Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/kexBm7JlclETv7FScT_RLBB8PuU.roa
File: kexBm7JlclETv7FScT_RLBB8PuU.roa (raw, json)
Hash identifier: 3Wsp/QkbpVlvFAcMVPbGSeOLHFkIj9+7RtlvS2b0+xA=
Subject key identifier: 91:EC:41:9B:B2:65:72:51:13:BF:B1:52:71:3F:D1:2C:10:7C:3E:E5
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04AD94A9
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/kexBm7JlclETv7FScT_RLBB8PuU.roa
Signing time: Tue 17 May 2022 10:04:30 +0000
ROA not before: Tue 17 May 2022 10:04:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 141.11.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78484649 (0x4ad94a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 17 10:04:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91ec419bb265725113bfb152713fd12c107c3ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:02:83:16:ec:bd:fb:d3:6c:f8:f1:93:77:c6:
62:a1:95:e1:19:78:2a:f8:f6:4b:8e:8a:65:4e:e3:
62:41:e4:3c:42:95:5b:5c:f6:bb:6d:b2:ba:38:2e:
a9:93:76:06:3d:bf:53:f8:8d:55:f6:92:57:67:81:
7d:a9:eb:b8:32:47:20:3e:12:07:d7:98:4e:30:cf:
de:d4:f1:78:01:9c:77:fa:02:c0:3a:be:20:d0:3b:
40:32:8f:76:cb:d6:7f:1b:d5:9d:03:32:b4:a5:4c:
f7:44:d5:96:78:3b:ba:f1:89:73:45:f6:78:d8:b0:
2b:e3:ee:c6:27:c5:0c:b3:26:28:4e:c8:ac:fe:5c:
dc:d2:e6:f9:c9:5e:7b:d0:5d:d3:92:fc:cf:8d:16:
b4:a0:f4:20:d5:7e:94:07:5f:7d:a8:05:51:4e:01:
2d:54:4c:55:fb:75:3f:25:20:db:7e:7c:7e:3b:88:
0c:27:07:cf:dc:45:71:b1:c6:43:0e:cf:f7:84:ad:
c8:a6:83:8e:03:52:18:dc:82:37:1d:51:a0:3b:d8:
49:06:29:91:30:be:6c:16:a3:d7:0b:af:46:2b:2a:
05:0f:f5:07:08:29:9a:34:25:e1:e9:4e:3a:02:f0:
09:74:38:3d:cc:ce:dd:d5:fc:e6:1d:d3:62:18:a3:
8e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EC:41:9B:B2:65:72:51:13:BF:B1:52:71:3F:D1:2C:10:7C:3E:E5
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/kexBm7JlclETv7FScT_RLBB8PuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.16.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a5:3d:86:b2:ae:5a:86:62:31:80:47:8c:fb:66:d9:3e:25:
d6:5e:7d:51:4b:75:90:f3:c4:03:6f:43:a7:de:95:a1:04:9d:
69:b0:ad:4a:9a:2b:aa:a8:92:e7:9f:63:2a:15:69:f5:b1:a1:
48:82:f9:06:58:06:b8:e7:9f:40:81:2f:3b:3b:5f:24:2f:cd:
7e:9d:7e:37:00:95:27:6b:64:d5:ca:3a:c9:a3:1b:6b:ab:0f:
3f:9f:24:e7:02:1d:d2:9e:45:20:14:75:62:56:f3:52:96:93:
2a:f9:01:d5:3b:eb:91:28:5a:f3:f6:b5:e0:27:87:a6:1e:40:
32:23:90:8c:4b:c7:6f:d8:0d:3a:59:e3:f1:28:46:42:73:25:
e6:db:c3:1c:e3:22:c7:24:c6:8a:8b:fb:5a:4d:20:9d:b5:9d:
17:2c:33:19:55:52:24:6d:ff:9e:39:47:b6:45:73:e4:89:8e:
59:f4:49:2b:10:72:44:ba:bc:a3:23:d3:04:5e:7f:1a:a5:fd:
cb:b0:d4:51:bf:03:4a:1c:f3:a5:66:37:1c:f1:ec:66:25:60:
c4:b7:ca:6b:bf:80:95:57:a8:3c:29:fe:0b:21:bd:e0:40:9c:
0c:99:97:eb:96:78:db:db:59:a7:72:3b:96:3c:37:ae:b6:8b:
15:d6:dc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:57 2023 by rpki-client on console.sobornost.net