Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bI9c39M7Z1iBMtOGruLSrzaOEUY.roa
File: bI9c39M7Z1iBMtOGruLSrzaOEUY.roa (raw, json)
Hash identifier: BElQ/kpInnghtmn35lQbgIn4TFD8Vrb4MRynUYhY8cU=
Subject key identifier: 6C:8F:5C:DF:D3:3B:67:58:81:32:D3:86:AE:E2:D2:AF:36:8E:11:46
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 018321ED4E6D479A78807798AC0EC2ADB500
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bI9c39M7Z1iBMtOGruLSrzaOEUY.roa
Signing time: Fri 09 Sep 2022 11:05:43 +0000
ROA not before: Fri 09 Sep 2022 11:05:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.11.44.0/22 maxlen: 24
141.11.40.0/22 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.42.0/24 maxlen: 24
141.11.41.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.0.0/24 maxlen: 24
141.11.10.0/23 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.22.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.37.0/24 maxlen: 24
141.11.33.0/24 maxlen: 24
141.11.32.0/24 maxlen: 24
141.11.160.0/24 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.189.0/24 maxlen: 24
141.11.187.0/24 maxlen: 24
141.11.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:21:ed:4e:6d:47:9a:78:80:77:98:ac:0e:c2:ad:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 9 11:05:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c8f5cdfd33b67588132d386aee2d2af368e1146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:39:ff:58:36:fe:32:75:13:6b:f0:e9:b8:65:
0a:2e:a5:8b:e8:aa:81:b2:d6:03:62:5f:fa:e1:9f:
3f:33:a6:0e:89:50:4a:60:a6:2d:dc:98:15:91:61:
0f:fb:32:b3:97:14:6a:6d:c9:8b:71:ba:04:6c:af:
00:dd:e0:65:4c:f9:09:fd:47:1c:8a:cb:a2:79:cc:
1a:d8:98:44:02:5c:70:22:0e:54:0e:1c:cd:4a:58:
91:c5:86:f0:e7:79:d9:ef:d9:c6:1a:4d:e2:8b:b5:
94:1f:70:a5:5c:cb:31:cb:8c:df:11:96:2b:fa:46:
c9:ee:d3:12:56:a6:a5:7f:1c:ec:a7:0b:35:b3:9b:
b8:b9:c5:a0:d3:b7:46:e5:cb:03:b1:a4:b2:f3:60:
59:68:3e:c4:20:ed:c6:b1:f2:5f:7c:f9:f1:44:7b:
fb:f4:b3:79:d4:2a:1e:44:77:db:53:74:e9:0a:39:
bf:92:f5:11:a0:5d:dc:23:14:3b:44:08:84:c1:a8:
21:cd:d6:05:a9:e6:83:b6:e4:28:4c:91:d8:80:d9:
6d:e1:9c:38:6c:e2:d0:fe:3c:6b:ba:9b:cf:0a:a3:
ed:00:8f:d0:63:58:b7:6c:6d:be:97:8f:01:85:7e:
bc:c9:38:87:9b:01:02:15:07:91:7b:31:ee:a7:bd:
8f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8F:5C:DF:D3:3B:67:58:81:32:D3:86:AE:E2:D2:AF:36:8E:11:46
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bI9c39M7Z1iBMtOGruLSrzaOEUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0-141.11.2.255
141.11.10.0/23
141.11.17.0-141.11.18.255
141.11.21.0-141.11.22.255
141.11.25.0/24
141.11.28.0/24
141.11.31.0-141.11.33.255
141.11.37.0/24
141.11.39.0-141.11.47.255
141.11.99.0/24
141.11.160.0/24
141.11.176.0/24
141.11.182.0/23
141.11.187.0/24
141.11.189.0/24
Signature Algorithm: sha256WithRSAEncryption
97:8a:89:07:b2:23:3c:8b:6c:f4:98:f5:2d:4c:6b:8a:42:d3:
d4:41:45:9a:2a:2b:c6:8b:3b:c4:36:f1:e1:02:07:35:46:4c:
c6:5d:35:cb:bd:97:ac:23:58:92:c7:3e:2a:15:6d:8c:90:75:
5b:ef:01:38:0e:ef:be:de:43:32:8b:ac:bb:08:75:a9:00:ef:
46:57:8f:fd:cd:64:4d:e8:5a:f8:66:a8:7b:c0:cc:63:4a:a0:
eb:34:6b:66:8d:7c:95:2b:6a:81:2c:79:94:70:5d:e2:54:43:
a7:7e:43:e8:db:ee:72:9a:93:8a:6e:20:9e:5e:a1:10:d8:1b:
bd:4b:6e:8d:8c:ed:5a:dd:95:43:e1:bf:d7:84:a3:3e:db:67:
92:7b:a8:2d:d0:bd:92:20:11:7b:10:b4:5a:1f:51:50:d9:7d:
c7:5a:99:bd:6c:cb:fe:1d:6a:50:37:2b:cb:72:d3:f6:60:0d:
0d:2f:e5:ad:fc:20:9a:43:d2:53:1d:f7:76:f3:6e:fe:78:ff:
b1:8b:2a:2d:d3:f8:c8:28:16:6d:fe:90:2c:f8:0f:82:cf:a3:
33:90:eb:22:be:22:4b:03:f1:0f:22:44:3a:9a:5b:08:19:60:
cc:00:a0:53:e5:97:8f:a2:c5:e7:8d:3f:87:ad:5c:ea:04:f7:
14:95:20:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org