Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/LFQj0mkOMp9_AKC2ydwnxTwgoUg.roa
File: LFQj0mkOMp9_AKC2ydwnxTwgoUg.roa (raw, json)
Hash identifier: Ft7qOjIAEan4lbixnnS8+1ljLCQaWIcSS339B8L7OoI=
Subject key identifier: 2C:54:23:D2:69:0E:32:9F:7F:00:A0:B6:C9:DC:27:C5:3C:20:A1:48
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0184C7FA5251A67CD11260108297AF464E50
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/LFQj0mkOMp9_AKC2ydwnxTwgoUg.roa
Signing time: Wed 30 Nov 2022 09:59:41 +0000
ROA not before: Wed 30 Nov 2022 09:59:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 141.11.220.0/22 maxlen: 24
141.11.232.0/22 maxlen: 24
141.11.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c7:fa:52:51:a6:7c:d1:12:60:10:82:97:af:46:4e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 30 09:59:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c5423d2690e329f7f00a0b6c9dc27c53c20a148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4b:3d:e4:b4:af:8c:a9:33:67:87:81:61:eb:
1e:83:5a:30:4d:74:67:be:21:2d:29:21:67:18:72:
2e:fe:e7:b3:ca:f7:7b:a8:8d:85:81:2b:42:8a:20:
59:e3:86:bb:55:15:f2:1f:33:01:7a:d9:b4:ac:21:
26:e2:af:32:f9:c8:8a:89:ec:6b:f4:1a:4c:96:9c:
0f:30:c3:2c:51:b6:e6:b7:01:cb:4f:97:ee:55:77:
06:6b:2b:15:31:f3:5e:ec:64:5d:eb:ad:14:30:32:
f0:86:be:cc:bc:6a:46:20:e7:7b:cd:19:a6:ff:2b:
b2:8f:1b:ea:64:3a:3d:76:9d:4c:57:f9:54:4e:95:
d4:67:46:24:03:5b:b1:d3:67:9a:b4:a7:bf:86:19:
08:20:78:f0:8f:5c:94:7b:7c:c6:a5:19:5c:04:10:
48:68:ea:cc:c4:b8:ce:44:f6:34:d5:ae:b3:2c:63:
05:58:ef:87:39:62:e6:8b:f8:b3:3a:fa:0d:a0:c0:
d1:55:77:56:39:51:71:30:75:7b:f2:26:31:eb:ef:
2c:4d:08:6a:50:aa:b7:56:bf:3d:aa:15:24:b1:ad:
c0:3f:1b:43:21:ec:df:6b:40:4b:37:66:79:6c:20:
18:d8:cc:b7:a5:7e:81:7c:0d:69:a9:1d:83:a7:58:
08:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:54:23:D2:69:0E:32:9F:7F:00:A0:B6:C9:DC:27:C5:3C:20:A1:48
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/LFQj0mkOMp9_AKC2ydwnxTwgoUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.144.0/22
141.11.220.0/22
141.11.232.0/22
Signature Algorithm: sha256WithRSAEncryption
25:71:d9:9a:e4:10:5a:81:f0:99:18:d7:b5:6c:be:ee:76:02:
08:67:fa:17:33:0c:fd:1f:b7:01:e7:05:ab:e1:e6:ba:00:1e:
da:8d:bc:1b:f1:08:b0:e8:e4:d9:85:2d:b6:22:9b:49:56:77:
b7:dc:3b:91:f1:80:ef:21:d5:1a:09:49:d2:36:5d:20:03:45:
8f:97:a9:8e:a1:e4:bc:68:e7:a2:2c:fe:73:6f:d4:46:bc:49:
e6:c9:73:d4:82:5e:e2:b0:7b:42:e5:f5:ff:7b:24:20:b2:bb:
4a:ba:8d:89:d6:bc:2a:8e:0d:c9:f7:1a:c9:6a:42:fe:b5:41:
f1:ac:3f:49:0a:ad:16:3c:4e:a4:79:11:64:44:34:25:13:05:
77:9c:97:e7:e4:35:b9:cf:58:d0:3b:3a:9a:f0:68:c5:74:6b:
29:11:ce:41:eb:fb:00:c2:f6:75:21:cd:cb:ca:42:d6:16:3e:
e7:a7:89:e9:22:6c:51:fb:11:92:e8:2b:ea:e6:47:18:71:37:
6a:70:be:04:81:13:5a:96:69:2d:f8:84:d2:fd:76:10:4a:21:
a4:3f:24:4f:11:e4:4e:62:a6:7c:8b:7d:b4:94:8b:bf:d2:a5:
c3:be:1e:21:03:ba:fc:bb:c5:ae:be:82:ac:43:f5:e1:41:1a:
b4:22:d4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org