Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/UFnnZQM_00WhZDKAPafpSNG_LV8.roa
File: UFnnZQM_00WhZDKAPafpSNG_LV8.roa (raw, json)
Hash identifier: ZJSoD/ipdLgIeSO+ZFK6gj7xt6uy/8lNvh1cmZf4C78=
Subject key identifier: 50:59:E7:65:03:3F:D3:45:A1:64:32:80:3D:A7:E9:48:D1:BF:2D:5F
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0182AC76BE0F1DFFD6AA4685103FD7446B41
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/UFnnZQM_00WhZDKAPafpSNG_LV8.roa
Signing time: Wed 17 Aug 2022 15:40:39 +0000
ROA not before: Wed 17 Aug 2022 15:40:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 141.11.192.0/21 maxlen: 24
141.11.200.0/21 maxlen: 24
141.11.98.0/24 maxlen: 24
141.11.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ac:76:be:0f:1d:ff:d6:aa:46:85:10:3f:d7:44:6b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Aug 17 15:40:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5059e765033fd345a16432803da7e948d1bf2d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:f7:93:69:b7:91:e1:5f:50:f9:15:cd:b7:
31:f1:08:b0:ef:11:37:59:1d:5b:90:5a:0f:4f:1a:
7a:e9:d6:6d:38:14:00:48:8d:9a:c1:1d:57:9f:9c:
cf:dc:05:e5:08:68:bf:68:1a:da:55:3f:1f:9e:40:
26:98:d4:15:33:25:45:0a:17:40:df:72:a7:c0:86:
ac:ff:66:c6:54:bc:b2:96:d4:41:a7:f0:59:8a:f2:
da:1e:6e:6a:c0:40:0a:ce:2f:70:40:10:1a:a0:26:
83:d2:51:d0:8b:d3:a7:2f:00:b9:34:b9:04:78:62:
91:45:6c:df:cf:2e:04:c0:5c:87:73:17:49:40:b6:
92:78:8e:46:61:cf:50:81:54:e9:c1:fb:58:ae:c0:
7b:6f:e0:c6:08:36:07:98:29:61:55:51:8f:5d:6a:
dc:f7:8f:c5:4f:33:1d:22:c4:22:ba:8e:23:d0:90:
19:20:eb:be:98:a0:ef:ea:a1:61:5f:ea:b5:7b:2e:
12:36:c6:0b:5a:e9:5c:96:92:56:6e:3d:53:de:6d:
65:7f:91:09:97:dc:cb:35:f0:6b:78:90:ec:bf:3e:
70:67:4d:73:23:3e:11:3f:16:a0:7c:f3:ba:a4:9c:
49:4a:7e:63:0b:82:60:9e:22:d6:6e:5b:cf:9d:a1:
b6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:59:E7:65:03:3F:D3:45:A1:64:32:80:3D:A7:E9:48:D1:BF:2D:5F
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/UFnnZQM_00WhZDKAPafpSNG_LV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.98.0/24
141.11.192.0/19
Signature Algorithm: sha256WithRSAEncryption
5e:b8:f9:3c:f3:5d:f9:52:50:8c:0f:44:de:b5:86:81:79:96:
4a:28:cb:f5:bd:fd:18:51:0f:e4:6a:f9:42:cc:fc:40:c9:1f:
bb:1f:e3:42:4b:50:92:db:af:04:31:d9:b6:fe:8d:1d:ac:28:
d5:d5:fd:e2:3f:e6:39:e2:4d:7f:5e:98:78:31:16:13:4e:88:
c1:d3:29:52:3c:f6:fe:00:7f:f1:cb:2f:46:ff:e8:77:33:35:
36:9d:5f:c1:8d:3c:45:5f:b7:22:f1:40:c9:dd:55:22:c8:60:
b3:8c:31:45:6e:1b:5d:ef:4a:39:ba:a9:5a:3c:a8:a0:47:3f:
7a:0f:56:21:59:53:9a:bd:16:91:7d:0e:a0:d0:ec:71:d7:5a:
cf:3d:14:7f:ac:38:bd:fb:ac:96:4f:57:e4:0b:5a:66:68:9c:
96:f3:e0:79:0a:fc:bc:57:c8:96:59:ef:d7:3b:b1:26:b4:fd:
f2:df:e8:17:1d:75:b3:ee:ef:6c:40:c1:25:94:02:6a:80:11:
44:4e:0f:3a:e6:55:7d:85:cb:31:1b:28:56:a4:ac:0f:d9:c7:
9c:b0:90:c2:b4:d7:c2:51:1d:0e:ca:84:77:64:cf:a9:e4:44:
69:7f:5f:84:7a:71:d8:d1:70:1e:3d:e8:f7:ea:d8:77:4d:2e:
87:4a:25:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-fra.rpki-client.org