Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/GaxqlW1Obv5YJNl7jVsKRab5XQ4.roa
File: GaxqlW1Obv5YJNl7jVsKRab5XQ4.roa (raw, json)
Hash identifier: 8Zk1qRhFYVJ8bkBeJIXQQSfHgZ5F2VdSk7xCTkENz5E=
Subject key identifier: 19:AC:6A:95:6D:4E:6E:FE:58:24:D9:7B:8D:5B:0A:45:A6:F9:5D:0E
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04B7B4C2
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/GaxqlW1Obv5YJNl7jVsKRab5XQ4.roa
Signing time: Tue 17 May 2022 16:57:30 +0000
ROA not before: Tue 17 May 2022 16:57:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 141.11.168.0/23 maxlen: 24
141.11.178.0/24 maxlen: 24
141.11.186.0/24 maxlen: 24
141.11.88.0/23 maxlen: 24
141.11.90.0/24 maxlen: 24
141.11.96.0/24 maxlen: 24
141.11.102.0/24 maxlen: 24
141.11.5.0/24 maxlen: 24
141.11.121.0/24 maxlen: 24
141.11.228.0/23 maxlen: 24
141.11.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79148226 (0x4b7b4c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 17 16:57:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19ac6a956d4e6efe5824d97b8d5b0a45a6f95d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:94:cf:01:ef:25:d6:ee:7c:3e:d0:a6:7c:dd:
20:95:db:42:07:25:2e:d3:38:ac:d3:c9:ab:4f:17:
ee:7f:b1:a8:67:25:0f:24:79:b2:e4:4e:05:bb:e1:
92:c5:03:2e:b1:b5:cd:8b:af:aa:13:6e:d8:86:40:
6c:fa:08:23:17:40:46:ff:83:2c:ba:10:61:99:de:
a3:04:04:b2:79:6b:3d:24:4c:1d:1c:fd:53:ae:08:
bf:eb:b3:23:b3:5f:c2:1d:01:b1:b6:8f:cd:7a:d9:
7e:b7:d4:8a:48:75:8a:dd:bb:c3:b5:4c:34:3f:6d:
63:b1:14:1b:35:95:2e:f7:4e:ca:fb:f1:2b:62:e1:
b9:9f:45:c5:bb:f2:7e:ae:ac:eb:5f:5b:3c:d1:25:
00:6c:7f:70:b5:e4:2e:99:c0:cc:cf:ef:f9:92:b4:
fa:ee:14:ca:12:9d:47:64:ea:a2:99:8f:4d:09:67:
ad:80:3a:a3:70:a4:a3:70:66:86:52:93:85:7a:aa:
f1:0b:15:1b:b0:bc:73:21:71:db:47:53:6a:19:fa:
64:b0:6a:e5:79:40:c2:7f:eb:17:25:62:9b:c0:ae:
27:a0:08:bf:0f:c6:fa:0d:02:d6:b6:0b:87:14:e2:
50:56:51:bc:96:4f:1c:1c:51:2a:b7:9b:1d:df:96:
14:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AC:6A:95:6D:4E:6E:FE:58:24:D9:7B:8D:5B:0A:45:A6:F9:5D:0E
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/GaxqlW1Obv5YJNl7jVsKRab5XQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
141.11.26.0/24
141.11.88.0-141.11.90.255
141.11.96.0/24
141.11.102.0/24
141.11.121.0/24
141.11.168.0/23
141.11.178.0/24
141.11.186.0/24
141.11.228.0/23
Signature Algorithm: sha256WithRSAEncryption
28:8f:07:73:34:96:db:d5:9c:44:b9:86:0c:a5:45:21:93:8b:
ab:a9:99:65:12:a9:38:f3:de:d4:9c:b3:95:a9:1a:f0:86:e8:
b3:97:70:b6:f7:02:d9:d5:fd:1f:63:33:4d:ea:d8:92:7f:4a:
65:c8:50:be:ad:8a:4b:56:68:dc:df:a6:78:52:33:a4:fc:b8:
15:50:fe:e2:1e:58:3a:e7:12:42:e4:47:58:fd:e4:c0:64:9e:
ff:25:b1:7b:31:7b:d3:a2:40:8d:c4:9e:8c:e9:8c:8b:7a:b1:
4d:e4:a7:74:59:81:c5:97:c7:c0:da:80:c0:9e:a8:50:e6:0c:
5c:0a:f6:98:2e:08:4a:17:68:0c:7b:fb:c0:6d:1e:e3:84:65:
54:05:34:dc:ba:b5:0c:eb:12:c2:eb:7b:8c:d0:b6:86:ec:15:
be:49:8f:da:19:6e:a7:2c:7c:03:f9:23:3c:62:de:90:75:56:
ea:95:30:14:64:3c:a7:b4:8c:70:6d:c8:a3:ef:56:fd:24:f0:
30:40:f7:e3:80:f8:d2:97:42:6e:f7:ea:42:22:0c:9a:b9:c1:
9e:d6:dd:71:39:ed:5d:47:47:dc:ef:48:55:a9:82:70:c3:37:
52:35:66:6f:53:6d:5e:f1:c4:bb:65:a5:28:5a:f7:ec:54:0a:
f2:18:55:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:14 2023 by rpki-client on console-fra.rpki-client.org