Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Exfc6sMOSA5VpeVMqy8eaCjiP0g.roa
File: Exfc6sMOSA5VpeVMqy8eaCjiP0g.roa (raw, json)
Hash identifier: kL9w9HuH/TdhzpvsaXueL47hOKojTDW7RCYM2G0qyqw=
Subject key identifier: 13:17:DC:EA:C3:0E:48:0E:55:A5:E5:4C:AB:2F:1E:68:28:E2:3F:48
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0182A132CBA7F310CA2549332C25C433B6FC
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Exfc6sMOSA5VpeVMqy8eaCjiP0g.roa
Signing time: Mon 15 Aug 2022 11:10:36 +0000
ROA not before: Mon 15 Aug 2022 11:10:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 141.11.224.0/22 maxlen: 24
141.11.128.0/22 maxlen: 24
141.11.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a1:32:cb:a7:f3:10:ca:25:49:33:2c:25:c4:33:b6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Aug 15 11:10:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1317dceac30e480e55a5e54cab2f1e6828e23f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:92:88:05:cd:97:f4:67:32:29:e1:7e:d2:34:
d2:1a:07:9e:be:41:af:f6:0f:da:6c:a6:5d:90:63:
e5:6a:69:0d:63:3b:39:0b:4f:36:64:3c:7b:4c:7a:
ef:0e:8c:fd:6e:e4:40:d9:3d:e2:a7:34:c3:ed:79:
21:2e:88:58:62:ff:6f:2f:5e:4f:e6:d1:0b:55:b2:
38:e2:35:4f:5d:e1:35:34:fd:2f:06:e0:ec:0a:e1:
3a:00:ff:7d:99:9e:d7:3b:e9:82:fe:8b:26:8b:aa:
85:08:fe:8c:9a:7a:3d:f0:69:b8:ee:c6:7d:75:60:
a9:24:5c:eb:27:d2:f2:b0:d9:07:29:ae:82:11:09:
2a:c1:ef:cf:ec:3c:22:0a:b8:e7:b4:9f:18:e6:15:
ca:ad:74:c4:3f:5e:a6:4e:b4:67:25:21:44:cb:ef:
e4:12:01:4f:74:10:b4:08:d1:dd:3b:dc:09:6e:6e:
0f:73:08:14:4b:1f:aa:8c:bc:a2:a3:cf:cd:a4:7f:
64:ae:fa:a4:f8:a4:7c:f0:dd:fb:a6:8c:e9:ba:fc:
80:ac:43:52:c8:e8:1a:9c:80:bb:d4:25:34:1b:39:
92:34:d5:04:46:b3:95:0e:0d:78:05:2a:43:ce:e8:
c6:9f:83:f3:f0:42:05:db:a0:19:bc:04:c9:47:c4:
4b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:17:DC:EA:C3:0E:48:0E:55:A5:E5:4C:AB:2F:1E:68:28:E2:3F:48
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Exfc6sMOSA5VpeVMqy8eaCjiP0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.21.0/24
141.11.128.0/22
141.11.224.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:b5:f9:44:fe:29:bf:39:3d:9e:01:5f:a4:5c:50:e3:7d:d5:
d9:8e:06:b6:e2:14:98:fa:02:36:6c:25:11:a4:4a:dc:8f:45:
72:9d:84:85:a5:cc:b6:7f:4a:70:a6:c5:6b:41:c0:23:01:86:
f1:1a:31:27:4a:f9:90:90:61:7a:fd:02:72:2d:33:48:01:ef:
84:f8:21:fa:1f:e8:bd:6e:9d:7b:b2:2b:84:2d:00:a3:cd:94:
5f:08:2c:fa:49:e1:ce:e7:16:c5:ce:03:a5:7c:ba:9f:5f:f1:
00:0b:45:b5:fa:98:41:3c:b9:e3:bf:6e:6e:a2:e0:bc:08:fa:
bb:cc:0c:63:41:1b:96:32:44:0c:f4:35:04:38:77:f3:94:7d:
b1:39:8d:91:ef:5d:bf:5b:2e:01:02:ca:f6:93:3c:5e:a2:11:
3a:55:42:f8:13:73:da:5b:ae:f5:bd:24:4e:d3:fc:d4:0e:81:
57:32:ec:8b:c7:17:e0:70:ec:12:61:4d:cb:9d:11:24:e8:4f:
c9:5a:8a:aa:78:38:20:3d:0a:fc:4f:13:a9:e5:6e:27:1c:3d:
ea:21:66:74:67:9d:7f:2c:6f:2d:c1:29:e3:3d:ec:83:2b:5a:
15:bf:d7:37:da:8f:e9:2b:d1:2f:73:2b:d2:22:3d:7a:89:69:
ca:66:e8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org