Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/dHJXSF1C1nvYXxsoOissrQucPrQ.roa
File: dHJXSF1C1nvYXxsoOissrQucPrQ.roa (raw, json)
Hash identifier: TjcBH9Dafg7yN+5UtN6sABsgEm1kjhC1RGhvdVdfzUg=
Subject key identifier: 74:72:57:48:5D:42:D6:7B:D8:5F:1B:28:3A:2B:2C:AD:0B:9C:3E:B4
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04867574
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/dHJXSF1C1nvYXxsoOissrQucPrQ.roa
Signing time: Tue 10 May 2022 10:13:02 +0000
ROA not before: Tue 10 May 2022 10:13:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 141.11.240.0/22 maxlen: 24
141.11.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75920756 (0x4867574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 10 10:13:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=747257485d42d67bd85f1b283a2b2cad0b9c3eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b6:50:ee:cc:b8:62:ce:bf:9d:58:c8:a2:86:
d5:57:a5:bd:f7:81:fd:13:c7:8c:3b:1f:99:c1:6d:
64:4d:8e:20:f8:a8:c3:e7:0f:6e:8b:50:80:42:e7:
3b:b4:a5:9f:04:e0:7d:b7:15:89:12:aa:61:d0:a8:
a2:94:e9:ce:53:24:73:e3:36:ea:da:96:d7:02:16:
2a:48:6d:04:cd:a4:62:51:f1:36:35:69:bd:31:c3:
8e:96:7a:69:1b:98:d0:df:f5:b5:f6:02:cf:6f:b9:
39:76:6c:de:9f:78:2f:00:40:9f:57:49:91:93:61:
85:2d:fd:2e:b4:51:37:34:38:08:b6:f6:70:fd:5a:
ba:31:77:d9:3b:d1:4d:97:8d:88:5e:f0:cf:25:c3:
c3:fc:00:e1:38:0e:0b:da:f9:4b:0c:dc:e0:5a:e5:
47:09:e6:b1:47:37:89:ca:ca:a3:69:68:23:c2:87:
57:68:c4:b0:58:69:00:c9:83:81:b1:28:18:dc:91:
b1:4d:54:aa:77:58:ca:31:6d:ac:57:31:55:16:fc:
7c:2d:83:93:af:90:29:93:46:57:3a:78:6f:f7:47:
e6:ba:80:a4:75:1b:27:33:ea:bf:82:f3:e6:c7:a0:
20:bf:34:fb:55:f4:29:3e:a0:7a:b2:a4:22:42:27:
8f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:72:57:48:5D:42:D6:7B:D8:5F:1B:28:3A:2B:2C:AD:0B:9C:3E:B4
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/dHJXSF1C1nvYXxsoOissrQucPrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.240.0/22
141.11.248.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:65:9e:8e:32:e1:6a:3e:32:ea:c5:31:f5:ad:45:45:41:e8:
a7:87:c7:d7:6d:9c:b1:a3:90:2d:5d:f2:b2:11:50:cb:b1:63:
c1:ec:3f:3f:41:9f:fd:e4:d4:aa:fb:00:76:34:4d:e2:61:91:
44:6d:d9:34:06:05:8f:2f:b0:46:9a:bf:e4:85:6c:3f:f9:36:
af:1d:75:f2:7c:18:55:eb:89:3f:fb:fd:43:1a:a8:3f:6d:ae:
28:2a:16:e5:b6:e7:3c:1f:b8:89:49:59:a1:e8:59:ef:70:4c:
d0:f2:9e:5e:86:9c:fb:d3:90:0f:08:5a:c7:02:db:1f:af:32:
3b:da:8f:e9:49:25:ca:27:85:fa:33:25:9e:db:99:97:a4:4b:
4c:d1:a1:98:f1:96:10:a1:55:30:11:52:02:c9:3d:f6:93:f6:
fb:87:c9:35:09:32:4f:07:e6:6e:21:4d:c0:9f:7a:87:79:28:
1f:58:19:ba:d4:b1:1a:08:93:9d:be:8b:f3:1e:64:41:d3:30:
c5:e7:c1:53:5e:0c:f2:ca:2e:64:56:7f:df:2b:b1:55:a4:20:
e1:bc:a9:03:11:65:30:a9:c2:15:6b:14:07:f9:6a:4b:6d:41:
86:aa:2c:cf:97:95:c1:c5:32:73:c0:34:8b:62:e4:3e:7b:ba:
86:17:43:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:56 2023 by rpki-client on console.sobornost.net