Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Y3DL0K1hRZxo0u3zC1cU5WMM9yc.roa
File: Y3DL0K1hRZxo0u3zC1cU5WMM9yc.roa (raw, json)
Hash identifier: zV6yYeV2cx9YNwdapt/WuwVc6ARXVwohMW+wmxP3yiQ=
Subject key identifier: 63:70:CB:D0:AD:61:45:9C:68:D2:ED:F3:0B:57:14:E5:63:0C:F7:27
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 03CDC849
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Y3DL0K1hRZxo0u3zC1cU5WMM9yc.roa
Signing time: Mon 11 Apr 2022 12:51:41 +0000
ROA not before: Mon 11 Apr 2022 12:51:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19853
IP address blocks: 141.11.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63817801 (0x3cdc849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 11 12:51:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6370cbd0ad61459c68d2edf30b5714e5630cf727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b4:c6:27:d2:1c:84:c8:de:35:72:b4:e5:0d:
26:d4:4f:23:98:d8:1b:1a:1f:e9:d0:7b:a9:44:90:
63:2d:a2:9b:77:0f:0c:db:4e:61:61:9b:f1:00:bf:
99:f5:fd:19:dd:3a:55:80:62:89:cb:fc:75:bd:3b:
26:45:25:3d:7c:e1:17:eb:fe:c2:2d:3b:0f:73:bc:
b6:9d:d9:23:24:33:55:bd:65:ac:12:bc:92:29:c4:
b7:80:2a:dd:3f:88:e9:90:9b:47:f5:bb:b3:1b:22:
d4:5a:90:c7:64:ff:ec:09:96:2f:be:9f:86:6b:c8:
5e:32:3d:16:7c:2c:a0:8f:34:ba:31:57:00:36:8f:
82:b6:42:ec:fa:26:46:c9:3b:26:4d:b5:49:8e:33:
7a:d4:c8:74:a9:d8:7a:8a:1c:76:72:38:68:0e:8a:
e8:a0:6e:02:7d:c0:d1:c2:c7:30:d5:95:17:fc:bc:
97:60:30:75:f4:bd:13:c5:26:f6:4d:80:90:b2:7d:
3e:ae:d7:d6:d8:2e:63:96:7d:df:92:d8:53:de:23:
69:b7:5b:f7:a2:95:3f:6c:86:01:e6:68:09:fe:16:
68:29:44:5d:77:01:97:77:a6:35:8d:90:dd:a5:86:
62:f6:59:49:9d:29:d7:81:4e:10:78:b5:cb:a0:9c:
36:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:70:CB:D0:AD:61:45:9C:68:D2:ED:F3:0B:57:14:E5:63:0C:F7:27
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Y3DL0K1hRZxo0u3zC1cU5WMM9yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.122.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:32:35:71:36:45:1c:1b:c8:a0:ad:6c:2d:1a:12:b1:13:f3:
e9:dc:5a:6c:7e:37:be:4c:51:ee:ab:cc:6b:7f:7a:20:47:37:
c1:89:7b:bf:d6:67:e5:04:e2:d1:35:13:b3:f7:40:7a:ff:bd:
66:9f:1b:98:9f:82:d8:d9:cd:f9:1e:1c:8a:f9:84:69:8a:84:
d9:9e:68:d5:5a:6d:1a:b1:13:33:e9:63:58:a0:d1:54:be:28:
d5:08:27:62:6d:6b:c7:cc:2d:d6:4c:a5:2b:de:1d:21:1c:22:
13:95:ee:1f:7f:68:de:c6:0b:f3:1c:36:3b:df:f4:d9:d2:b6:
ef:a3:52:b7:fa:a3:20:d0:21:3a:c6:5d:ad:5a:b4:9b:07:3e:
60:7e:cc:2f:99:da:68:8e:3a:45:65:37:38:f9:b7:07:0c:37:
c0:b8:4d:68:cd:45:60:8d:44:e9:4b:6e:7b:61:b0:b8:5f:ab:
0c:55:2b:cc:3a:4f:af:50:b7:d4:4d:64:8d:fa:7b:8b:05:b5:
55:79:b6:7a:02:f6:02:58:0e:fe:bc:85:0a:b4:9c:5b:2a:6e:
92:f0:34:ce:a8:c5:5a:e6:6b:95:cc:d5:9c:c7:75:e5:58:d9:
4a:82:42:32:50:9a:43:64:6f:e0:00:e3:6e:4d:11:10:e1:90:
55:95:01:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:56 2023 by rpki-client on console.sobornost.net