Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/1-FdzNrIgnbM_s9KSnwTr0PhC114.roa
File: 1-FdzNrIgnbM_s9KSnwTr0PhC114.roa (raw, json)
Hash identifier: 0h5C9j2WeIkL6x1YhWmFdJ15arpFN/LelcsTN1aik04=
Subject key identifier: F8:57:73:36:B2:20:9D:B3:3F:B3:D2:92:9F:04:EB:D0:F8:42:D7:5E
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0552D56D
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/1-FdzNrIgnbM_s9KSnwTr0PhC114.roa
Signing time: Sat 02 Jul 2022 11:16:49 +0000
ROA not before: Sat 02 Jul 2022 11:16:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 141.11.168.0/23 maxlen: 24
141.11.186.0/24 maxlen: 24
141.11.88.0/23 maxlen: 24
141.11.90.0/23 maxlen: 24
141.11.96.0/24 maxlen: 24
141.11.102.0/24 maxlen: 24
141.11.5.0/24 maxlen: 24
141.11.121.0/24 maxlen: 24
141.11.228.0/23 maxlen: 24
141.11.26.0/24 maxlen: 24
141.11.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89314669 (0x552d56d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 2 11:16:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8577336b2209db33fb3d2929f04ebd0f842d75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:30:cb:37:9d:7a:81:14:af:11:8f:b6:45:0c:
1b:91:2c:da:0b:a5:42:57:9b:8d:30:7f:bf:e9:de:
dd:a4:fc:eb:ab:dc:29:dc:47:db:f4:62:c8:4d:ab:
2f:47:66:1a:d9:cc:5c:11:99:67:df:5e:b4:49:fe:
41:a4:44:d8:6a:8c:bb:15:7e:f1:8c:af:18:12:cb:
37:4b:57:e3:89:37:71:b9:3b:88:d1:ec:2b:9f:58:
9d:0a:69:eb:15:cc:a2:0d:be:4a:b5:62:21:9f:a0:
fb:aa:4a:7a:82:cc:af:39:74:32:9e:4c:d6:ab:14:
fb:f6:06:20:61:32:fd:32:af:ea:6a:d6:48:91:a0:
ec:ea:03:a4:05:47:7b:74:5d:93:16:f8:bd:57:98:
5c:bb:ac:0d:4f:b0:95:88:33:e6:bf:f5:a1:ff:25:
ec:ae:21:03:0d:fa:93:2e:18:66:f2:6b:b0:15:7e:
92:74:c8:dd:35:9c:97:4a:ec:97:4a:c4:08:82:20:
c4:f9:91:25:38:03:fb:a0:3f:12:ec:76:4f:40:ec:
e4:8e:86:6d:1b:c3:78:16:21:c1:61:6f:ee:22:cf:
5e:19:d8:77:b2:ef:8c:7c:36:05:e0:13:81:20:23:
fe:94:6a:9b:60:8f:e8:58:72:a9:06:e7:4a:40:05:
1f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:57:73:36:B2:20:9D:B3:3F:B3:D2:92:9F:04:EB:D0:F8:42:D7:5E
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/1-FdzNrIgnbM_s9KSnwTr0PhC114.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
141.11.26.0/23
141.11.88.0/22
141.11.96.0/24
141.11.102.0/24
141.11.121.0/24
141.11.168.0/23
141.11.186.0/24
141.11.228.0/23
Signature Algorithm: sha256WithRSAEncryption
69:f9:da:0c:df:7a:f2:ad:e7:d2:cc:ee:35:d8:17:ca:69:19:
c0:af:fe:39:11:b5:1b:49:b4:9d:5e:ec:0d:79:9e:ab:bc:bb:
47:17:93:27:5c:cd:1d:5a:fc:b2:f5:49:ba:ef:16:79:0a:3c:
ee:19:8c:95:8f:50:19:c9:ea:69:7f:b4:e6:eb:9e:de:2b:e0:
0f:57:1b:ed:6f:56:b7:8c:98:08:ab:27:9b:d1:a3:b7:ee:e9:
7a:0a:90:f0:dd:59:0e:22:97:72:5c:8d:4b:ad:ca:7a:d8:c3:
2f:01:a0:fb:ba:37:4c:04:0d:d8:f9:0c:ac:bb:1a:e8:3a:ff:
5e:f5:3c:21:c8:03:6f:e1:13:74:65:36:16:17:b5:79:b1:25:
c2:d0:0d:8e:61:9a:21:07:ed:c8:97:c9:7c:c6:81:b2:8a:49:
79:13:65:d5:c7:44:9a:67:e2:d4:0a:e1:3f:0b:98:d4:50:a1:
3a:36:25:fa:d7:63:e0:5e:b6:6d:97:79:9b:31:5f:4c:d2:91:
76:4b:82:c3:4d:26:c7:dc:2d:37:df:38:a5:f3:29:eb:88:5f:
d9:8d:21:8d:ca:e8:cd:f7:55:76:a6:8d:e3:04:90:f0:d2:02:
4a:3e:51:33:ea:98:67:66:ef:d6:9f:43:98:db:50:2c:de:4b:
dd:69:d4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:14 2023 by rpki-client on console-fra.rpki-client.org