Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/BUNkrZbRLLm95AeK_uwyQHvzdn4.roa
File: BUNkrZbRLLm95AeK_uwyQHvzdn4.roa (raw, json)
Hash identifier: czKy0x4Ybqrmw3mWsmp8jqYxR93uSYC19oXT/M7jkjQ=
Subject key identifier: 05:43:64:AD:96:D1:2C:B9:BD:E4:07:8A:FE:EC:32:40:7B:F3:76:7E
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0184DD5BA1EFA5D1284B623A90B64679908F
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/BUNkrZbRLLm95AeK_uwyQHvzdn4.roa
Signing time: Sun 04 Dec 2022 13:38:00 +0000
ROA not before: Sun 04 Dec 2022 13:38:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 141.11.178.0/24 maxlen: 24
141.11.200.0/22 maxlen: 24
141.11.208.0/22 maxlen: 24
141.11.236.0/22 maxlen: 24
141.11.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:dd:5b:a1:ef:a5:d1:28:4b:62:3a:90:b6:46:79:90:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Dec 4 13:38:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=054364ad96d12cb9bde4078afeec32407bf3767e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4d:51:60:f9:47:ef:7a:d2:ac:68:a5:2f:62:
84:a3:2c:71:3b:94:b2:58:9f:eb:0c:ec:cb:f9:2f:
5d:7a:32:6f:f6:d4:08:71:13:59:db:c4:f8:dd:65:
98:22:bc:b6:a9:3e:5f:0e:f2:ee:8a:72:7c:46:8f:
be:06:b8:ad:92:47:ac:2d:57:a9:26:65:6e:e4:3a:
09:e7:7c:9b:7d:0b:f9:ef:16:e8:3d:a4:55:89:26:
1c:0f:04:91:1a:22:98:0b:9d:7b:f6:34:d4:cc:13:
82:9c:9a:35:0d:85:02:fe:8f:5a:c6:0e:bd:09:64:
ac:03:df:dd:19:2f:af:45:ef:4e:7b:4a:f3:e0:e2:
63:2e:99:a7:97:4c:a5:35:2b:d2:ca:12:a5:98:e4:
8a:16:8e:4a:a6:56:15:1b:37:94:f5:c7:44:48:f7:
4f:90:1f:e9:c2:99:61:6e:50:1d:0f:65:79:7e:3a:
ba:2f:d8:c4:e9:72:91:bf:ce:21:f7:12:12:4b:21:
26:5d:56:b2:45:99:e1:b3:f1:64:5b:5f:be:9f:eb:
0b:05:e2:43:cb:b8:52:f9:ec:20:f6:6e:93:49:36:
b7:4f:fa:0c:e5:57:ab:a1:dc:0c:73:07:ec:f9:b8:
62:3d:54:0a:79:0d:a1:14:bb:da:ba:4b:bd:0f:79:
12:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:43:64:AD:96:D1:2C:B9:BD:E4:07:8A:FE:EC:32:40:7B:F3:76:7E
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/BUNkrZbRLLm95AeK_uwyQHvzdn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.140.0/22
141.11.178.0/24
141.11.200.0/22
141.11.208.0/22
141.11.236.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:0a:c7:d7:35:6a:8d:02:13:40:ba:77:7e:b3:45:45:a1:4c:
33:1c:c0:f0:01:38:32:1a:23:78:00:e7:fd:94:19:41:b1:f5:
05:8e:61:3a:de:1a:b5:c0:8e:ad:c7:46:bd:9f:bd:09:2d:37:
4c:cf:94:5c:d6:6a:74:51:cb:d0:ca:cd:ae:a8:de:f5:07:fc:
17:01:9f:d1:17:4e:1b:8c:9b:e1:25:ac:84:7a:dd:fc:f6:8e:
e9:72:2d:e7:1b:ad:2e:e5:4d:7f:92:6b:c0:3c:69:7a:73:bd:
60:28:e1:f2:ed:ae:6c:de:29:b7:22:8f:0c:cd:e1:8f:e1:0e:
49:20:82:70:d8:55:d7:05:8c:7f:dc:16:0f:ea:a7:99:0d:41:
70:0f:ab:19:79:0b:19:e4:55:06:83:d6:3d:34:ab:78:63:46:
53:65:01:46:9d:10:0f:78:47:25:a0:4a:16:91:5e:86:c7:e9:
3d:8f:a9:56:a8:97:57:26:b3:49:cb:1e:20:cd:87:70:5b:25:
38:b5:5e:ab:47:58:68:ec:47:35:88:99:b6:90:29:ea:e2:84:
c2:f8:c9:d3:1d:a9:89:8c:33:d3:80:77:68:00:04:f1:af:aa:
88:27:19:85:37:59:45:6a:0d:45:28:2d:e2:41:b9:71:5b:b8:
ef:c5:ed:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:14 2023 by rpki-client on console-fra.rpki-client.org