Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/gDUwgK1F5OgqlVFO2B6Xqs45z7c.roa
File: gDUwgK1F5OgqlVFO2B6Xqs45z7c.roa (raw, json)
Hash identifier: blbwCTNOqBjvFZpFxQkSgW7YLe4qRLETM6A0qwkEf2w=
Subject key identifier: 80:35:30:80:AD:45:E4:E8:2A:95:51:4E:D8:1E:97:AA:CE:39:CF:B7
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 026CA6AB
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/gDUwgK1F5OgqlVFO2B6Xqs45z7c.roa
Signing time: Sat 01 Jan 2022 08:03:23 +0000
ROA not before: Sat 01 Jan 2022 08:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.11.44.0/22 maxlen: 24
141.11.43.0/24 maxlen: 24
141.11.40.0/22 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.42.0/24 maxlen: 24
141.11.41.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.68.0/22 maxlen: 24
141.11.80.0/20 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.0.0/24 maxlen: 24
141.11.10.0/23 maxlen: 24
141.11.6.0/24 maxlen: 24
141.11.16.0/24 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.22.0/24 maxlen: 24
141.11.19.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.20.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.29.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.26.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.27.0/24 maxlen: 24
141.11.37.0/24 maxlen: 24
141.11.36.0/22 maxlen: 24
141.11.38.0/24 maxlen: 24
141.11.33.0/24 maxlen: 24
141.11.32.0/22 maxlen: 24
141.11.35.0/24 maxlen: 24
141.11.34.0/24 maxlen: 24
141.11.168.0/21 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.184.0/21 maxlen: 24
141.11.192.0/19 maxlen: 24
141.11.128.0/19 maxlen: 24
141.11.224.0/20 maxlen: 24
141.11.240.0/21 maxlen: 24
141.11.252.0/23 maxlen: 24
141.11.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40674987 (0x26ca6ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jan 1 08:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80353080ad45e4e82a95514ed81e97aace39cfb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2c:94:a2:5a:27:e3:fa:c3:8e:ce:ba:dd:ed:
60:ed:db:2f:27:e3:6a:c7:a4:f2:eb:12:56:8a:3e:
66:fd:a0:fe:bc:40:30:d7:67:e1:ce:4d:95:97:aa:
03:17:c3:99:71:41:00:43:e1:8b:46:44:41:91:72:
07:6e:91:19:b4:55:30:dd:c9:2e:a3:81:0b:e5:68:
ba:83:da:09:67:bd:62:40:7b:64:c0:25:af:26:63:
0b:5b:a0:4f:c4:bf:aa:9f:fd:94:e1:46:3d:99:6c:
59:f5:35:99:d3:04:c6:e4:1c:0e:e7:3b:ec:63:db:
14:6a:de:67:a8:41:77:4c:1c:aa:02:aa:f4:cc:9a:
d9:b9:28:b6:de:87:0e:ac:91:6c:f1:6f:a2:52:67:
ef:37:1f:60:70:d9:4d:53:5b:8b:68:e5:ca:ae:89:
26:ab:79:15:fd:2c:0d:27:9d:2c:51:82:40:56:e2:
1e:2a:35:75:f5:02:8b:fb:f1:4f:1b:e9:1a:c9:b0:
0c:3b:1e:33:4c:16:13:ab:54:9c:0d:bc:c3:00:73:
01:3f:f0:cb:eb:a9:35:f8:8c:6d:12:9a:4e:1f:60:
2b:8c:49:f3:c1:50:b6:cc:90:7d:04:75:a3:6c:13:
19:9f:b2:e8:a9:c3:d8:48:31:2f:53:20:4c:97:be:
4d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:35:30:80:AD:45:E4:E8:2A:95:51:4E:D8:1E:97:AA:CE:39:CF:B7
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/gDUwgK1F5OgqlVFO2B6Xqs45z7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0-141.11.2.255
141.11.6.0/24
141.11.10.0/23
141.11.16.0-141.11.22.255
141.11.25.0-141.11.29.255
141.11.31.0-141.11.47.255
141.11.68.0/22
141.11.80.0/20
141.11.128.0/19
141.11.168.0-141.11.176.255
141.11.182.0-141.11.253.255
Signature Algorithm: sha256WithRSAEncryption
75:89:b5:79:c8:d8:5d:32:b8:9e:37:84:41:a7:a9:1e:65:fc:
bd:a4:87:8e:21:73:ee:ac:a5:b7:8c:4b:7b:49:c9:07:e0:88:
44:a8:2c:53:0a:35:46:b9:bf:76:b6:fa:ce:23:83:bd:84:22:
b4:71:da:73:d2:da:85:34:bb:b7:2d:0f:24:a5:af:30:4e:c2:
a4:70:ff:ae:e6:62:91:80:1f:3c:34:e8:f8:6c:ad:c3:82:ba:
e5:bb:6b:eb:df:51:df:00:c5:2d:31:5e:d4:51:dc:24:49:fe:
6b:d1:1a:0e:fb:15:8f:b8:ff:0b:3c:9c:b2:2c:ce:ba:93:c1:
f5:a5:75:90:00:2e:8a:3a:3d:8c:3e:e5:7b:8e:48:3c:cf:82:
ba:81:01:b7:15:87:cb:7c:ef:90:d8:f1:43:26:51:88:f0:02:
3e:10:30:97:53:e5:3a:16:a2:29:b8:81:62:a6:20:da:13:0d:
94:77:46:5b:6f:28:ef:70:58:6c:ee:24:5f:e9:ed:3b:ae:03:
26:1b:59:85:6b:7b:eb:6a:1d:5e:b8:92:76:a6:f7:c2:53:8f:
0b:59:b2:c9:2f:f7:09:d4:bd:e6:28:70:bb:77:29:95:66:fe:
9e:55:29:b1:fa:78:37:47:6d:e4:ca:02:08:0f:cc:ee:9a:8c:
26:f6:9a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-fra.rpki-client.org