Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/4G85_53ECK7jHsMnaKUMWZs9NnE.roa
File: 4G85_53ECK7jHsMnaKUMWZs9NnE.roa (raw, json)
Hash identifier: WPq1KLYRfGQigKaWFrvIEV66P+NP9kJPyE0L8UiH5dk=
Subject key identifier: E0:6F:39:FF:9D:C4:08:AE:E3:1E:C3:27:68:A5:0C:59:9B:3D:36:71
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 034D6031
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/4G85_53ECK7jHsMnaKUMWZs9NnE.roa
Signing time: Wed 02 Mar 2022 19:02:43 +0000
ROA not before: Wed 02 Mar 2022 19:02:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57416
IP address blocks: 141.11.161.0/24 maxlen: 24
141.11.178.0/24 maxlen: 24
141.11.177.0/24 maxlen: 24
141.11.4.0/24 maxlen: 24
141.11.5.0/24 maxlen: 24
141.11.120.0/24 maxlen: 24
141.11.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55402545 (0x34d6031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Mar 2 19:02:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e06f39ff9dc408aee31ec32768a50c599b3d3671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:77:79:22:79:ec:c9:49:4a:50:20:0e:21:
bd:70:5d:25:66:4d:89:0f:c5:2e:88:2c:9d:7a:06:
e5:4a:4e:06:7e:5e:ae:6e:9c:63:3c:fc:39:c4:3c:
b6:9b:c6:6b:93:26:14:1f:8c:da:94:b2:64:fa:4e:
14:90:b1:7b:8b:98:ac:cd:58:21:d4:db:3f:ff:bc:
d5:7c:c2:05:d5:cb:45:79:b4:90:93:ab:ee:69:42:
97:ae:f2:20:1c:08:94:c6:6a:0c:eb:c3:d6:59:45:
60:4d:47:3b:e3:59:bf:65:63:65:ee:b3:48:e2:62:
e4:9d:b8:7e:21:5f:11:46:e5:4d:72:f2:6f:74:d2:
d9:6e:a4:0b:23:0d:76:bb:50:2e:f1:4c:95:de:17:
80:1d:df:74:f3:90:66:b4:33:00:97:4a:72:e4:66:
9d:e7:7b:57:dc:60:ff:fa:57:2e:f3:2f:0f:e8:47:
21:7a:be:7a:93:aa:60:4a:3a:72:f2:85:ea:c8:0b:
f0:ea:b3:5f:cd:15:12:6f:73:b5:d0:53:8e:5e:fb:
8f:c7:59:e2:a2:9c:4c:9b:02:2b:fd:1a:25:42:9a:
18:c6:8b:d5:9d:99:89:f6:c3:f0:59:59:c6:71:e4:
4e:13:ee:7f:18:44:06:23:30:e2:99:09:16:b8:04:
08:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6F:39:FF:9D:C4:08:AE:E3:1E:C3:27:68:A5:0C:59:9B:3D:36:71
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/4G85_53ECK7jHsMnaKUMWZs9NnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.4.0/23
141.11.30.0/24
141.11.120.0/24
141.11.161.0/24
141.11.177.0-141.11.178.255
Signature Algorithm: sha256WithRSAEncryption
62:65:e9:b8:75:b7:a3:e0:a1:1e:eb:33:08:71:f2:f0:5e:b6:
f5:0c:f9:17:e1:ce:a6:8b:07:27:ce:a5:29:c8:ce:55:d0:17:
3b:0f:30:47:0d:f8:7e:cc:ec:63:78:9c:41:ac:50:ce:22:b9:
83:c9:24:2e:69:50:f6:f8:4e:82:b1:c9:0d:b5:3b:34:af:1b:
1b:13:88:92:26:72:16:30:49:4b:12:01:60:1d:a6:b7:a6:4f:
66:aa:36:9a:b9:49:19:80:bb:7a:87:3b:c7:ea:99:dd:cc:f3:
62:2a:1e:82:5f:92:e7:00:f2:b8:05:9c:0e:a9:6e:39:8e:68:
0c:0b:a8:89:89:67:90:23:a8:23:81:32:b5:0e:c5:66:81:73:
1a:1f:0b:d4:e3:be:6e:da:59:33:26:ce:f5:ba:3a:dc:28:c7:
36:13:a3:c7:b1:b9:4a:2d:99:df:9e:ea:bd:88:3c:d5:0c:64:
f3:a8:b0:6a:de:35:f3:f4:f6:82:de:0a:84:29:3c:ac:38:53:
5d:0e:4b:36:85:92:c2:85:f1:65:70:f2:b3:b6:f6:72:d4:07:
02:29:20:6f:46:82:46:93:c1:b7:3d:fa:b3:51:89:39:c1:7b:
fe:d3:ca:48:d3:f4:3e:c2:cf:e8:16:bb:e4:ce:07:93:06:43:
b1:bc:6b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org