Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/5ueFpnGZxFvuCufXPmxUweuyRWw.roa
File: 5ueFpnGZxFvuCufXPmxUweuyRWw.roa (raw, json)
Hash identifier: bTYwLBdyPFylClahgQ3+6Lz1g4TdE9tf0VtxZWyhJkY=
Subject key identifier: E6:E7:85:A6:71:99:C4:5B:EE:0A:E7:D7:3E:6C:54:C1:EB:B2:45:6C
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0182C9F3D2A4186F23FF45ECF52659B6864E
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/5ueFpnGZxFvuCufXPmxUweuyRWw.roa
Signing time: Tue 23 Aug 2022 09:06:15 +0000
ROA not before: Tue 23 Aug 2022 09:06:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 141.11.168.0/23 maxlen: 24
141.11.88.0/23 maxlen: 24
141.11.96.0/24 maxlen: 24
141.11.102.0/24 maxlen: 24
141.11.5.0/24 maxlen: 24
141.11.121.0/24 maxlen: 24
141.11.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c9:f3:d2:a4:18:6f:23:ff:45:ec:f5:26:59:b6:86:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Aug 23 09:06:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6e785a67199c45bee0ae7d73e6c54c1ebb2456c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:82:1a:88:7e:70:a8:48:c0:fa:73:4f:1f:1b:
c7:2d:8b:1b:7b:16:08:bc:0e:49:28:de:7c:7f:dd:
17:59:d1:42:59:e9:11:f9:18:ff:25:53:73:2c:61:
09:db:67:df:e5:fd:6b:f8:a7:70:9c:65:e1:bf:ee:
85:72:95:62:a1:5a:f5:98:c5:41:c4:fe:4e:f6:63:
75:e9:4e:80:62:52:00:2b:5b:e7:57:8f:82:46:c4:
63:48:02:af:f3:2a:8c:69:11:0b:b9:58:4b:66:48:
db:74:e1:1e:a8:31:46:c2:ef:20:f2:a1:fa:8a:63:
15:c4:9f:72:08:17:5d:98:b1:84:a8:44:46:ff:46:
d9:26:44:83:34:df:0d:43:b3:e7:07:bb:47:76:27:
9b:1e:65:69:bf:98:60:2c:7f:48:ae:cc:57:6b:4d:
25:4c:57:54:5b:97:95:99:be:75:70:37:07:7e:bd:
4b:90:88:f4:b8:ae:7c:e5:8e:f0:4e:7b:1b:9d:60:
06:39:11:66:48:43:17:25:ae:e0:e9:52:f2:95:e1:
97:a1:dd:ea:e7:3f:14:38:8f:64:1a:47:76:18:45:
27:6a:d5:97:91:4e:6a:a4:cc:00:53:a6:b5:27:23:
d4:09:ce:2c:cc:8d:ac:35:5e:98:48:09:20:41:41:
40:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E7:85:A6:71:99:C4:5B:EE:0A:E7:D7:3E:6C:54:C1:EB:B2:45:6C
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/5ueFpnGZxFvuCufXPmxUweuyRWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
141.11.26.0/24
141.11.88.0/23
141.11.96.0/24
141.11.102.0/24
141.11.121.0/24
141.11.168.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:57:aa:b6:df:f3:e8:5e:a2:47:b7:a2:fe:e5:c1:01:25:e5:
af:62:71:e2:82:6e:bc:1f:a1:73:f3:e0:57:bb:3f:e7:cd:28:
1d:b0:37:03:2e:4f:ae:7a:b1:d1:ed:7a:92:a8:e1:fe:61:55:
b8:1f:08:28:e2:fc:63:07:85:5c:5f:8f:5f:4c:b6:2e:84:ac:
a5:23:6b:ec:72:a3:2d:1d:b1:07:0b:0d:13:17:ff:8c:3b:37:
0d:47:47:28:70:71:3c:f8:30:07:27:73:c4:51:4a:90:0f:6e:
5c:37:90:4c:d3:16:35:fa:1e:ae:4c:db:11:ac:e7:65:28:7f:
ff:66:29:c2:6d:52:58:9c:45:c9:16:01:02:1e:7f:04:4a:c8:
4f:25:8c:e7:a5:b7:dd:5f:13:1d:66:f1:95:e1:3d:ef:62:47:
9c:9d:e4:b7:1c:d1:b0:41:a5:59:69:65:cd:72:55:88:cd:8a:
5a:2a:a4:e8:75:f6:47:47:db:04:88:39:42:20:cc:34:2d:ad:
bb:b3:fc:ad:86:e0:a4:6c:b1:eb:48:d7:44:0a:e3:7d:08:94:
4f:c3:71:32:ca:82:3b:61:8f:fd:77:e6:1c:65:75:32:d9:5c:
1c:d9:cd:26:85:ec:16:ab:b2:e2:ea:54:de:56:53:8e:76:8c:
cc:3d:15:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org