Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/H8ee8PdoAUc-1C3WVPkzSOsHvns.roa
File: H8ee8PdoAUc-1C3WVPkzSOsHvns.roa (raw, json)
Hash identifier: MGv3ipZGenyhWbTlvWWATqrOTqHw0lD98kiLDmahugc=
Subject key identifier: 1F:C7:9E:F0:F7:68:01:47:3E:D4:2D:D6:54:F9:33:48:EB:07:BE:7B
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0347CF02
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/H8ee8PdoAUc-1C3WVPkzSOsHvns.roa
Signing time: Tue 01 Mar 2022 10:41:36 +0000
ROA not before: Tue 01 Mar 2022 10:41:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 141.11.192.0/19 maxlen: 24
141.11.104.0/22 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.112.0/20 maxlen: 24
141.11.6.0/24 maxlen: 24
141.11.128.0/19 maxlen: 24
141.11.20.0/24 maxlen: 24
141.11.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55037698 (0x347cf02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Mar 1 10:41:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fc79ef0f76801473ed42dd654f93348eb07be7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bd:c1:d8:61:a2:73:26:15:11:34:93:c7:f9:
28:4e:b8:51:5b:c4:4f:1f:77:96:db:c7:64:51:df:
c0:55:43:50:2d:c0:43:1f:a1:25:97:18:e5:0a:63:
26:8a:80:94:09:5b:70:fa:99:8b:54:ca:f2:83:76:
57:6f:fa:bc:05:84:09:f3:11:87:33:00:93:79:7a:
22:0e:13:c0:49:c6:88:2f:53:35:9d:a7:e1:27:62:
93:fb:6b:d7:a7:41:64:0f:53:57:92:92:ae:69:f2:
07:2a:f5:ae:1c:09:fc:ac:5f:58:cf:5b:ab:eb:64:
5e:b9:83:3e:f5:ea:07:51:0a:1d:c8:03:68:04:d7:
05:b9:11:fc:f8:a9:da:54:af:b9:41:16:65:63:4f:
93:04:75:28:3e:64:57:21:75:85:25:c1:81:50:54:
a0:ef:14:8a:11:72:93:d7:bb:77:81:f9:61:65:d3:
cb:e4:f2:d4:69:ec:06:df:67:8e:1c:84:fe:78:8f:
71:83:79:76:18:43:e9:39:ed:f2:b8:6e:a7:a9:ab:
8d:98:2b:3e:5e:3a:80:e9:18:5d:a5:42:cc:b6:69:
9a:96:1a:cf:41:7c:0d:a6:1c:2e:26:5a:05:c7:ab:
37:7d:5d:24:5f:f1:bd:41:94:cf:63:ad:5a:c8:c0:
d4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C7:9E:F0:F7:68:01:47:3E:D4:2D:D6:54:F9:33:48:EB:07:BE:7B
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/H8ee8PdoAUc-1C3WVPkzSOsHvns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
141.11.6.0/24
141.11.19.0-141.11.20.255
141.11.104.0/22
141.11.112.0-141.11.159.255
141.11.192.0/19
Signature Algorithm: sha256WithRSAEncryption
5c:95:59:6a:7a:b0:97:d8:b8:57:5d:4a:2b:30:12:67:fd:8d:
92:3b:16:42:15:21:57:08:d0:7d:12:93:d2:53:ae:86:dd:b3:
4d:4d:da:b9:d8:2e:d3:7e:8a:a3:3f:a6:a2:a4:c4:34:d4:b2:
b4:f1:a3:af:10:35:1f:a2:22:73:5f:0f:d0:a2:63:0e:54:26:
c8:85:8c:04:28:0d:0f:2a:32:9b:b6:c9:4a:fb:80:2b:e9:42:
b0:00:d2:c2:28:6b:34:98:9a:bf:47:49:d8:a9:4f:07:22:1f:
b7:fd:a2:bb:7c:4a:c2:bb:63:af:f7:bf:e4:5c:0b:73:76:c9:
f1:8d:19:8d:34:05:b4:cd:6c:c2:a6:fa:28:4a:10:13:d7:45:
46:24:09:1e:b5:96:39:9c:1a:07:d3:1d:0c:66:8c:3f:f8:4b:
a4:61:78:ce:a3:ac:36:d6:c2:b3:05:aa:b7:37:c3:70:a0:f7:
67:f5:6e:16:ec:09:36:25:92:8d:65:b1:13:1e:e8:af:c8:5b:
c6:aa:79:a5:a2:9a:ce:eb:c6:aa:94:bd:47:d1:bc:fa:55:b8:
bc:7d:92:1d:7d:38:74:f0:2c:64:9a:6c:7e:09:e3:45:37:3a:
f2:f4:f5:41:76:1a:88:c9:53:ad:b5:6a:6c:8c:d1:23:0e:d1:
f1:96:92:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:14 2023 by rpki-client on console-fra.rpki-client.org