Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/al7DQMVc1n_rtjROE27rDRZE7XQ.roa
File: al7DQMVc1n_rtjROE27rDRZE7XQ.roa (raw, json)
Hash identifier: +7WAf4BzNyuy/C9224QWyRP0fu2fSeMwh5cgtsva/tY=
Subject key identifier: 6A:5E:C3:40:C5:5C:D6:7F:EB:B6:34:4E:13:6E:EB:0D:16:44:ED:74
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01845D3BB12C5D6B720925BBA01FF6FCEA05
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/al7DQMVc1n_rtjROE27rDRZE7XQ.roa
Signing time: Wed 09 Nov 2022 16:31:43 +0000
ROA not before: Wed 09 Nov 2022 16:31:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 141.11.70.0/24 maxlen: 24
141.11.80.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5d:3b:b1:2c:5d:6b:72:09:25:bb:a0:1f:f6:fc:ea:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 9 16:31:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a5ec340c55cd67febb6344e136eeb0d1644ed74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3b:41:e9:80:1f:01:d9:a5:2d:89:7d:4f:2e:
54:23:81:6e:b1:17:bc:73:6f:80:8e:07:46:33:7c:
49:36:f2:19:31:a4:05:4f:8c:39:46:0d:1e:25:40:
85:ea:9f:c9:d5:f5:cf:8b:ba:8a:39:62:d8:35:d3:
37:31:8d:5b:7a:4d:aa:8b:cb:1f:f5:fb:d2:9e:20:
d7:84:63:8a:e5:b8:5e:30:2b:ca:9c:0c:6b:8a:f6:
ef:ca:7b:25:e5:6b:c7:c4:c8:41:49:4d:67:c0:28:
52:6d:64:24:36:c3:83:62:22:2e:af:c4:c6:3d:d4:
ea:c6:e0:fd:d0:b1:f1:a6:32:91:78:6e:94:c2:55:
4c:97:2b:db:2e:12:e8:e5:e7:2b:4d:44:31:28:a8:
70:43:d7:0f:ef:f4:29:06:42:c1:53:1d:bd:c3:4c:
d8:d2:44:f9:16:12:65:81:08:74:de:9b:b0:9f:19:
e0:29:cd:87:1e:9e:be:da:4c:57:fe:c4:41:ac:68:
4e:5e:d4:73:0a:7b:5c:e7:3f:d2:74:e3:73:12:ac:
f5:94:a2:96:0d:8e:ab:b3:10:f1:a9:e5:b0:d1:e9:
09:a6:9a:58:8b:55:03:ab:47:fe:29:b8:97:4e:ef:
50:4e:e2:d5:7c:01:c3:ef:e9:f6:9c:93:f6:d0:4a:
11:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5E:C3:40:C5:5C:D6:7F:EB:B6:34:4E:13:6E:EB:0D:16:44:ED:74
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/al7DQMVc1n_rtjROE27rDRZE7XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.70.0/24
141.11.80.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:57:96:7f:ec:cd:1b:1b:c1:41:8f:04:b2:f9:ce:ef:7c:32:
21:33:33:80:eb:59:0c:52:cb:34:6b:73:06:43:ef:ac:5d:44:
59:75:79:a9:d6:f2:d7:50:af:be:f3:00:3b:a4:8c:62:46:6e:
4b:72:ec:76:20:26:50:7e:a7:a3:90:36:10:34:4d:cb:85:18:
35:f3:75:84:39:5a:26:94:09:8d:3e:bd:56:ec:57:a1:ba:96:
18:a7:a0:8a:7b:6b:78:cd:eb:d1:bf:73:28:bd:4d:2a:a3:20:
92:23:26:1a:9d:8a:d7:54:99:76:8e:6d:fe:1a:f3:99:54:f3:
91:e0:6b:ae:94:37:cc:92:1f:59:b6:80:d9:c4:64:6a:5b:33:
37:f7:c0:d0:fb:27:8e:97:57:53:b8:dc:1a:a1:cf:2a:93:3d:
60:e5:87:7a:d6:7d:90:88:22:bb:0d:97:e8:30:92:38:af:1f:
bc:61:ea:2a:80:37:c8:4d:43:00:8a:b3:b6:c4:da:07:8e:34:
4f:2f:cd:57:c9:d2:a5:3f:7f:66:66:05:45:a7:e2:d7:94:d4:
2d:a5:c1:fe:dd:44:57:ce:33:9d:de:81:6a:c1:c1:a9:6d:fa:
1b:6e:74:ea:34:2b:76:cf:ff:51:a5:2b:bf:b0:78:a4:55:47:
40:cb:66:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:56 2023 by rpki-client on console.sobornost.net