9d:69:52:31:d3:17:db:64:a9:46:69:
23:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:97:B5:56:93:C5:DB:C2:C7:D2:FA:7D:A4:CB:48:4F:37:B9:5B:ED
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/I5e1VpPF28LH0vp9pMtITze5W-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.189.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ad:36:4a:dc:75:b9:ff:9d:93:28:1f:8b:8e:9e:b1:dc:03:
d3:01:93:3f:28:9d:8e:c4:7c:d7:fe:76:a3:24:0e:96:8a:95:
2d:59:61:6f:e2:10:7d:0b:35:b9:d3:35:93:62:ad:ad:cc:73:
46:80:45:9b:ec:65:98:04:2f:c8:34:51:97:00:b6:10:26:72:
d7:4c:74:ef:a0:7a:34:bb:c2:ca:07:5e:76:a9:c6:ca:d0:fb:
fb:4b:e6:e9:37:da:94:c6:6e:1e:bb:83:3a:06:30:8e:3c:3c:
04:e3:fd:0e:c7:26:5a:88:71:0c:cc:10:b8:5d:45:32:83:32:
e3:57:c4:9b:c1:c1:51:b4:50:b9:a7:65:23:56:cd:fc:d4:46:
49:49:7e:cf:10:8d:22:b9:9f:1f:5d:2d:11:c2:19:00:ec:7d:
17:84:5d:44:6a:a9:76:bf:94:df:74:e5:d8:d9:42:92:78:9c:
4f:8c:d9:00:07:5f:c0:0b:ee:6f:54:eb:fc:4c:e1:17:80:f6:
cd:ab:9e:99:ca:52:2e:57:c0:ca:f9:1e:b4:57:06:2a:d8:a3:
3f:6a:46:48:39:a3:d0:be:97:ae:a7:76:07:77:d8:d4:a8:77:
bd:1d:92:06:ad:cd:4c:a7:dc:53:5a:cb:c3:1c:04:e4:7f:df:
c0:fd:c0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:56 2023 by rpki-client on console.sobornost.net