Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/REiftvpOcfHUiaCcIFJA5TmAfqw.roa
File: REiftvpOcfHUiaCcIFJA5TmAfqw.roa (raw, json)
Hash identifier: /6HVBEdYPkYZSt9cVNQn0257ZcWUfHSPtfVZHk/NEgg=
Subject key identifier: 44:48:9F:B6:FA:4E:71:F1:D4:89:A0:9C:20:52:40:E5:39:80:7E:AC
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04D3A5DB
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/REiftvpOcfHUiaCcIFJA5TmAfqw.roa
Signing time: Tue 24 May 2022 14:29:57 +0000
ROA not before: Tue 24 May 2022 14:29:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 141.11.184.0/24 maxlen: 24
141.11.123.0/24 maxlen: 24
141.11.124.0/24 maxlen: 24
141.11.125.0/24 maxlen: 24
141.11.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80979419 (0x4d3a5db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 24 14:29:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44489fb6fa4e71f1d489a09c205240e539807eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:00:59:99:e7:bd:46:a3:d9:a8:26:82:0e:1a:
22:89:c3:64:50:14:13:d3:69:45:d1:61:37:5a:1b:
58:44:e8:5b:8d:71:11:10:b1:44:9c:69:2b:17:57:
57:63:32:ce:3d:2c:5c:27:97:1c:66:94:93:3c:95:
c0:b2:e1:02:54:cb:2f:aa:2f:7a:ce:82:68:55:e5:
2f:8a:4c:20:aa:a7:0e:35:0c:9f:d7:5c:04:ec:dd:
63:bf:ac:91:e3:d7:13:01:b6:97:7c:3a:d1:17:42:
20:8e:06:ef:d8:46:d1:cf:06:c4:2d:4a:d3:2d:fa:
da:68:31:37:ab:b0:46:52:0c:57:fd:a3:c4:1b:f2:
41:25:b6:b6:ee:eb:f6:d1:08:41:be:8d:c7:0e:51:
a9:a8:25:64:55:31:f2:e3:0f:ea:e8:85:3b:70:49:
0f:06:9e:4f:a8:eb:cd:be:86:8d:41:0d:65:22:74:
ca:45:b7:0d:36:e6:5f:eb:18:b2:b5:ab:06:84:e8:
f8:34:5f:a0:b8:c4:75:fd:e5:69:bf:0d:6f:88:cf:
b3:8c:ac:6d:90:88:c2:4b:7d:19:a3:ef:9c:ce:b0:
6e:64:bd:87:5b:34:37:f8:5c:56:2e:36:86:ad:c1:
bb:07:00:ae:87:73:e4:60:bd:d9:19:3b:a9:8b:fe:
51:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:48:9F:B6:FA:4E:71:F1:D4:89:A0:9C:20:52:40:E5:39:80:7E:AC
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/REiftvpOcfHUiaCcIFJA5TmAfqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.123.0-141.11.126.255
141.11.184.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:93:ed:ec:8d:6c:e0:bf:39:b6:0e:dc:c5:db:a7:e8:2e:d3:
7a:ae:32:b4:75:bf:b5:f6:d5:cf:59:f7:7a:1f:a4:27:31:d1:
22:dc:0f:94:8c:4b:8b:ea:c8:5b:64:88:76:45:5e:e4:a2:96:
c4:21:48:f5:8f:3a:ca:74:57:de:cd:4c:3e:e4:bc:a3:58:28:
bf:96:69:57:e1:e6:6c:35:91:ee:9e:f6:7a:cf:21:12:59:6e:
20:f3:d0:c6:0c:00:63:97:80:a2:ff:85:00:0e:a2:5c:cd:be:
5b:1c:e0:26:03:b7:9a:42:27:b8:4a:6f:0f:0b:f9:fa:c0:05:
6f:da:c7:2a:2b:a4:58:40:35:75:d3:15:56:b2:8a:44:ea:e5:
a2:8e:98:f4:6c:6a:48:7b:b5:5d:19:3f:c9:e7:3e:98:b5:c3:
12:e8:22:81:a9:23:37:c2:a0:35:d1:02:6a:31:d8:40:97:94:
95:12:49:c2:66:7d:c6:85:0d:98:26:c6:d4:55:f5:e4:31:17:
53:ba:ec:9d:85:96:c3:4e:bf:55:82:95:6b:30:a3:0b:ce:ef:
18:cd:8c:23:04:9a:13:ca:cc:43:ad:96:fe:84:d7:65:9d:b0:
44:39:9f:f9:4d:32:af:62:12:0e:36:4e:8f:54:30:b7:90:8f:
b6:5c:83:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org