Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ceK7IbSaUS9hVu4hfUvufaQ41FQ.roa
File: ceK7IbSaUS9hVu4hfUvufaQ41FQ.roa (raw, json)
Hash identifier: 6R6A/KVFMUWs1KjwiNy752/y2DBc4qVO0ETzTeHUbvg=
Subject key identifier: 71:E2:BB:21:B4:9A:51:2F:61:56:EE:21:7D:4B:EE:7D:A4:38:D4:54
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01838E3B351A869BBEF3D5424570655118A6
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ceK7IbSaUS9hVu4hfUvufaQ41FQ.roa
Signing time: Fri 30 Sep 2022 11:49:48 +0000
ROA not before: Fri 30 Sep 2022 11:49:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43350
IP address blocks: 141.11.182.0/24 maxlen: 24
141.11.184.0/24 maxlen: 24
141.11.246.0/24 maxlen: 24
141.11.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8e:3b:35:1a:86:9b:be:f3:d5:42:45:70:65:51:18:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 30 11:49:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71e2bb21b49a512f6156ee217d4bee7da438d454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3b:df:43:d4:af:60:af:c1:ae:9e:7c:00:21:
24:bf:d1:c9:63:4c:e2:a2:45:24:e2:22:ae:08:bd:
a0:08:2a:b3:1e:71:67:75:ec:eb:dc:dd:f6:10:4d:
9d:be:42:37:12:27:ed:aa:fe:48:f8:e4:ea:41:8b:
c3:59:85:ef:55:0b:7e:2d:1e:8c:a0:c1:4b:d1:c5:
f1:d4:c6:02:79:4a:27:45:32:5d:a5:1c:db:7e:d8:
54:4f:15:f1:ca:f6:02:72:70:d9:17:05:cf:b5:9f:
85:2f:a9:8c:2a:24:1f:f7:ad:f5:de:70:a1:0b:b0:
8c:42:16:0a:d9:9a:c3:ba:37:46:c4:a1:e4:a0:1b:
84:53:90:00:75:45:4a:c2:53:f2:42:1e:40:a8:12:
a0:66:af:10:f0:36:ce:91:17:3f:8a:29:02:dd:4b:
b7:45:56:72:df:28:ce:e4:f4:c5:75:62:04:89:b3:
ed:7f:a8:32:77:93:bd:c8:13:d4:ce:82:bf:fa:8c:
11:45:39:ec:93:b1:8c:55:de:fb:4d:73:7a:be:80:
2c:06:9f:5a:f2:91:32:61:57:5f:3c:b8:27:ee:0b:
62:92:b4:e8:ff:ba:1c:0a:18:86:6a:65:dc:01:40:
73:7c:e8:ec:68:73:83:bf:0f:82:d6:ae:1f:7b:b9:
4b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E2:BB:21:B4:9A:51:2F:61:56:EE:21:7D:4B:EE:7D:A4:38:D4:54
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ceK7IbSaUS9hVu4hfUvufaQ41FQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.182.0/24
141.11.184.0/24
141.11.246.0/24
141.11.250.0/24
Signature Algorithm: sha256WithRSAEncryption
41:50:63:9a:14:f7:b5:51:0d:68:5e:ff:07:72:0b:5a:f4:8e:
7c:c4:7b:58:e6:35:e2:ca:b7:1d:70:98:41:b3:ff:bc:f6:cd:
7a:ed:9f:ae:d3:66:08:8d:ba:3e:cb:65:e0:93:52:af:0c:c9:
48:ef:65:c5:10:f7:e2:72:4c:5e:72:8f:a1:50:04:8e:c2:0d:
cd:63:81:2c:ad:cd:ad:c9:20:3a:d6:83:91:2b:4b:24:8f:1c:
a3:d9:f3:8f:8c:87:a6:7b:84:68:9a:41:a7:75:6b:a0:de:7e:
3e:3d:0c:b3:54:78:c6:af:44:26:a7:0a:53:2d:bf:6f:ce:61:
04:bf:4c:2b:7b:d0:62:c9:9b:be:93:7b:db:78:d0:07:3d:25:
7e:e8:ec:12:3f:25:f3:38:26:92:58:0f:fd:05:1e:5b:d4:e8:
dc:6a:6f:e3:44:2f:85:e8:51:24:43:a6:30:5e:35:d8:69:33:
bc:96:72:25:29:27:8d:9f:79:83:9c:71:54:38:87:bf:1a:a0:
9b:58:9e:58:f2:28:d3:5a:67:c1:fd:6d:96:f6:0e:fa:25:66:
ba:c6:f5:88:ca:54:88:71:40:f6:65:16:61:bf:35:62:06:ec:
ac:8e:a0:2c:8b:b1:02:c6:6b:59:1c:45:ad:09:42:2f:5f:b5:
e9:be:dc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org