Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/8rRT4ytF9rOV6QDJbC2W8WqhgF4.roa
File: 8rRT4ytF9rOV6QDJbC2W8WqhgF4.roa (raw, json)
Hash identifier: NaqGQ7OdX805CmJR6igTj/PruONpDSk98uYcHLeXfnc=
Subject key identifier: F2:B4:53:E3:2B:45:F6:B3:95:E9:00:C9:6C:2D:96:F1:6A:A1:80:5E
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 02F8E634
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/8rRT4ytF9rOV6QDJbC2W8WqhgF4.roa
Signing time: Tue 08 Feb 2022 14:59:28 +0000
ROA not before: Tue 08 Feb 2022 14:59:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.11.44.0/22 maxlen: 24
141.11.43.0/24 maxlen: 24
141.11.40.0/22 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.42.0/24 maxlen: 24
141.11.41.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.68.0/22 maxlen: 24
141.11.80.0/20 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.0.0/24 maxlen: 24
141.11.10.0/23 maxlen: 24
141.11.6.0/24 maxlen: 24
141.11.16.0/24 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.22.0/24 maxlen: 24
141.11.19.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.20.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.26.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.27.0/24 maxlen: 24
141.11.37.0/24 maxlen: 24
141.11.36.0/22 maxlen: 24
141.11.38.0/24 maxlen: 24
141.11.33.0/24 maxlen: 24
141.11.32.0/22 maxlen: 24
141.11.35.0/24 maxlen: 24
141.11.34.0/24 maxlen: 24
141.11.168.0/21 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.184.0/21 maxlen: 24
141.11.192.0/19 maxlen: 24
141.11.128.0/19 maxlen: 24
141.11.224.0/20 maxlen: 24
141.11.240.0/21 maxlen: 24
141.11.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49866292 (0x2f8e634)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Feb 8 14:59:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2b453e32b45f6b395e900c96c2d96f16aa1805e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2c:a9:ef:a2:3f:1b:37:98:3e:c3:7e:c3:67:
42:c7:ef:cb:02:1c:2b:68:c4:db:5b:02:9e:60:63:
0d:57:61:dd:e4:aa:38:e3:07:94:26:9e:3d:29:56:
05:70:60:39:ce:f9:ad:d6:48:1d:16:aa:e9:9d:b5:
b3:82:e5:0c:33:4d:f2:4b:c1:3b:32:fa:8b:49:88:
06:ad:00:ba:de:f2:3a:c0:6c:da:68:d8:5f:03:84:
56:a2:17:d7:be:ef:be:32:e9:92:dc:9f:9d:db:6b:
20:68:03:0a:b6:26:62:ff:3a:1f:22:ac:60:41:b2:
9a:52:e7:6d:ad:94:1c:ff:a4:02:61:b4:b6:32:81:
a3:19:7e:79:37:93:f1:61:87:e9:7f:65:dc:56:89:
b7:25:82:c7:fc:da:20:b6:23:7f:78:8c:7a:00:a2:
fb:64:1d:3e:cc:a5:2a:a3:04:d8:d6:27:18:8a:8c:
b1:19:a3:46:53:cb:95:cc:aa:95:9f:9a:27:5c:a4:
dd:1c:53:b7:ff:44:40:f0:75:3e:37:70:22:89:b2:
3d:27:9b:c7:9c:d3:15:85:3f:2c:2c:c6:e2:a7:b1:
c2:17:9b:b1:57:bc:87:9e:21:81:0e:f2:0d:f8:8f:
85:27:5d:5c:1c:98:73:d4:0e:2c:42:bd:d0:81:9d:
e8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B4:53:E3:2B:45:F6:B3:95:E9:00:C9:6C:2D:96:F1:6A:A1:80:5E
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/8rRT4ytF9rOV6QDJbC2W8WqhgF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0-141.11.2.255
141.11.6.0/24
141.11.10.0/23
141.11.16.0-141.11.22.255
141.11.25.0-141.11.28.255
141.11.31.0-141.11.47.255
141.11.68.0/22
141.11.80.0/20
141.11.128.0/19
141.11.168.0-141.11.176.255
141.11.182.0-141.11.251.255
Signature Algorithm: sha256WithRSAEncryption
71:bf:9e:9b:5e:77:f4:0c:2f:1c:16:88:71:94:b9:83:a7:1e:
c1:59:8f:68:d9:48:26:43:40:a5:79:99:ea:08:b9:4e:30:f5:
ae:10:00:4a:29:5d:9c:5c:c9:c0:c4:c7:b2:51:75:f0:35:29:
01:a4:17:23:38:6a:56:e9:ad:e6:6a:2b:46:f4:a0:20:b7:b3:
9d:c3:1a:36:bf:d6:5c:90:49:c6:a9:52:60:2e:de:c3:99:a5:
26:b6:19:21:45:27:54:c5:7f:3c:4c:22:cb:e0:db:8c:9a:00:
8e:02:cc:5b:38:ec:4c:ad:b8:37:02:d2:66:f1:12:2e:a2:e7:
4d:f1:2e:fa:d6:b6:6b:3f:16:09:1d:26:97:d0:c2:9e:e8:d9:
b6:50:04:ff:d9:3e:71:05:6d:7f:12:a6:55:85:e2:1e:20:80:
f3:45:e8:7d:fc:bb:13:3a:df:16:43:1a:32:a1:cd:bc:dd:23:
be:17:a0:9f:7b:0e:e8:a1:95:d6:75:68:3c:b6:93:c5:8a:e8:
31:d4:a4:4d:a8:c8:48:14:bc:5b:ef:1c:e4:e6:e7:51:32:d2:
0b:25:aa:10:2c:15:3e:4c:c3:59:71:9f:0c:e7:61:ed:af:89:
d8:e6:57:07:e0:b4:de:fc:88:21:96:be:d0:4c:bc:52:3c:53:
85:04:d9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org