Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/UwI-y_5fVDhnafHERUJlQXRXNPs.roa
File: UwI-y_5fVDhnafHERUJlQXRXNPs.roa (raw, json)
Hash identifier: IWagu5ZATIhDnOjTfT9Wqsjd88PgeEPwb0gIM1Dpg/4=
Subject key identifier: 53:02:3E:CB:FE:5F:54:38:67:69:F1:C4:45:42:65:41:74:57:34:FB
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 055BC8CE
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/UwI-y_5fVDhnafHERUJlQXRXNPs.roa
Signing time: Mon 04 Jul 2022 11:29:25 +0000
ROA not before: Mon 04 Jul 2022 11:29:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 141.11.152.0/22 maxlen: 24
141.11.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89901262 (0x55bc8ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 4 11:29:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53023ecbfe5f54386769f1c445426541745734fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fe:da:92:8d:c2:75:79:2f:90:cb:15:c9:42:
04:3c:68:1d:ed:3d:dc:c8:8d:c1:dd:11:77:f7:ea:
e7:27:7d:77:98:f9:b9:4a:df:0a:63:f6:ae:cc:5f:
23:43:38:fe:98:1b:f6:c8:ff:2d:ca:76:38:11:4a:
c0:6f:9a:40:55:40:7e:31:51:c9:ae:89:7d:00:29:
38:07:28:e1:2d:ef:37:38:38:0e:6b:80:35:7a:3d:
ca:1e:d2:e7:02:cf:d9:e3:38:78:77:49:93:66:ca:
8c:93:d0:b1:26:ed:a4:05:b7:22:8a:ac:73:67:17:
14:21:5b:85:53:d6:41:98:65:25:1b:40:bd:c6:f2:
4d:4d:00:fa:3f:38:48:2a:f2:18:ba:d8:25:71:a3:
08:61:0e:41:49:28:ac:20:5f:04:c9:14:c0:33:4a:
da:a5:f7:42:56:1e:aa:cc:87:aa:86:a2:e5:2e:f6:
ba:76:7c:e9:c6:8b:2c:31:a4:66:3a:07:d5:ee:35:
3d:5f:fb:e6:6c:71:93:42:7e:2e:3b:2d:33:1b:66:
95:3e:8c:3d:60:74:64:58:94:74:06:bf:e5:65:27:
19:95:af:cf:3c:35:af:da:ba:3b:91:0f:41:98:33:
de:9e:34:98:69:3d:14:bf:09:f8:c2:74:79:4b:fe:
51:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:02:3E:CB:FE:5F:54:38:67:69:F1:C4:45:42:65:41:74:57:34:FB
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/UwI-y_5fVDhnafHERUJlQXRXNPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.152.0/22
141.11.178.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:71:a4:d8:80:a5:b8:a7:76:02:5f:4a:fb:10:43:f0:69:9c:
77:0e:a7:77:5f:05:d5:36:c7:e4:87:28:c1:99:6e:49:33:20:
76:d2:ff:17:e6:a1:3c:8a:c2:8b:87:67:3e:85:8e:62:cf:ff:
bc:f6:b0:14:b6:64:1e:63:47:48:91:28:a5:c5:f7:4e:2d:dd:
ee:7d:90:46:1e:52:4a:85:9d:7b:2a:92:47:00:df:f0:ac:73:
87:fe:8b:e8:1c:db:8b:5e:52:4f:08:a7:36:78:bf:83:c9:24:
5f:41:0a:6c:4d:e1:35:f7:91:35:7c:0c:0a:a8:cc:13:ef:e7:
d9:6a:2b:85:0a:3e:aa:00:cd:06:4d:e0:23:fe:cc:4f:f6:b5:
93:29:e8:02:9e:50:fb:44:9f:81:11:87:7f:ae:2c:cd:34:1c:
0d:62:44:94:8b:95:54:0d:26:c8:e1:4d:8b:54:1d:a7:ac:8d:
d8:85:da:f3:5b:f6:44:3c:29:c3:42:1f:c9:e1:2c:75:be:87:
a3:f2:ef:b1:0f:a8:76:8f:2b:32:61:4d:ac:a0:19:1e:b3:2e:
50:b9:7a:8c:50:a0:4e:4b:b0:05:75:8d:e5:76:cf:d5:aa:21:
d3:df:93:5a:d6:ef:07:58:e6:01:57:00:ff:a8:22:2a:cb:cb:
9c:eb:83:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org