Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/8iWMDmlFNDXqqHsKFdSYm0y1lnQ.roa
File: 8iWMDmlFNDXqqHsKFdSYm0y1lnQ.roa (raw, json)
Hash identifier: TWUqve9dru0EjAYRFwISpiZSikjxlukz47vO43T6UvU=
Subject key identifier: F2:25:8C:0E:69:45:34:35:EA:A8:7B:0A:15:D4:98:9B:4C:B5:96:74
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 018511E0A8B1187778800B20F1D3EAC7FC4B
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/8iWMDmlFNDXqqHsKFdSYm0y1lnQ.roa
Signing time: Wed 14 Dec 2022 18:23:33 +0000
ROA not before: Wed 14 Dec 2022 18:23:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54641
IP address blocks: 141.11.72.0/22 maxlen: 24
141.11.92.0/22 maxlen: 24
141.11.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:11:e0:a8:b1:18:77:78:80:0b:20:f1:d3:ea:c7:fc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Dec 14 18:23:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2258c0e69453435eaa87b0a15d4989b4cb59674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:50:3d:a2:7d:90:2d:db:9c:aa:73:c2:97:
ca:1e:1e:c0:35:41:e6:a9:36:88:39:91:d4:09:67:
07:11:57:28:d6:93:58:8a:d7:98:9e:4f:58:52:28:
f4:38:92:c5:86:11:16:43:4d:7f:59:2c:90:c3:65:
74:d9:55:9b:24:10:d8:a3:f9:50:b2:5a:87:e4:60:
72:dc:a8:d5:fc:93:d6:98:53:94:df:89:53:fc:9b:
90:cf:3e:ae:97:5f:ba:42:f8:67:79:ec:4b:11:0d:
71:64:ac:32:94:cf:b0:ac:e9:02:98:98:11:48:78:
87:ac:08:31:24:44:14:10:bb:56:2f:be:6c:56:7f:
86:a8:02:68:07:78:a4:00:e3:f8:dc:30:67:65:f5:
3d:f8:d4:5b:e7:90:b2:92:6a:5b:51:61:35:e7:12:
f3:fb:7f:ef:6b:c9:2d:ec:08:fd:a9:ca:dd:cb:2f:
8b:9c:13:43:4c:15:6f:1b:98:f4:2e:ed:dc:ed:c9:
aa:19:e6:d2:89:96:0a:ef:38:61:f0:20:3d:f8:9b:
d1:20:1a:81:e8:87:af:a7:f0:1a:38:7a:69:1c:f6:
c2:09:81:07:31:9d:16:94:94:d7:04:17:58:55:7a:
b9:54:32:42:fb:37:a3:9e:2a:56:2e:6a:3d:17:ca:
f7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:25:8C:0E:69:45:34:35:EA:A8:7B:0A:15:D4:98:9B:4C:B5:96:74
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/8iWMDmlFNDXqqHsKFdSYm0y1lnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.72.0/22
141.11.92.0/22
141.11.128.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:4e:34:74:50:7f:2f:1f:42:dc:a0:6c:9c:d3:53:0b:f5:9d:
f9:e6:d2:c0:fc:a7:29:f3:3f:d7:94:23:05:ef:04:ec:b8:22:
54:7a:f0:fa:b0:c8:ed:cd:b8:8c:46:4b:11:87:d7:41:09:46:
c8:e4:ce:53:c2:d8:b2:0d:95:8d:e3:d2:0b:5c:b2:e3:0a:e9:
bc:4e:2f:a1:0e:6a:46:f5:8f:91:ed:66:82:cc:6d:0f:7c:0e:
9d:85:e7:ac:d8:1a:ab:e7:fe:20:84:26:84:2c:d0:aa:3d:0b:
7b:b2:11:b4:9e:80:a9:a5:ed:51:ec:23:3b:c0:aa:ed:7e:34:
52:9b:c5:46:c7:75:14:97:88:43:62:a1:14:34:18:ea:69:8a:
5a:e5:1d:d5:2d:f4:6f:25:a9:d0:ba:dd:23:88:cf:e6:9c:e3:
23:83:a3:2c:6d:23:7c:51:64:c7:48:15:a9:68:ee:b2:f4:b2:
01:9a:e1:21:b6:05:1d:07:3b:0c:6e:55:69:17:91:88:ef:23:
de:f8:06:f7:f6:9e:2c:e4:ea:3c:60:32:7b:6e:06:b1:46:d2:
3c:89:cc:9e:a9:52:cd:5c:46:6b:42:75:30:e1:74:49:6b:d8:
b2:a0:e3:79:26:9f:02:fe:2f:c0:6e:1e:7d:4e:09:56:7e:d1:
0d:49:31:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:14 2023 by rpki-client on console-fra.rpki-client.org