Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/AXsudVKbEhbqLKhh6HMXG6n_xL4.roa
File: AXsudVKbEhbqLKhh6HMXG6n_xL4.roa (raw, json)
Hash identifier: y8khcCLWlFNpnGE5LhVAdce945ft/JSJ4kj8AiSZ3+M=
Subject key identifier: 01:7B:2E:75:52:9B:12:16:EA:2C:A8:61:E8:73:17:1B:A9:FF:C4:BE
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01839D775C51DF87AD6A95F1B158206E6FA4
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/AXsudVKbEhbqLKhh6HMXG6n_xL4.roa
Signing time: Mon 03 Oct 2022 10:49:48 +0000
ROA not before: Mon 03 Oct 2022 10:49:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 141.11.4.0/24 maxlen: 24
141.11.234.0/23 maxlen: 24
141.11.144.0/21 maxlen: 24
141.11.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9d:77:5c:51:df:87:ad:6a:95:f1:b1:58:20:6e:6f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Oct 3 10:49:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=017b2e75529b1216ea2ca861e873171ba9ffc4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:17:40:20:f6:48:8f:21:82:a7:c8:0d:c0:55:
8e:55:df:c4:7e:13:18:95:f9:ed:3f:aa:5c:77:7f:
64:22:aa:c6:90:9b:5d:1a:b3:f0:f1:64:1e:01:72:
30:9c:fa:c8:c5:6a:48:70:7f:d7:61:06:34:c2:cf:
67:b2:7a:a5:8e:eb:79:a2:09:84:1f:07:2f:a6:ab:
ef:f4:da:18:6a:56:25:0c:da:e3:15:9e:23:1a:a1:
df:98:b3:74:25:67:d0:67:08:42:18:9c:04:10:2e:
4e:66:93:86:70:74:f9:1e:ba:24:4f:51:35:54:8f:
d1:8a:43:90:9b:e9:fe:18:10:e0:c6:0e:06:3b:af:
05:30:13:e4:2a:57:d8:b5:ec:5c:ab:31:d6:96:a7:
32:a5:a7:08:92:04:01:55:98:14:0e:b1:88:48:1e:
2b:3f:1f:c1:8e:75:72:cd:03:bb:ae:5f:8f:e5:7e:
d7:97:8c:d6:98:a0:32:5b:a3:64:6c:32:87:ec:b5:
a4:a2:b1:84:35:13:df:e7:05:ec:e3:fe:78:7f:51:
5e:28:75:38:84:c6:3a:8c:21:c2:10:41:3d:c1:bc:
ed:98:0d:6b:20:8d:11:09:df:94:46:a9:d7:83:b7:
ae:44:ef:d7:cf:5d:73:d9:d5:68:0d:50:46:8e:22:
29:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7B:2E:75:52:9B:12:16:EA:2C:A8:61:E8:73:17:1B:A9:FF:C4:BE
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/AXsudVKbEhbqLKhh6HMXG6n_xL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.4.0/24
141.11.34.0/24
141.11.144.0/21
141.11.234.0/23
Signature Algorithm: sha256WithRSAEncryption
20:ee:52:93:01:70:b4:94:bb:04:52:a2:93:c5:3f:1c:02:8a:
1b:fc:34:67:f7:2f:0c:a6:69:32:5b:6e:a7:7e:0d:05:94:d3:
17:52:f1:89:96:4f:bb:4b:05:0f:e8:bb:85:31:08:44:42:b8:
e8:86:d4:e0:05:c3:88:00:4e:40:fe:c1:38:67:63:d3:d8:02:
cb:cd:dc:17:db:3b:66:ba:79:68:b2:6c:e2:6d:54:a5:2c:18:
6d:fc:55:6a:31:88:6e:13:7c:3c:5a:6c:37:9c:0c:b1:c8:6a:
c3:8f:ce:ab:31:b3:ab:2c:23:a5:33:a1:25:65:9c:60:7e:85:
11:ad:ed:27:84:fa:54:98:57:78:5c:00:25:e8:18:4b:15:83:
fd:ff:69:0d:c2:04:56:c4:ef:02:58:53:7d:d4:a9:b2:c1:79:
9a:60:1f:08:86:57:51:69:d6:37:f8:3a:af:e1:ce:99:99:c8:
44:c7:79:f0:0f:63:f9:5d:5f:3f:ef:4b:44:0d:9d:69:ad:c6:
2f:f0:48:2a:ff:10:4f:a4:31:2b:77:68:55:7a:28:3f:c1:bb:
d6:ac:21:52:41:b5:c2:9f:30:04:d0:0c:64:0e:66:1c:b5:25:
40:53:34:cb:6a:81:06:a1:44:af:f8:e9:d9:e4:36:9c:7f:ad:
5c:87:65:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org