Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/aohTQTVI4NIh1ThFbYSpVUXz2fo.roa
File: aohTQTVI4NIh1ThFbYSpVUXz2fo.roa (raw, json)
Hash identifier: q2bFVnk4+dMrTQHvacp7EY04FSLh6J5Oy5yUSRAmPu4=
Subject key identifier: 6A:88:53:41:35:48:E0:D2:21:D5:38:45:6D:84:A9:55:45:F3:D9:FA
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 05163CA8
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/aohTQTVI4NIh1ThFbYSpVUXz2fo.roa
Signing time: Tue 14 Jun 2022 09:45:44 +0000
ROA not before: Tue 14 Jun 2022 09:45:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 141.11.68.0/24 maxlen: 24
141.11.69.0/24 maxlen: 24
141.11.99.0/24 maxlen: 24
141.11.109.0/24 maxlen: 24
141.11.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85343400 (0x5163ca8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jun 14 09:45:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a8853413548e0d221d538456d84a95545f3d9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:90:31:5b:22:1c:8e:55:42:c3:03:34:b3:76:
c9:0f:69:d5:50:44:46:a8:3c:ef:be:dc:6a:3e:13:
8c:22:0b:0d:e5:7d:a0:c2:ef:d4:e8:c5:23:05:1d:
6a:76:34:45:db:27:fe:26:a4:15:3e:24:30:0f:5e:
a4:01:ce:6b:cb:77:4f:af:25:00:43:8d:ab:13:59:
34:ad:14:1a:2d:56:ac:39:3d:6f:8e:73:76:ab:8f:
08:5a:5a:a4:38:4c:d6:ad:95:ca:9b:04:c5:0a:a7:
bb:42:7f:63:24:35:be:4c:b9:d7:8f:35:df:2a:7f:
8c:c1:27:92:70:cd:2c:8a:28:41:a9:30:6f:15:64:
72:84:f8:b5:b9:be:77:f5:d5:56:ef:5d:46:f5:88:
fc:db:c0:af:5f:7e:f7:78:01:93:a6:71:c9:e2:a2:
6e:9a:4a:25:87:57:e3:46:f4:5f:84:f4:88:48:82:
b2:dd:bd:94:c2:07:e9:5c:e2:1c:d1:e0:4a:f6:95:
45:df:74:5b:84:82:76:ae:75:76:de:81:28:07:90:
06:97:e1:a6:16:ca:d7:33:ee:93:ab:57:d7:77:7a:
51:c2:bd:8a:da:52:56:03:a0:85:ef:ff:1f:2a:87:
45:10:08:1a:27:08:1e:24:63:68:31:2d:90:67:a7:
5f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:88:53:41:35:48:E0:D2:21:D5:38:45:6D:84:A9:55:45:F3:D9:FA
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/aohTQTVI4NIh1ThFbYSpVUXz2fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.20.0/24
141.11.68.0/23
141.11.99.0/24
141.11.109.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:b8:5f:f4:29:86:45:ee:91:e1:62:57:9e:1d:08:a4:92:6e:
d1:10:bd:c8:85:3a:d2:db:58:85:8a:c3:db:6a:49:f0:b3:2e:
25:b9:d9:e7:55:4b:e4:7d:e5:c7:24:f2:0a:c7:5b:f4:ee:f0:
bb:05:08:d7:3e:bd:4d:f3:0f:c8:93:41:5f:2f:b0:62:21:56:
f2:db:9d:b4:f6:5d:58:04:73:b7:53:5a:7f:3f:46:03:34:5f:
bd:88:4d:89:6f:4f:24:be:64:fb:bd:5b:77:95:8b:ae:45:f1:
04:70:5a:10:b1:8a:d8:6c:63:d4:1c:03:28:b0:b5:e0:8a:3f:
df:33:ab:2c:c1:22:05:15:f6:d8:e8:66:13:2b:01:b0:19:91:
88:c0:cd:7d:0e:2b:5c:e8:20:f0:ce:34:48:62:28:02:d3:81:
92:ec:f1:3e:80:68:58:da:d0:20:cb:68:5d:cf:6d:97:35:ea:
64:20:f2:de:5e:46:23:c7:af:81:23:0a:1e:e8:81:7d:37:31:
1e:89:d9:98:23:52:c0:86:09:17:e5:cc:d9:87:98:3d:81:82:
08:14:e9:95:b5:b7:1d:05:f6:bf:eb:9d:50:79:56:2a:6a:fa:
ea:cc:90:0b:14:31:e3:a9:0b:cb:e2:cb:92:cd:90:ad:8c:dd:
74:51:7e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org