Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/_hXGPQV1webfU1ehRoAtXUrTs70.roa
File: _hXGPQV1webfU1ehRoAtXUrTs70.roa (raw, json)
Hash identifier: 9wk6BR1kZtLienginQ9Qg8oTKylLhf32XYDdVPcAbxE=
Subject key identifier: FE:15:C6:3D:05:75:C1:E6:DF:53:57:A1:46:80:2D:5D:4A:D3:B3:BD
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0182C9F691D639BF44F325EA83C928B7EF76
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/_hXGPQV1webfU1ehRoAtXUrTs70.roa
Signing time: Tue 23 Aug 2022 09:09:15 +0000
ROA not before: Tue 23 Aug 2022 09:09:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.11.44.0/22 maxlen: 24
141.11.40.0/22 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.42.0/24 maxlen: 24
141.11.41.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.0.0/24 maxlen: 24
141.11.10.0/23 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.22.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.37.0/24 maxlen: 24
141.11.33.0/24 maxlen: 24
141.11.35.0/24 maxlen: 24
141.11.32.0/24 maxlen: 24
141.11.160.0/24 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.187.0/24 maxlen: 24
141.11.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c9:f6:91:d6:39:bf:44:f3:25:ea:83:c9:28:b7:ef:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Aug 23 09:09:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe15c63d0575c1e6df5357a146802d5d4ad3b3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0b:80:2a:43:86:e5:16:40:34:ce:80:2a:48:
e6:69:8e:43:ff:48:4b:41:9c:4c:e1:7f:02:08:9e:
c5:5e:f6:c7:c3:c6:66:71:ea:44:ac:f0:1d:a3:b3:
1a:55:a8:6b:c7:2c:e9:d8:ea:81:fb:0b:37:4b:5e:
ed:95:f6:57:71:76:26:0a:31:40:ed:25:b8:b1:71:
4a:89:7d:5d:06:38:b4:40:e0:11:69:1b:b1:de:4a:
7c:8c:42:ab:e0:61:5d:0d:36:3f:97:14:12:46:67:
59:cc:3c:a8:d5:f7:ad:1f:ba:e6:b7:6a:bf:0f:04:
91:d8:2f:d4:86:ea:c5:02:42:f1:86:0a:ec:66:6f:
27:32:72:df:56:e3:b4:84:b6:ed:c7:be:ee:33:47:
d1:c7:a3:91:55:e4:08:01:d0:cc:68:89:dd:47:cd:
de:a2:79:6d:59:a7:1a:3d:47:8f:7a:1b:cf:bf:b1:
3f:39:00:c9:7e:55:e5:21:66:82:1e:a0:fa:ee:0c:
79:d6:a8:b9:d7:cf:2f:5d:3b:7f:bc:8b:23:21:92:
dd:e0:81:53:cb:1f:db:65:7f:16:72:8f:56:8c:fe:
d3:16:97:84:81:f8:6e:b2:3a:5a:15:5b:fc:6b:f1:
15:e3:8a:6c:1e:64:00:1f:7b:48:f0:b3:2f:c1:3f:
99:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:15:C6:3D:05:75:C1:E6:DF:53:57:A1:46:80:2D:5D:4A:D3:B3:BD
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/_hXGPQV1webfU1ehRoAtXUrTs70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0-141.11.2.255
141.11.10.0/23
141.11.17.0-141.11.18.255
141.11.21.0-141.11.22.255
141.11.25.0/24
141.11.28.0/24
141.11.31.0-141.11.33.255
141.11.35.0/24
141.11.37.0/24
141.11.39.0-141.11.47.255
141.11.99.0/24
141.11.160.0/24
141.11.176.0/24
141.11.182.0/23
141.11.187.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f3:cd:37:78:18:49:57:4e:ce:15:c2:b2:00:49:99:7f:55:
28:54:e5:c0:cc:f1:8b:4f:42:16:2f:7a:fd:af:cc:fe:de:40:
52:21:57:30:85:fa:1f:a9:6f:16:84:bc:4a:d6:be:8c:c0:3d:
17:aa:da:90:63:ec:58:05:11:ff:19:f2:6a:95:84:00:f0:f7:
bc:bd:3d:69:9a:64:a9:4a:03:c6:30:39:4c:db:41:58:bb:c0:
e1:c5:6a:c3:33:48:c9:af:18:e3:25:08:92:b5:3b:fe:ab:14:
59:1d:93:9b:8b:8c:46:10:8b:46:c2:f9:b5:3b:b7:3f:cc:62:
55:91:5f:98:13:20:fc:6a:80:00:38:76:95:d6:8c:86:f3:ee:
2d:77:f0:19:b4:da:7a:7c:45:37:d9:6b:ec:64:e3:a4:85:3f:
ae:b8:2a:c2:49:0d:85:4d:91:87:f0:d0:96:d1:a9:88:e6:db:
84:ce:64:1f:fe:3f:9e:5d:1f:c5:82:52:59:1d:8a:b3:3a:8d:
96:e1:6c:02:45:ec:90:d0:60:61:e1:5f:c2:0d:ad:0f:00:ff:
0e:3f:af:19:31:9a:6a:c2:94:69:b5:0e:5b:d1:61:0a:f6:bc:
fe:55:8c:b3:8e:10:cf:b0:51:78:a9:29:57:79:84:6c:61:63:
53:96:b4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org