Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/XanP9z--It006BJ_wdZ-pvhLQyQ.roa
File: XanP9z--It006BJ_wdZ-pvhLQyQ.roa (raw, json)
Hash identifier: iP4bkQ+r0/63PiWOYrDM762gBbvFElhWuq0Lj5vO5cQ=
Subject key identifier: 5D:A9:CF:F7:3F:BE:22:DD:34:E8:12:7F:C1:D6:7E:A6:F8:4B:43:24
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0410D6B4
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/XanP9z--It006BJ_wdZ-pvhLQyQ.roa
Signing time: Thu 21 Apr 2022 12:03:11 +0000
ROA not before: Thu 21 Apr 2022 12:03:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210443
IP address blocks: 141.11.101.0/24 maxlen: 24
141.11.100.0/24 maxlen: 24
141.11.224.0/22 maxlen: 24
141.11.230.0/23 maxlen: 24
141.11.228.0/23 maxlen: 24
141.11.124.0/24 maxlen: 24
141.11.125.0/24 maxlen: 24
141.11.123.0/24 maxlen: 24
141.11.232.0/22 maxlen: 24
141.11.126.0/24 maxlen: 24
141.11.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68212404 (0x410d6b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 21 12:03:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5da9cff73fbe22dd34e8127fc1d67ea6f84b4324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f2:3a:a3:8f:e8:fc:97:ac:82:c4:4e:af:5a:
05:9f:d8:bf:40:f4:e6:9b:46:8b:d4:c9:2b:0f:12:
bb:43:bb:16:c8:a5:c2:3d:50:fd:2a:a7:ed:59:e8:
65:9e:af:ed:2d:07:81:a6:92:ec:b7:b8:40:f0:f5:
77:6f:e0:fd:94:6d:42:e1:26:ad:81:fc:eb:44:66:
16:58:df:76:cf:aa:d4:4f:7c:57:ba:56:e8:56:66:
b4:50:6e:b4:50:d6:f7:4e:ec:58:b9:53:48:eb:14:
d8:11:b3:fc:d9:2b:cb:3d:ed:3b:00:5d:5b:05:05:
81:09:f7:d7:79:2a:3e:90:c2:99:47:a0:3b:07:6d:
a9:ba:37:35:d2:5e:43:e1:53:0c:6f:96:17:e0:b6:
b0:d6:e3:fe:e2:38:e0:7e:5b:d7:40:f7:42:b6:17:
37:49:f9:f8:29:44:a5:c6:72:ec:48:f6:0e:e9:cd:
12:21:5c:5a:59:a7:33:a4:14:a2:85:6d:88:67:77:
f7:49:7c:02:ea:96:a7:14:28:50:37:0a:c6:37:77:
46:00:03:3c:b4:5e:02:17:67:a6:b5:16:78:ae:1d:
79:53:f9:6d:98:d5:07:fc:31:57:8b:a1:3f:8b:d0:
56:f2:3c:fb:ab:45:12:db:40:36:6f:9e:59:5b:70:
6b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A9:CF:F7:3F:BE:22:DD:34:E8:12:7F:C1:D6:7E:A6:F8:4B:43:24
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/XanP9z--It006BJ_wdZ-pvhLQyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.100.0/23
141.11.123.0-141.11.126.255
141.11.224.0/20
Signature Algorithm: sha256WithRSAEncryption
14:2e:1f:1b:0e:db:eb:e1:61:1a:36:ab:f5:09:10:f5:72:19:
da:2d:07:a9:88:d4:a4:6a:90:c5:d7:3b:00:08:23:0d:fb:96:
ce:13:22:ef:ad:b5:4a:92:40:e0:3b:96:47:ff:a3:df:d0:04:
c2:a7:59:39:02:1e:36:3e:5e:5a:69:56:94:04:e7:14:f0:91:
03:6b:6c:c2:74:67:0b:36:66:23:6d:1f:dc:63:39:41:bb:d9:
b7:2a:72:3d:96:8f:79:87:e5:af:dd:1f:4b:dd:a3:55:6c:2a:
00:03:da:35:4c:5d:6e:9e:b0:d9:04:7a:eb:f1:06:57:c4:f3:
f5:9d:14:0e:7d:62:c9:ee:65:ab:8a:49:35:24:fd:82:8c:fe:
d4:49:cc:b5:62:f5:e8:6e:a9:fd:de:3a:30:4d:6a:a1:3d:a2:
db:2e:f5:57:3d:1e:b4:8c:ef:be:32:41:fa:22:28:99:58:1f:
19:bc:3d:85:bf:28:1f:42:2c:41:d5:b0:79:cc:ef:07:22:64:
ef:25:a0:5a:18:cc:8f:c1:25:8f:93:4d:b3:54:af:83:2d:13:
76:6f:9a:93:58:5f:dc:67:6e:06:66:a2:aa:c9:8a:e7:a1:cb:
88:04:64:65:2a:55:d0:24:8b:96:48:64:21:e9:76:3d:09:71:
55:80:75:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org