Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/T3Jp7Qq857LymWM7VaNdtkaqM9o.roa
File: T3Jp7Qq857LymWM7VaNdtkaqM9o.roa (raw, json)
Hash identifier: 3WU4V7MTNvCyBFunL34ScrAHKt5I5hL9p+q2+90cDAY=
Subject key identifier: 4F:72:69:ED:0A:BC:E7:B2:F2:99:63:3B:55:A3:5D:B6:46:AA:33:DA
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 03542B46
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/T3Jp7Qq857LymWM7VaNdtkaqM9o.roa
Signing time: Fri 04 Mar 2022 11:28:21 +0000
ROA not before: Fri 04 Mar 2022 11:28:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 141.11.192.0/19 maxlen: 24
141.11.104.0/22 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.6.0/24 maxlen: 24
141.11.127.0/24 maxlen: 24
141.11.128.0/19 maxlen: 24
141.11.20.0/24 maxlen: 24
141.11.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55847750 (0x3542b46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Mar 4 11:28:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f7269ed0abce7b2f299633b55a35db646aa33da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:af:f0:0a:ed:d8:26:90:69:8f:4f:28:e5:7d:
0a:88:34:0b:68:6a:dd:ad:66:0c:f5:89:c0:8b:a6:
7d:44:fc:52:3e:b2:e2:48:02:02:05:7e:17:37:79:
a3:7e:f8:73:fc:6e:2d:fb:75:23:89:e7:92:71:47:
cc:2a:88:1d:df:bb:d2:b9:c8:0d:c9:87:cb:a1:aa:
a5:a1:7b:21:07:db:78:3b:ad:3a:c8:3c:fc:3c:6d:
32:a0:a1:9f:a2:89:34:49:ad:bb:38:47:1d:b6:9a:
80:22:ae:eb:10:41:25:a4:6b:a1:1d:a8:4f:6e:cb:
ff:73:98:29:0e:ed:cf:e6:a6:76:d9:51:70:d6:07:
35:89:78:87:3f:76:c7:cf:5d:b2:5d:36:a1:c7:32:
47:65:16:03:ba:86:3b:e8:c2:bb:8c:a8:9a:39:da:
7b:8f:5a:70:a9:de:57:ec:73:aa:ab:13:ed:cf:e3:
ec:a2:84:73:cf:56:22:9e:04:b7:4e:30:2a:bf:a9:
b1:02:56:d5:40:b5:2f:fd:4f:f9:2e:82:79:68:cb:
a9:32:67:0c:e2:1f:d9:ab:c8:b8:04:cb:6a:ec:00:
e8:18:f6:3d:45:9e:a6:bc:37:5a:26:9a:fa:eb:93:
71:84:55:41:89:48:33:d5:a5:9d:49:77:71:68:82:
d7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:72:69:ED:0A:BC:E7:B2:F2:99:63:3B:55:A3:5D:B6:46:AA:33:DA
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/T3Jp7Qq857LymWM7VaNdtkaqM9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
141.11.6.0/24
141.11.19.0-141.11.20.255
141.11.104.0/22
141.11.127.0-141.11.159.255
141.11.192.0/19
Signature Algorithm: sha256WithRSAEncryption
5d:79:6a:cb:35:d9:8f:18:b0:b2:c4:3f:71:a0:40:85:37:4e:
e3:da:a5:9e:42:1d:46:3e:ae:ab:22:f8:af:69:0b:2e:7e:4f:
64:81:e3:95:61:14:b8:3b:6e:c8:0e:e1:f1:10:a9:cb:4b:7d:
55:f1:61:38:b5:79:4d:f7:04:d0:7b:5a:79:66:90:71:d6:4e:
5e:8d:c0:08:b6:96:be:a0:05:90:fc:e4:c5:54:36:7a:38:6f:
80:a1:87:bd:a1:ee:20:53:bb:1f:0d:e6:38:16:e1:48:fd:da:
84:a6:21:5f:3a:60:98:34:7a:02:15:2c:fe:ca:18:aa:4d:b1:
d7:f0:40:63:a2:f9:c8:c7:9e:3d:d2:56:e1:e5:0f:30:f5:33:
13:eb:3c:92:e8:90:2b:45:ac:72:ce:42:d7:b5:96:f8:8f:e5:
ea:3b:76:da:0e:2b:11:bf:30:f4:f3:e6:8f:3b:f4:06:a2:1a:
d8:19:89:23:07:69:d8:32:7a:cf:51:43:56:dd:b6:c3:87:e0:
e1:71:c1:ee:f1:4c:d2:45:76:46:6e:d5:d1:6c:89:39:c7:ef:
0c:4a:1a:ab:16:95:f5:a2:71:c7:06:53:4f:96:fe:d0:27:4e:
cf:7b:85:4c:f8:a2:14:7e:8b:d4:8a:7b:c7:05:32:62:67:95:
ce:9d:e1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org