Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/92jJNVM5_6R7qmIDt6SkCQFzZK0.roa
File: 92jJNVM5_6R7qmIDt6SkCQFzZK0.roa (raw, json)
Hash identifier: GfkLZT/+Npm35sBtpj+oRS8q+clYm4dUW8l8ygfLmf4=
Subject key identifier: F7:68:C9:35:53:39:FF:A4:7B:AA:62:03:B7:A4:A4:09:01:73:64:AD
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01852B224CD58EC5D683AB4BEAABC8304028
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/92jJNVM5_6R7qmIDt6SkCQFzZK0.roa
Signing time: Mon 19 Dec 2022 16:05:46 +0000
ROA not before: Mon 19 Dec 2022 16:05:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 141.11.68.0/24 maxlen: 24
141.11.69.0/24 maxlen: 24
141.11.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2b:22:4c:d5:8e:c5:d6:83:ab:4b:ea:ab:c8:30:40:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Dec 19 16:05:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f768c9355339ffa47baa6203b7a4a409017364ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:34:00:63:90:08:7f:26:e9:2f:76:e2:98:68:
a3:b2:5f:fc:9e:99:dd:32:b5:e5:9d:22:e7:1e:02:
d5:98:6c:99:5a:60:4f:c9:37:27:d4:dc:7c:ef:8c:
e5:4d:d7:39:4b:f6:fd:18:6c:ae:cb:f4:de:c5:26:
96:80:42:84:93:6d:52:46:b5:5e:fc:85:74:41:39:
88:ae:02:d0:40:07:6d:85:4d:48:58:3a:89:b4:13:
0f:df:94:00:a6:78:d8:07:24:56:10:e3:df:fe:09:
60:60:33:f3:4e:f0:27:f9:b7:9b:1c:00:b7:5c:da:
83:0d:68:58:15:21:58:55:07:b7:2d:3a:15:e9:8a:
74:1a:a1:4e:b4:67:65:95:8b:8d:42:f8:00:35:b0:
b9:14:f8:d5:0b:99:0c:55:a9:09:42:e4:a0:fe:29:
01:bb:29:5d:d3:03:ea:a9:ae:d9:f5:be:56:7e:c6:
f3:bc:b0:b2:63:1f:aa:cb:66:09:32:92:5d:b7:68:
9a:6b:a0:6f:c3:ab:e7:eb:3c:da:e0:8c:1a:1a:86:
ee:10:cf:a7:ca:3d:bc:e5:f5:f3:88:ee:36:d2:ae:
70:b9:3a:f1:fe:db:19:e1:1a:25:61:07:0a:4e:67:
77:be:98:87:ea:de:29:75:cb:a0:c0:9a:c5:24:ab:
8d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:68:C9:35:53:39:FF:A4:7B:AA:62:03:B7:A4:A4:09:01:73:64:AD
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/92jJNVM5_6R7qmIDt6SkCQFzZK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.20.0/24
141.11.68.0/23
Signature Algorithm: sha256WithRSAEncryption
75:39:03:14:06:00:ad:c2:c3:f3:9f:01:b7:ca:e4:4e:4b:f5:
e2:16:c9:71:96:a9:f1:6c:44:0b:28:08:b3:16:7f:bc:59:d6:
cb:89:4d:1e:a0:5c:bd:72:ba:b2:2e:27:47:51:7f:b7:25:ab:
84:d6:d8:77:96:b1:e4:aa:f5:4a:2a:94:4d:d1:5f:ff:99:97:
3d:02:a9:81:05:6e:51:f2:08:0b:ce:ae:77:e1:d3:1b:c4:bb:
ab:7c:8c:c8:27:d9:a5:d3:d9:11:85:06:ed:6d:1f:63:eb:a2:
d3:d4:b6:88:a6:45:e5:90:d5:db:e9:fb:57:7e:d9:f6:1b:b1:
5b:32:6c:c8:72:a3:53:dd:47:be:34:c2:29:d7:80:24:dc:21:
7f:cf:c3:f1:cc:16:d2:bf:71:c7:0f:27:f3:e5:b4:b5:62:78:
13:27:4c:e0:a2:9e:96:ea:da:a2:c5:f7:5a:46:c7:e2:f4:01:
4e:4f:b5:c7:db:21:43:29:cd:fd:5d:05:0d:9c:61:48:44:73:
4c:38:f5:23:a3:cb:7e:28:53:d3:c2:f4:7d:66:01:1b:5a:f2:
ba:b4:df:d6:43:aa:ce:77:12:94:e3:46:6a:fd:6f:b0:ae:e4:
88:10:85:69:fc:42:4a:8e:e3:a7:05:ca:fd:8e:e0:06:c0:bb:
fe:41:07:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:14 2023 by rpki-client on console-fra.rpki-client.org