Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/YkxHusBy-UVWNvtuqFECgBo3Osw.roa
File: YkxHusBy-UVWNvtuqFECgBo3Osw.roa (raw, json)
Hash identifier: 6P4HmSpkzs4pKDFzMmMqaA5zQGMoGUc3GTFt8c+4XSc=
Subject key identifier: 62:4C:47:BA:C0:72:F9:45:56:36:FB:6E:A8:51:02:80:1A:37:3A:CC
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 038E9D7F
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/YkxHusBy-UVWNvtuqFECgBo3Osw.roa
Signing time: Mon 21 Mar 2022 19:48:01 +0000
ROA not before: Mon 21 Mar 2022 19:48:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 141.11.40.0/24 maxlen: 24
141.11.43.0/24 maxlen: 24
141.11.68.0/24 maxlen: 24
141.11.69.0/24 maxlen: 24
141.11.188.0/24 maxlen: 24
141.11.189.0/24 maxlen: 24
141.11.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59678079 (0x38e9d7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Mar 21 19:48:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=624c47bac072f9455636fb6ea85102801a373acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:c5:9c:e1:64:83:8f:c5:1a:0e:0e:f8:93:
0d:e7:12:f5:cb:16:6b:03:a0:97:fc:e1:54:30:5c:
8d:ba:6d:6e:e7:5c:28:5e:7c:ee:30:4b:0f:24:eb:
2e:e2:e7:d7:09:93:32:3b:c0:58:c1:60:13:3b:3b:
20:96:1e:87:fe:24:06:72:0f:56:9e:62:43:f7:9c:
e2:a4:85:b8:f7:f3:39:1f:f3:4c:32:24:ef:5c:5a:
dc:6f:78:e9:cb:44:81:58:00:01:e5:69:cf:10:91:
f5:65:8b:b7:a5:86:49:a5:6b:9b:d3:93:86:08:d3:
58:54:03:dc:c1:d3:b0:63:9c:1c:dd:1c:35:bf:5b:
b9:61:dd:e5:0d:40:28:ac:47:39:9f:47:bd:08:c5:
b7:43:c4:23:2a:db:e1:af:7c:19:08:88:7a:78:a5:
a9:1e:1a:bf:62:e7:74:dc:1f:26:53:31:96:06:42:
23:60:4a:ce:03:c5:24:64:a5:79:5d:2c:99:24:4d:
fc:06:cb:66:31:d0:74:c2:05:1e:72:46:b1:7b:25:
21:8d:a5:fe:73:e4:9d:ba:85:91:4f:ec:3d:6a:3b:
6c:cb:9f:6e:42:50:72:22:cb:0e:91:ba:9d:eb:c5:
eb:e6:0b:b8:36:42:04:3f:84:06:41:c6:58:5a:44:
27:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4C:47:BA:C0:72:F9:45:56:36:FB:6E:A8:51:02:80:1A:37:3A:CC
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/YkxHusBy-UVWNvtuqFECgBo3Osw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.27.0/24
141.11.40.0/24
141.11.43.0/24
141.11.68.0/23
141.11.188.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:00:67:ea:d8:c9:96:93:49:2c:2f:17:0f:de:2f:61:cf:02:
9c:49:6b:93:8f:dc:97:00:7c:fe:69:c8:f5:36:20:95:4f:54:
92:f1:e5:49:22:19:a8:7e:b9:1f:1a:1e:2f:b8:ee:86:41:4c:
60:4a:99:96:66:3f:26:9f:16:87:1b:29:ea:a9:fb:d0:9a:14:
59:06:4a:f9:83:43:6c:d0:64:cc:cc:d8:4a:4a:9a:80:01:52:
53:56:ca:c8:2b:5d:4c:2c:c9:16:aa:ff:ca:da:43:cf:51:2e:
af:cd:e4:be:ae:29:8c:c5:1c:c9:22:e7:54:f2:bb:d7:c6:34:
41:5a:20:d2:13:50:88:8a:7b:54:2e:5b:72:05:9f:2c:14:52:
c1:3e:26:fb:73:53:f2:2e:db:fa:93:4b:f0:1c:c2:ee:08:24:
28:14:aa:a8:54:1b:a0:ee:14:10:74:e8:a1:85:66:87:de:13:
55:3c:3e:6b:85:ef:de:ff:86:d8:ef:93:63:e2:a2:90:b2:5c:
17:be:1a:7f:85:20:a0:db:16:23:0c:b7:dc:66:57:2a:5a:48:
d5:bd:52:34:e8:46:3b:dd:ce:2b:a2:36:b9:ca:71:f3:2b:0b:
b9:0e:18:80:7e:ec:67:0b:14:39:34:05:61:a6:bd:66:b7:63:
f6:00:9e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-fra.rpki-client.org