Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/euaOwoClhrd8xL6TvUttP-fn2Rk.roa
File: euaOwoClhrd8xL6TvUttP-fn2Rk.roa (raw, json)
Hash identifier: whh3YX/G9Hq/Ajwg/lxeXeSDKEJPoiTiJ8Ecg6oKMYg=
Subject key identifier: 7A:E6:8E:C2:80:A5:86:B7:7C:C4:BE:93:BD:4B:6D:3F:E7:E7:D9:19
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0183A23BBD2087B08041D26671E5788DE148
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/euaOwoClhrd8xL6TvUttP-fn2Rk.roa
Signing time: Tue 04 Oct 2022 09:02:47 +0000
ROA not before: Tue 04 Oct 2022 09:02:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 141.11.204.0/22 maxlen: 24
141.11.216.0/22 maxlen: 24
141.11.224.0/22 maxlen: 24
141.11.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a2:3b:bd:20:87:b0:80:41:d2:66:71:e5:78:8d:e1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Oct 4 09:02:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ae68ec280a586b77cc4be93bd4b6d3fe7e7d919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b8:14:de:24:c1:36:13:b4:a4:ea:6d:31:77:
57:19:60:82:23:4a:20:19:8e:c2:6d:64:f3:dd:84:
6d:5c:26:22:e3:e6:e3:1a:f3:d6:a9:a7:c1:7f:5b:
d2:66:b6:ff:15:d0:f2:91:bb:cf:9e:a0:b4:da:e7:
86:fc:39:d0:96:5c:ce:35:0a:60:d4:fc:ed:2b:42:
30:04:f0:c0:fb:7c:cf:8b:bc:94:6d:e5:8f:aa:7a:
a5:d1:18:6a:df:1f:29:05:d9:1e:79:bc:ca:65:51:
7a:93:1d:6e:7c:56:76:9f:2e:be:90:8c:9c:31:61:
03:3c:b6:5a:2d:39:eb:38:50:66:09:7e:2c:f5:0e:
47:e8:a5:ac:10:4e:87:0a:30:02:09:db:05:bb:61:
7a:62:8a:7a:62:e8:25:e6:03:48:96:56:90:89:5f:
5d:1e:51:36:a2:23:de:4b:59:03:80:46:4a:d6:4b:
d1:45:36:3b:5e:60:60:99:e5:fb:49:a0:d6:cc:df:
a2:b5:9a:8d:d1:9b:12:29:84:e4:7e:8a:14:8e:bf:
72:60:05:09:2d:2f:a8:2a:6a:1b:a7:5c:ea:02:f9:
b7:1e:b3:7c:1f:3e:bc:ef:de:78:8c:c4:1e:13:3f:
33:c3:4d:78:b3:be:e7:7f:bd:57:17:68:50:b1:e5:
cf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E6:8E:C2:80:A5:86:B7:7C:C4:BE:93:BD:4B:6D:3F:E7:E7:D9:19
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/euaOwoClhrd8xL6TvUttP-fn2Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.204.0/22
141.11.216.0-141.11.227.255
Signature Algorithm: sha256WithRSAEncryption
2b:29:c3:82:f0:c1:71:96:9b:68:14:68:c6:62:c9:63:75:03:
de:ee:fe:0c:0a:eb:af:c3:68:75:16:8a:c8:dc:ba:e3:2d:0f:
89:67:7d:99:a1:ec:db:66:6b:60:27:94:56:1c:99:6a:85:e9:
ca:b5:c5:6b:4f:cf:4e:65:7d:cc:32:3c:7f:13:e2:e7:03:4e:
92:57:29:10:24:6c:b2:df:59:e4:3f:54:6f:a1:da:00:61:a0:
ca:07:ee:a0:b7:02:f4:9d:93:db:39:a0:5a:11:48:d2:42:61:
84:e6:31:9d:ee:ac:1f:06:be:00:94:93:e6:8b:cd:84:91:55:
d7:4a:3e:46:53:58:85:72:f3:66:63:c5:d0:8d:62:17:75:a9:
5f:3c:49:e7:73:78:1d:76:82:90:3b:2b:e7:30:01:61:9b:c7:
4d:8c:c9:37:42:8e:d7:2b:f6:a5:8c:a4:80:eb:a6:88:c1:90:
7a:f4:4e:a5:87:60:50:89:3b:1f:5d:56:49:e1:5d:bf:d9:1c:
90:17:9e:c6:50:80:c3:48:c6:83:cc:3a:51:03:e8:3b:2d:18:
ac:2b:c9:2b:32:b0:9b:1b:49:6c:61:84:85:fb:32:81:ed:1c:
89:36:ab:58:e2:df:6c:84:77:15:04:e7:7d:9c:4c:d6:17:11:
e0:c7:1c:d0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-fra.rpki-client.org