Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/PFVws5Kh1nYq0qKSh62tXyEyA1c.roa
File: PFVws5Kh1nYq0qKSh62tXyEyA1c.roa (raw, json)
Hash identifier: utkTCJHrmxAzQSFqoIbm4bQDd2V9HO1Voxb7BvnbIY0=
Subject key identifier: 3C:55:70:B3:92:A1:D6:76:2A:D2:A2:92:87:AD:AD:5F:21:32:03:57
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 037DF29B
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/PFVws5Kh1nYq0qKSh62tXyEyA1c.roa
Signing time: Tue 15 Mar 2022 09:05:37 +0000
ROA not before: Tue 15 Mar 2022 09:05:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210443
IP address blocks: 141.11.224.0/22 maxlen: 24
141.11.230.0/23 maxlen: 24
141.11.228.0/23 maxlen: 24
141.11.232.0/22 maxlen: 24
141.11.236.0/22 maxlen: 24
141.11.98.0/24 maxlen: 24
141.11.103.0/24 maxlen: 24
141.11.101.0/24 maxlen: 24
141.11.102.0/24 maxlen: 24
141.11.100.0/24 maxlen: 24
141.11.99.0/24 maxlen: 24
141.11.110.0/24 maxlen: 24
141.11.124.0/24 maxlen: 24
141.11.125.0/24 maxlen: 24
141.11.123.0/24 maxlen: 24
141.11.121.0/24 maxlen: 24
141.11.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58585755 (0x37df29b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Mar 15 09:05:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c5570b392a1d6762ad2a29287adad5f21320357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f1:7a:04:6e:9f:88:e3:90:cc:d3:14:5b:38:
c7:9e:5c:14:09:d3:dd:c3:2b:f7:ef:a4:88:c0:44:
2c:df:5a:aa:2b:14:9f:dd:2f:f1:a8:fe:83:19:81:
54:fb:2c:9b:93:77:e7:2e:26:ff:2c:d7:0c:6d:ba:
df:e2:ce:49:ec:ad:3e:52:b8:c9:3d:f9:fe:1f:45:
5c:df:28:42:a4:4c:99:60:14:3a:92:7e:f9:c6:4c:
2b:70:0f:ae:34:d1:92:c6:7c:94:97:d5:9c:a1:be:
aa:e0:b5:ca:c6:95:5e:97:27:a0:bb:e9:73:12:d9:
5d:fe:c7:c7:b9:5b:97:24:dc:49:78:7f:cd:d8:5b:
52:b4:ba:8e:96:2f:47:1e:fe:8c:80:8f:78:9d:7e:
71:13:25:a4:80:25:91:46:a0:93:9f:35:ac:ff:2d:
2c:4c:7c:fd:66:ea:18:70:ea:29:49:f4:07:e3:b4:
cc:b0:4d:f3:f3:86:ed:7e:c7:27:ef:e4:5d:7e:40:
ba:93:54:5f:a6:5a:9d:38:5a:77:83:d7:ef:30:2a:
cb:62:df:46:99:9c:3f:cb:bf:22:88:c7:6a:5e:76:
76:d1:d3:d2:4a:31:89:0a:e5:78:99:40:45:84:0d:
fc:84:03:a6:92:d7:99:25:de:64:fa:b1:c2:81:fd:
4a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:55:70:B3:92:A1:D6:76:2A:D2:A2:92:87:AD:AD:5F:21:32:03:57
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/PFVws5Kh1nYq0qKSh62tXyEyA1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.98.0-141.11.103.255
141.11.110.0/24
141.11.121.0/24
141.11.123.0-141.11.126.255
141.11.224.0/20
Signature Algorithm: sha256WithRSAEncryption
44:8f:18:d5:df:1d:62:db:4b:db:90:3d:c0:59:f1:f2:56:42:
1c:e1:26:ff:a6:f1:56:2a:77:95:c3:79:55:ea:d1:89:17:2c:
88:4b:07:34:b4:d4:f0:2c:39:c4:08:83:34:b5:3a:71:08:85:
4a:9e:f6:4d:c0:4f:0a:fc:20:38:04:43:5a:d2:97:b8:c0:5b:
f2:d8:10:f7:15:aa:a8:1b:a4:42:3a:a0:06:7e:7f:a0:7c:be:
0f:54:db:3b:10:42:42:8f:01:2b:74:fe:79:6e:f5:c4:90:35:
65:f6:1a:67:23:4b:91:df:80:d4:fe:5c:41:b1:26:7c:f4:35:
f1:6c:21:71:63:e2:31:7d:7c:ca:01:06:34:9d:62:3c:02:54:
71:59:8d:ef:0c:4d:26:1d:d7:b6:76:43:f8:21:ff:bd:de:09:
de:04:91:b3:47:c4:cc:9f:f2:1c:ee:54:14:e3:4a:82:4c:a1:
a3:40:08:47:19:4a:c6:f0:91:ea:cd:1b:7e:b0:15:7a:fa:fd:
14:d5:6b:a5:e5:19:3e:3f:43:11:6f:0e:85:49:d0:e0:19:cc:
68:2f:f5:93:f3:c2:0c:59:f0:b0:6b:9c:58:67:ff:1a:75:e3:
ac:18:70:9a:45:40:ac:23:58:4b:69:34:ab:7b:e0:56:fe:79:
77:54:ee:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-fra.rpki-client.org