Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/1-8tVjaFftLqonF4qxAatYbO8Psw.roa
File: 1-8tVjaFftLqonF4qxAatYbO8Psw.roa (raw, json)
Hash identifier: ZbO7FGqt5hnqLmGCI9CV5sfe0Y3y9zL+50b5CGBWRWQ=
Subject key identifier: FB:CB:55:8D:A1:5F:B4:BA:A8:9C:5E:2A:C4:06:AD:61:B3:BC:3E:CC
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 02DD4248
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/1-8tVjaFftLqonF4qxAatYbO8Psw.roa
Signing time: Wed 02 Feb 2022 09:58:40 +0000
ROA not before: Wed 02 Feb 2022 09:58:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57416
IP address blocks: 141.11.160.0/24 maxlen: 24
141.11.161.0/24 maxlen: 24
141.11.178.0/24 maxlen: 24
141.11.177.0/24 maxlen: 24
141.11.4.0/24 maxlen: 24
141.11.5.0/24 maxlen: 24
141.11.30.0/24 maxlen: 24
141.11.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48054856 (0x2dd4248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Feb 2 09:58:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbcb558da15fb4baa89c5e2ac406ad61b3bc3ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f7:94:29:a6:56:cb:28:35:9c:6d:02:7f:ea:
4e:1f:1a:78:b7:ef:94:80:8e:85:6e:22:aa:0e:b3:
63:4f:03:1e:92:4f:22:49:3f:0b:61:16:0f:d2:4a:
b1:f7:2a:a1:c7:79:ef:32:3c:b1:18:cf:75:8d:aa:
e3:5c:2d:7a:0a:f5:41:e7:9f:64:07:0e:21:f7:73:
d3:1b:68:13:91:3c:fe:d5:39:96:60:44:d7:fa:a9:
f8:b1:9e:65:be:e3:2b:6a:fa:4a:47:14:82:3b:4b:
de:ce:ad:09:17:7d:12:03:a0:f4:4c:bf:e6:b1:6e:
e8:ad:43:b1:a5:97:bf:10:6c:a7:b4:fb:03:f1:84:
71:23:a7:5b:42:27:2b:7e:2c:ae:49:ab:a0:85:5c:
cd:4e:ee:06:54:3f:6b:9f:b6:4c:56:71:14:01:d0:
61:10:b4:92:54:35:e2:b7:9b:b3:df:d7:9b:4b:39:
ae:bb:d3:2b:f8:c3:27:80:97:67:c3:37:94:cd:5a:
fc:1b:cc:e6:59:24:3b:e7:e8:d2:33:b9:a2:fc:a5:
ec:4e:1e:45:a9:c9:fc:d5:47:c2:63:11:00:3a:b4:
03:8f:7b:7a:22:77:e5:1d:c4:df:be:b7:3c:0b:f7:
29:94:53:c6:1a:93:2c:f2:f7:d0:bc:65:3b:be:59:
52:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CB:55:8D:A1:5F:B4:BA:A8:9C:5E:2A:C4:06:AD:61:B3:BC:3E:CC
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/1-8tVjaFftLqonF4qxAatYbO8Psw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.4.0/23
141.11.27.0/24
141.11.30.0/24
141.11.160.0/23
141.11.177.0-141.11.178.255
Signature Algorithm: sha256WithRSAEncryption
58:a2:89:fb:80:93:51:ed:a9:d7:e6:44:6a:78:eb:0f:7b:72:
ca:31:c4:94:d4:d9:bb:25:e8:33:3a:6a:aa:1a:99:f9:2f:8d:
18:af:7e:ae:a2:c9:ef:69:99:e9:63:33:39:88:5b:33:e6:f2:
31:a0:51:20:be:f2:00:04:87:9e:2c:06:a2:3b:df:c8:3f:b3:
c1:61:8e:1b:50:e6:c6:a2:74:08:0d:ad:e5:2f:e9:bc:34:60:
23:eb:5f:be:73:10:42:d4:85:39:df:b4:6c:66:0f:9e:7f:d2:
be:39:ec:3b:02:71:84:bd:fe:61:da:1b:86:bf:66:88:16:46:
a2:05:84:59:48:65:42:23:ce:6d:b9:f1:bc:70:85:02:c2:96:
9c:1c:ab:f8:db:ea:49:6f:e6:c4:ee:f3:24:6f:6a:2e:f1:b2:
e9:e8:f3:26:6f:4a:b9:8c:93:26:17:c2:2c:82:5a:44:5e:33:
0d:4c:71:ad:10:88:9d:7d:61:1c:82:18:5f:a8:ba:40:51:01:
3e:bd:5c:15:b8:84:e6:29:97:07:ef:ba:ad:cf:6e:e0:5d:95:
fd:03:e7:86:03:ee:b2:ca:28:3c:7f:2f:f3:30:ad:96:6a:ae:
b6:4b:dd:c7:e7:d5:fa:e3:6d:ff:a3:f3:a7:c9:72:b9:fe:2e:
d2:88:88:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:09 2023 by rpki-client on console-ams.rpki-client.org