Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/WwNmiposHxxPAeBHuSMIwizeneg.roa
File: WwNmiposHxxPAeBHuSMIwizeneg.roa (raw, json)
Hash identifier: K4EPDxdFmUQQs2pRSCmAB7ak2QE2e6z+nLjNZTUxI0o=
Subject key identifier: 5B:03:66:8A:9A:2C:1F:1C:4F:01:E0:47:B9:23:08:C2:2C:DE:9D:E8
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 02DFC995
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/WwNmiposHxxPAeBHuSMIwizeneg.roa
Signing time: Wed 02 Feb 2022 17:22:07 +0000
ROA not before: Wed 02 Feb 2022 17:22:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57416
IP address blocks: 141.11.160.0/24 maxlen: 24
141.11.161.0/24 maxlen: 24
141.11.178.0/24 maxlen: 24
141.11.177.0/24 maxlen: 24
141.11.109.0/24 maxlen: 24
141.11.4.0/24 maxlen: 24
141.11.5.0/24 maxlen: 24
141.11.120.0/24 maxlen: 24
141.11.127.0/24 maxlen: 24
141.11.30.0/24 maxlen: 24
141.11.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48220565 (0x2dfc995)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Feb 2 17:22:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b03668a9a2c1f1c4f01e047b92308c22cde9de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:63:9e:3c:fe:1a:48:13:a0:8f:05:da:71:a0:
10:9e:dc:4e:03:fe:2b:e9:38:7c:29:db:e1:db:ed:
43:c9:f5:a9:64:b3:e8:ea:c0:8e:36:62:7c:2a:d2:
70:c2:ab:f2:db:8b:83:e3:c8:26:ea:4e:6d:4d:96:
06:41:36:c7:b8:20:8a:d1:52:fd:04:d0:d0:b8:b2:
2e:39:96:c1:81:30:70:42:4d:8a:53:33:d4:69:67:
ec:f7:30:12:47:0e:aa:0a:59:4c:4a:5d:35:6a:95:
41:f1:f9:25:c5:5a:ca:97:ea:c5:63:87:1c:63:fa:
00:3d:2e:8f:e4:88:42:7b:0f:67:68:57:2f:db:bb:
1c:4e:c3:39:2a:06:f4:e3:e5:fe:7b:b8:2e:9d:a1:
45:6e:f4:d4:6f:7f:86:a9:2e:8e:e6:d1:e1:2f:9f:
77:ee:8b:10:56:46:80:9c:7e:21:96:bd:f2:c8:85:
03:f9:a0:f0:b4:6a:74:44:b9:77:b6:ee:94:65:84:
3f:09:48:7a:c6:83:12:03:72:c6:19:ab:5e:32:81:
6a:30:7f:c1:78:6c:eb:96:de:e1:60:fc:90:4b:22:
e6:3c:8a:26:37:59:a4:bd:d9:a5:20:9d:e5:e8:7b:
7b:61:64:3d:29:77:10:77:b8:fb:f8:b6:91:49:16:
a7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:03:66:8A:9A:2C:1F:1C:4F:01:E0:47:B9:23:08:C2:2C:DE:9D:E8
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/WwNmiposHxxPAeBHuSMIwizeneg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.4.0/23
141.11.27.0/24
141.11.30.0/24
141.11.109.0/24
141.11.120.0/24
141.11.127.0/24
141.11.160.0/23
141.11.177.0-141.11.178.255
Signature Algorithm: sha256WithRSAEncryption
7f:7c:c9:9f:82:91:6d:90:0c:c5:62:62:22:08:61:44:5a:b7:
4e:0a:f8:3e:d7:78:35:0b:df:f5:7c:7f:fa:72:67:98:2a:ab:
65:e0:1b:a9:cc:32:26:37:8f:ff:65:7c:4d:5e:bd:9f:47:1a:
71:02:bd:96:00:b9:a9:57:e2:e7:99:b2:46:df:b7:63:fa:b6:
8f:e6:24:09:a9:01:6f:a5:96:39:57:b8:a0:bb:c7:46:11:cf:
8f:d5:3b:a3:11:4b:14:99:4e:9c:fe:a5:55:f9:dd:d3:29:47:
ed:a0:82:1a:dc:45:e5:ed:cd:86:04:ca:3d:f5:6e:99:45:f5:
7c:7b:d2:be:40:d2:00:6f:27:aa:f1:86:31:83:6a:2d:42:46:
8e:ca:5f:f5:5a:66:33:e2:ee:47:60:fd:3e:1b:66:68:4c:7b:
6d:77:c7:9a:5e:40:a0:db:2c:f6:31:ff:d4:8a:6f:90:b4:15:
22:5f:e2:cc:1e:39:cf:b0:7a:4e:00:be:a5:80:d3:19:a9:93:
f3:0c:44:03:8c:77:b3:a2:e5:61:f4:e4:6c:47:5c:7f:5c:44:
49:eb:60:db:cd:7c:ad:b8:fe:5a:87:61:97:d3:44:a1:0f:f6:
17:56:c4:9d:a5:61:c5:94:12:b2:a3:05:fa:2a:b4:bd:d8:4a:
e5:7c:ba:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-fra.rpki-client.org