Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/KOnvJD7hEDEkoa399oS3kDoM41U.roa
File: KOnvJD7hEDEkoa399oS3kDoM41U.roa (raw, json)
Hash identifier: YtmgUS2cClkKmTIAPQ/gu9ubhS8EvaGcxsYY2DlHlhc=
Subject key identifier: 28:E9:EF:24:3E:E1:10:31:24:A1:AD:FD:F6:84:B7:90:3A:0C:E3:55
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01822010295179F62A28E0B611DBB6B0C71F
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/KOnvJD7hEDEkoa399oS3kDoM41U.roa
Signing time: Thu 21 Jul 2022 09:21:46 +0000
ROA not before: Thu 21 Jul 2022 09:21:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 141.11.168.0/23 maxlen: 24
141.11.189.0/24 maxlen: 24
141.11.88.0/23 maxlen: 24
141.11.90.0/23 maxlen: 24
141.11.96.0/24 maxlen: 24
141.11.102.0/24 maxlen: 24
141.11.5.0/24 maxlen: 24
141.11.121.0/24 maxlen: 24
141.11.26.0/24 maxlen: 24
141.11.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:10:29:51:79:f6:2a:28:e0:b6:11:db:b6:b0:c7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 21 09:21:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28e9ef243ee1103124a1adfdf684b7903a0ce355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9a:99:68:06:d8:8e:23:d1:fd:12:36:ca:12:
3e:0c:03:36:30:4d:a4:3a:72:ab:d5:dd:92:40:ed:
26:0a:a6:dc:52:89:21:87:7b:91:a2:80:37:c4:a7:
ca:3b:b5:d8:41:9c:61:09:d9:20:e9:78:11:3e:c0:
22:f6:de:07:91:c5:52:a9:1a:5e:6e:a1:8e:a1:e1:
ef:b4:f7:76:3c:22:7d:53:48:aa:5c:a6:f0:65:e1:
16:fe:31:ca:50:15:c2:14:5c:de:60:94:60:a4:62:
c7:5c:cb:50:2e:47:08:e4:49:1a:f8:44:ed:cc:81:
ca:5b:12:9b:2d:0d:70:c3:36:d8:36:fa:20:fd:e2:
88:d4:02:25:27:db:cf:75:14:bd:43:88:3f:92:11:
c2:34:76:e0:95:e7:df:17:b8:ce:83:4c:13:2c:11:
46:88:00:d7:c9:c5:76:d6:1b:8e:27:7d:52:4f:ad:
c1:84:e6:da:09:bf:5e:9e:b8:c9:ce:e4:40:c6:e3:
6e:fa:45:3c:64:9c:97:2b:1c:6c:ee:1f:a9:a0:e1:
95:f1:21:cf:b0:0e:08:42:e8:f8:94:78:c4:f9:29:
fa:8e:9a:ef:7d:75:be:fa:3b:44:ca:a4:13:47:81:
15:fe:d1:e6:69:07:da:64:59:fb:e4:ce:b6:8d:f3:
4f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E9:EF:24:3E:E1:10:31:24:A1:AD:FD:F6:84:B7:90:3A:0C:E3:55
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/KOnvJD7hEDEkoa399oS3kDoM41U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
141.11.26.0/23
141.11.88.0/22
141.11.96.0/24
141.11.102.0/24
141.11.121.0/24
141.11.168.0/23
141.11.189.0/24
Signature Algorithm: sha256WithRSAEncryption
25:0e:0c:0f:ee:08:b1:a9:ef:4b:d2:9b:2d:e9:82:6f:b3:e2:
98:00:26:9f:77:0a:6b:4a:ad:2b:2f:58:4d:1d:15:e0:12:e8:
d4:78:a4:5e:16:bc:2d:b1:c5:13:0e:fa:24:e5:a1:a5:18:0a:
19:52:72:ef:83:0c:59:f7:45:d5:59:e3:c6:eb:e1:28:8f:80:
5c:64:b6:11:49:91:f3:01:10:5a:39:06:d4:24:3a:19:15:41:
dd:36:86:c3:91:7b:75:27:dd:bf:e9:4c:2f:16:bc:48:8e:53:
20:63:23:d1:f3:7f:fe:13:ee:52:fe:39:89:8e:72:7f:b9:ee:
a6:97:67:6f:a7:d2:30:b7:b9:00:47:62:25:18:dd:22:97:1d:
bf:27:9c:f0:38:9a:00:14:08:aa:9d:46:5f:da:b3:c8:25:0f:
3a:ad:b9:7f:f1:f0:c7:fc:39:00:c8:1a:6d:81:bd:ab:c7:5a:
43:79:b5:87:48:1d:af:44:58:7c:7d:c6:4e:86:5e:30:0a:84:
3f:d8:75:a4:23:39:31:9e:7a:78:c0:c6:26:65:fa:12:1d:ed:
51:bc:85:79:6a:f9:1b:41:5e:0c:7a:9c:bf:ec:f0:61:f9:4a:
39:78:3c:c0:8d:f5:ff:ef:dc:16:de:bd:dc:c3:b3:4d:b3:40:
f6:a1:fe:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org