Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/PC8UHXGvr4bg6SiFxfIMFO176J8.roa
File: PC8UHXGvr4bg6SiFxfIMFO176J8.roa (raw, json)
Hash identifier: eJJl3ywg/WCpjdFcSJPFy+WfBex1qyyytSIDKVg3AXA=
Subject key identifier: 3C:2F:14:1D:71:AF:AF:86:E0:E9:28:85:C5:F2:0C:14:ED:7B:E8:9F
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0183409F7937C118B8EE8A9F2895B6B9E476
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/PC8UHXGvr4bg6SiFxfIMFO176J8.roa
Signing time: Thu 15 Sep 2022 10:08:56 +0000
ROA not before: Thu 15 Sep 2022 10:08:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.11.44.0/22 maxlen: 24
141.11.40.0/22 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.42.0/24 maxlen: 24
141.11.41.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.0.0/24 maxlen: 24
141.11.10.0/23 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.22.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.33.0/24 maxlen: 24
141.11.32.0/24 maxlen: 24
141.11.160.0/24 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.189.0/24 maxlen: 24
141.11.187.0/24 maxlen: 24
141.11.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:40:9f:79:37:c1:18:b8:ee:8a:9f:28:95:b6:b9:e4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 15 10:08:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c2f141d71afaf86e0e92885c5f20c14ed7be89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:66:e4:f8:9b:4c:ed:94:a5:53:26:6a:96:e7:
8d:7b:84:13:ef:9e:a1:77:7b:8f:4d:09:61:cd:b7:
58:f8:89:fe:46:ef:10:e3:79:fa:21:5d:40:97:8b:
77:8e:7b:c4:02:9b:4b:e1:61:df:e3:4c:72:87:dc:
1a:02:84:48:9c:2d:c8:5f:cd:45:7c:eb:e0:80:d5:
33:00:34:4d:90:2b:09:be:78:77:32:c9:c7:48:68:
46:b5:5a:2f:d5:74:be:4d:4e:31:74:4e:e7:98:b1:
17:7e:bd:71:7b:c8:96:9c:b8:23:04:2d:ae:a4:19:
f6:81:f4:87:2d:05:29:0c:6d:7e:42:9b:64:f5:c2:
12:a2:54:dc:cb:c5:9c:9e:8e:47:26:97:0a:df:e2:
cd:14:4e:e5:cd:16:68:19:f4:aa:08:d7:80:60:33:
af:5b:2d:a1:99:98:41:4c:74:62:21:33:af:e6:98:
3d:a4:95:b0:ae:16:6a:09:a9:ef:b2:25:dc:12:b1:
76:8b:e1:9c:36:51:07:53:c1:9b:db:50:5f:39:95:
fe:e4:01:0c:7b:5d:94:50:62:3c:e2:2b:fc:36:59:
53:99:5e:94:ed:c9:61:99:36:cb:34:0d:39:2d:98:
ab:8b:a8:bb:83:cd:83:bd:34:42:18:a8:45:27:7a:
c7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2F:14:1D:71:AF:AF:86:E0:E9:28:85:C5:F2:0C:14:ED:7B:E8:9F
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/PC8UHXGvr4bg6SiFxfIMFO176J8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0/24
141.11.2.0/24
141.11.10.0/23
141.11.17.0-141.11.18.255
141.11.21.0-141.11.22.255
141.11.25.0/24
141.11.28.0/24
141.11.31.0-141.11.33.255
141.11.39.0-141.11.47.255
141.11.99.0/24
141.11.160.0/24
141.11.176.0/24
141.11.182.0/23
141.11.187.0/24
141.11.189.0/24
Signature Algorithm: sha256WithRSAEncryption
80:68:7a:24:5a:75:20:02:7a:d8:b7:b9:b8:43:59:5f:e6:4f:
e1:7d:c2:d2:b7:75:c8:03:88:f7:c2:cb:8c:df:e9:b7:1b:73:
f8:74:50:37:3d:a3:05:5d:f3:ef:46:54:dd:fe:88:c7:2a:e6:
2e:e8:80:04:ba:f8:7f:55:5a:1f:82:d5:c8:aa:03:fe:3b:d1:
91:e1:73:40:42:91:f1:4d:2e:52:bb:74:21:0d:23:f5:6f:a9:
2b:6e:3b:0d:e3:eb:e3:d3:c2:fc:ab:5f:1d:dc:f0:34:29:a7:
d7:23:61:93:bc:1f:fc:40:79:2e:1b:c5:f7:df:2f:fd:ab:46:
9c:71:1d:40:02:cd:3c:18:4f:c8:36:26:5c:a3:1b:18:6c:95:
81:89:0d:d9:b8:8c:8a:80:6e:82:be:24:b7:1b:53:51:71:eb:
7c:f3:16:7a:3a:f1:1c:e5:24:31:36:ec:ec:73:ac:4a:63:a3:
11:88:87:ea:f3:1f:c6:98:b4:f3:08:a7:0a:e2:86:5e:69:44:
60:1f:4b:f9:99:e2:55:a5:c1:a0:3e:6d:eb:22:6e:c9:6c:c8:
ec:c2:02:76:11:64:bf:b8:57:3f:7b:8a:94:0d:2b:fe:16:45:
58:5e:3a:0e:c8:65:2a:f3:e1:e4:65:27:a5:ab:77:98:8c:af:
1b:de:c4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org