Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/CUKkdREk7rV5ocA94-SttLybl60.roa
File: CUKkdREk7rV5ocA94-SttLybl60.roa (raw, json)
Hash identifier: i1oxcWc6kOaigUOPCAKFqoU/ZgOTSanZvJ49IVHf2aI=
Subject key identifier: 09:42:A4:75:11:24:EE:B5:79:A1:C0:3D:E3:E4:AD:B4:BC:9B:97:AD
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 044F7CDC
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/CUKkdREk7rV5ocA94-SttLybl60.roa
Signing time: Tue 03 May 2022 10:29:25 +0000
ROA not before: Tue 03 May 2022 10:29:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 141.11.168.0/23 maxlen: 24
141.11.178.0/24 maxlen: 24
141.11.102.0/24 maxlen: 24
141.11.5.0/24 maxlen: 24
141.11.121.0/24 maxlen: 24
141.11.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72318172 (0x44f7cdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 3 10:29:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0942a4751124eeb579a1c03de3e4adb4bc9b97ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:aa:a7:e8:3f:02:19:e4:87:aa:23:0f:49:
c0:8a:59:53:15:d6:51:28:05:05:4b:a0:1a:25:64:
cd:9d:57:f5:be:27:0c:4e:9e:d9:bc:a0:ba:69:2b:
0f:04:42:46:95:21:3e:8a:96:54:c5:ca:50:00:f1:
31:1b:25:af:fa:a8:30:79:66:e2:4d:35:87:fc:51:
3e:b5:79:97:82:04:52:e0:43:44:bb:13:d6:d5:c8:
d2:57:82:ea:82:02:11:bc:a0:bb:01:96:2b:0d:35:
ca:1b:72:5d:67:ad:f1:30:7e:3c:cf:a2:cf:17:51:
49:e8:36:dd:27:d8:bf:40:06:23:03:47:e5:42:93:
9d:1b:d0:2a:28:de:a0:07:cf:aa:7c:fe:a6:d8:03:
5e:0c:01:44:f1:1e:31:5a:fd:f7:1e:b8:7a:14:fb:
6f:84:d0:e7:ff:60:d4:0a:bd:67:be:9a:0c:0f:65:
c5:31:7f:18:11:66:54:59:12:60:8b:6a:0f:f2:d5:
77:39:1f:7f:54:10:3f:d1:5d:a6:e2:b2:71:16:3a:
87:66:98:1b:10:4e:e1:77:1f:8b:4f:63:7a:ec:27:
ce:37:7c:f6:13:3d:1d:04:bf:38:be:cb:a6:79:6f:
cc:f2:8d:6c:8e:f4:f3:48:ca:41:27:bc:a7:36:65:
49:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:42:A4:75:11:24:EE:B5:79:A1:C0:3D:E3:E4:AD:B4:BC:9B:97:AD
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/CUKkdREk7rV5ocA94-SttLybl60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
141.11.26.0/24
141.11.102.0/24
141.11.121.0/24
141.11.168.0/23
141.11.178.0/24
Signature Algorithm: sha256WithRSAEncryption
11:34:a8:94:21:0f:78:fa:14:67:e4:ca:18:13:9e:a8:d1:30:
b1:14:bc:1e:db:ca:04:cd:51:46:e1:be:b5:e2:76:8f:0a:8a:
aa:8f:5c:91:37:ae:2c:f6:d8:36:9c:5e:90:bb:fc:db:2b:f4:
1e:99:92:c8:dd:cb:a9:d2:b6:95:63:66:b3:ad:ec:e5:fb:7e:
da:28:11:77:eb:15:51:a9:e1:a8:8e:16:cd:ef:a4:d1:10:35:
65:bf:ee:44:88:9c:07:44:13:2c:be:6c:83:e8:ce:39:ea:fb:
bc:bc:84:78:29:da:d0:c9:b4:61:9e:57:36:b1:66:1a:5c:16:
e9:4a:9f:8c:42:5b:30:85:bc:ea:c8:7a:19:5c:78:ff:2d:9f:
e9:e7:7e:a6:0f:5d:90:cb:54:24:93:2e:97:56:87:cd:80:13:
c1:31:a4:af:da:54:ce:76:9d:93:e1:7a:15:01:99:36:6c:1c:
6a:f7:21:20:4d:ce:1f:22:94:9e:aa:ad:3a:c3:eb:3d:26:6a:
ae:e3:46:31:86:0c:d8:9f:53:ab:33:04:42:b8:9d:3b:d1:1c:
e0:9b:86:fe:1f:7f:77:e9:37:dc:0d:68:ae:e6:88:59:0d:fa:
68:9f:bf:e1:d2:ed:71:ac:8f:3d:66:53:e9:5d:91:f9:01:f2:
f4:a1:f8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:14 2023 by rpki-client on console-fra.rpki-client.org