Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/K1oO4_Nf_o9HFuNvk1nKs0JP_Lg.roa
File: K1oO4_Nf_o9HFuNvk1nKs0JP_Lg.roa (raw, json)
Hash identifier: +Qjsh8HPZok1ipP+9ddEZ9liyC7DG7jz6/EKmsH8s7I=
Subject key identifier: 2B:5A:0E:E3:F3:5F:FE:8F:47:16:E3:6F:93:59:CA:B3:42:4F:FC:B8
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 048E1EF6
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/K1oO4_Nf_o9HFuNvk1nKs0JP_Lg.roa
Signing time: Wed 11 May 2022 15:00:04 +0000
ROA not before: Wed 11 May 2022 15:00:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.11.44.0/22 maxlen: 24
141.11.43.0/24 maxlen: 24
141.11.40.0/22 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.42.0/24 maxlen: 24
141.11.41.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.80.0/20 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.0.0/24 maxlen: 24
141.11.10.0/23 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.22.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.37.0/24 maxlen: 24
141.11.33.0/24 maxlen: 24
141.11.32.0/22 maxlen: 24
141.11.35.0/24 maxlen: 24
141.11.160.0/24 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.192.0/19 maxlen: 24
141.11.92.0/22 maxlen: 24
141.11.128.0/19 maxlen: 24
141.11.232.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76422902 (0x48e1ef6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 11 15:00:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b5a0ee3f35ffe8f4716e36f9359cab3424ffcb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:67:c8:4c:c3:81:6c:ed:09:5f:0b:28:22:d7:
47:f3:06:91:35:85:35:22:a9:93:e2:1e:87:2b:41:
20:b7:4c:fa:d4:82:c5:17:61:ae:fa:c0:74:ee:88:
e3:a4:9e:c1:06:63:02:c6:52:2d:8c:18:8c:dc:0c:
65:86:0a:57:b3:ee:3a:2a:d7:e2:d2:03:83:cf:fa:
a5:ab:6d:4c:11:5b:bf:62:e8:fc:1f:b8:a0:af:b7:
ab:45:db:93:a7:2c:1c:f7:ef:96:5b:77:16:ac:04:
ff:4c:4a:a8:6a:26:eb:b6:6d:81:70:c2:d6:c4:52:
8f:2f:84:87:cd:c7:e6:a5:df:e4:32:2b:ab:26:ac:
ed:eb:74:fe:2d:49:28:d8:c2:3f:97:22:66:19:a8:
9c:78:49:64:e2:f2:2f:3a:bd:07:f0:3c:62:e3:0f:
db:5a:58:80:5f:e1:8d:b6:6b:99:39:16:6f:df:0e:
11:41:25:ce:0d:00:10:63:bc:f9:c5:ce:8c:e0:10:
81:52:0d:e6:4c:ef:5e:fc:4b:b5:3b:91:fb:b7:84:
d7:4b:57:62:fd:44:3c:ce:76:a1:ec:0e:0f:d1:89:
ad:12:de:5b:db:2a:ba:d1:30:06:ef:02:1d:e7:b5:
75:bd:38:c4:7e:dc:13:b2:08:2b:33:8b:ac:94:91:
42:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5A:0E:E3:F3:5F:FE:8F:47:16:E3:6F:93:59:CA:B3:42:4F:FC:B8
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/K1oO4_Nf_o9HFuNvk1nKs0JP_Lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0-141.11.2.255
141.11.10.0/23
141.11.17.0-141.11.18.255
141.11.21.0-141.11.22.255
141.11.25.0/24
141.11.28.0/24
141.11.31.0-141.11.35.255
141.11.37.0/24
141.11.39.0-141.11.47.255
141.11.80.0/20
141.11.128.0-141.11.160.255
141.11.176.0/24
141.11.182.0/23
141.11.192.0/19
141.11.232.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:51:b0:ec:5c:e8:d7:dc:df:0f:44:fb:61:ff:30:bd:be:d9:
35:bc:5c:83:d5:a6:bb:c8:eb:66:2a:87:9c:01:60:6d:91:f5:
f3:94:3a:e9:8c:76:8e:14:38:5d:e2:8c:0a:83:34:c1:d3:3e:
92:70:f0:f7:13:55:18:a4:e5:18:aa:c6:2d:8d:9c:85:3a:0a:
63:99:0f:85:e6:2f:b5:ca:be:85:0f:b8:7c:a5:ec:be:75:0d:
f7:24:66:2a:e4:72:fa:44:7c:85:87:81:03:a7:7f:5f:df:76:
45:ed:d6:9f:d3:f1:38:43:88:c5:81:56:07:d6:6d:52:7a:8a:
cf:2d:1c:e7:55:b4:0b:58:f0:01:3c:68:e2:0e:ac:7a:69:d0:
f1:2d:5e:ea:90:f3:a4:bf:60:70:b5:ae:11:1d:c3:5b:a3:f6:
b5:7d:33:9c:d9:db:d0:8f:f3:0f:b2:93:43:0c:1b:1a:1b:fd:
9f:1a:de:24:a5:74:ce:28:c1:10:fc:c2:9f:0f:d1:b1:d4:81:
16:90:22:20:9e:b3:6d:57:c9:c1:4f:52:05:68:a9:cd:5f:88:
52:f9:8e:8c:ed:08:6b:5b:26:a6:46:af:5d:4e:61:2f:ef:fa:
d7:f3:9e:af:09:a9:d2:5f:b7:c3:1b:2b:26:d5:67:40:5a:2f:
b3:24:42:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org