Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/GGkKDiVKH_grJCVdSl12aM-x9Iw.roa
File: GGkKDiVKH_grJCVdSl12aM-x9Iw.roa (raw, json)
Hash identifier: 4gUYYgrplrG9rnFoEfbpw4ulpdByq2CJ7hJWNR4wfvg=
Subject key identifier: 18:69:0A:0E:25:4A:1F:F8:2B:24:25:5D:4A:5D:76:68:CF:B1:F4:8C
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04FB152F
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/GGkKDiVKH_grJCVdSl12aM-x9Iw.roa
Signing time: Tue 07 Jun 2022 09:11:20 +0000
ROA not before: Tue 07 Jun 2022 09:11:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 141.11.184.0/24 maxlen: 24
141.11.188.0/24 maxlen: 24
141.11.123.0/24 maxlen: 24
141.11.124.0/24 maxlen: 24
141.11.125.0/24 maxlen: 24
141.11.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83563823 (0x4fb152f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jun 7 09:11:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18690a0e254a1ff82b24255d4a5d7668cfb1f48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:97:dd:d3:fd:78:9a:0b:9e:d0:14:de:d2:
7c:b0:29:ae:60:ca:24:2a:a5:8d:67:3a:46:eb:64:
a4:c6:d6:0f:59:a0:0d:3c:56:a9:8a:4c:23:29:8a:
23:85:7b:e3:6d:67:7e:29:f1:cb:22:f5:35:a7:eb:
c1:ed:44:88:24:45:9d:f4:22:bb:ac:98:e6:11:3e:
85:5c:41:fb:92:8a:4b:c6:a2:35:17:63:24:fb:2c:
a5:d5:c5:9b:28:a5:89:ac:f7:82:e0:a9:40:70:e6:
87:66:c9:8c:08:6b:4a:f7:2d:b3:bc:68:73:30:1c:
52:0c:4a:d1:2c:40:39:f9:a0:6b:5a:42:1f:2b:d2:
e6:76:9b:7b:74:1a:cf:98:82:40:74:54:af:c6:a0:
f7:48:c7:6c:61:0e:91:98:db:3e:36:d7:e0:96:f8:
cd:43:5f:28:72:a2:e6:26:8a:92:aa:16:80:79:c7:
b8:2a:a6:86:fd:18:dc:7e:a7:9c:1b:93:a7:0b:9a:
ca:e4:11:35:ce:72:47:f1:1f:cc:c8:60:2d:12:b8:
e6:40:29:bd:8a:7a:3e:f4:e6:81:f7:9d:f4:30:b2:
ac:18:c9:27:32:ac:b2:da:9e:5f:f4:7d:0b:db:7d:
7c:22:5e:f4:90:1c:7b:1b:61:84:1d:3b:cc:8c:8c:
63:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:69:0A:0E:25:4A:1F:F8:2B:24:25:5D:4A:5D:76:68:CF:B1:F4:8C
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/GGkKDiVKH_grJCVdSl12aM-x9Iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.123.0-141.11.126.255
141.11.184.0/24
141.11.188.0/24
Signature Algorithm: sha256WithRSAEncryption
44:7e:64:63:5b:6a:1c:e5:04:3a:90:41:be:81:1c:69:7b:83:
19:dd:65:a0:8b:af:c5:31:9c:4e:12:bf:4d:87:8c:1e:05:df:
fe:40:21:e4:79:70:50:ba:b1:e4:6f:52:48:de:d8:07:2e:3f:
68:0d:6a:15:df:d7:a1:b7:02:7c:d9:61:e7:25:e5:fb:3e:62:
f1:ec:f4:1a:3d:d8:93:cc:05:d7:9f:7e:4a:d4:de:58:30:a9:
71:0d:5d:3c:4c:9c:a6:82:9d:0d:9e:3b:36:e4:54:36:a8:21:
9a:10:c0:60:37:71:30:1d:d4:6f:38:89:bb:38:fb:b8:26:72:
26:fc:5d:10:64:b0:4f:c7:53:3e:61:33:07:87:08:b2:ea:21:
c7:15:07:ea:3f:d5:b4:5e:69:37:53:79:b7:ff:bc:e5:ab:5b:
64:ae:ba:d6:2c:87:75:9e:95:b8:69:39:78:5b:89:ad:a8:89:
33:46:56:63:19:01:0c:55:b7:3f:45:ff:72:e1:ac:98:53:bf:
79:20:8c:6b:c3:d2:b0:4a:a1:7b:6b:f4:13:0e:9a:f9:10:ba:
20:be:0e:8e:6c:bc:2b:81:4f:80:de:75:94:f9:e2:09:0c:f7:
1e:64:14:a5:00:72:50:49:d0:ae:88:45:1c:c5:64:f5:8e:e7:
0c:83:c4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:14 2023 by rpki-client on console-fra.rpki-client.org