Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/gj0skXGq9EMkdZPJtLQfCcAw60E.roa
File: gj0skXGq9EMkdZPJtLQfCcAw60E.roa (raw, json)
Hash identifier: LE/qkSfFzO6I2YDywZXvJZHaC8+C9tmvm95hEsXFQYs=
Subject key identifier: 82:3D:2C:91:71:AA:F4:43:24:75:93:C9:B4:B4:1F:09:C0:30:EB:41
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0184206FD66B91E633D33085C06CB753F259
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/gj0skXGq9EMkdZPJtLQfCcAw60E.roa
Signing time: Fri 28 Oct 2022 21:11:51 +0000
ROA not before: Fri 28 Oct 2022 21:11:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211440
IP address blocks: 141.11.192.0/23 maxlen: 24
141.11.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:20:6f:d6:6b:91:e6:33:d3:30:85:c0:6c:b7:53:f2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Oct 28 21:11:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=823d2c9171aaf443247593c9b4b41f09c030eb41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:29:4b:18:d4:00:4f:cc:fd:e0:51:6d:2f:3f:
23:4e:e5:7d:94:cb:be:ad:54:46:81:7f:c4:d9:6e:
9b:f7:00:45:dc:ce:38:64:4f:ce:10:e2:26:3b:29:
3f:df:04:c9:66:76:20:92:45:83:e9:13:50:2b:90:
be:6a:19:43:a6:b7:0a:3a:18:36:55:f1:60:bb:e0:
9c:fb:29:a1:a8:c9:09:80:36:22:84:2f:d7:c9:03:
2d:61:e7:57:08:63:67:9c:a4:63:76:77:ab:04:2e:
08:27:8a:24:a3:b0:a0:35:19:1f:6d:58:74:a4:34:
21:a6:af:fc:bb:74:43:9e:15:28:98:a8:08:8d:b4:
0d:fb:c4:a0:94:f1:28:66:90:69:63:b1:80:6a:a8:
98:48:da:a4:6b:dd:c5:fb:97:85:bc:07:f9:e4:c1:
64:8e:f1:ca:3f:87:8f:41:e4:a1:1e:ef:49:92:aa:
e6:b8:ca:7d:6f:9c:cf:20:9a:36:2c:ce:59:80:8b:
a2:06:ba:12:ae:48:4e:9a:13:39:f9:62:2a:40:33:
2e:26:b0:65:90:97:e8:50:f9:a9:e3:1d:5a:29:2f:
b3:23:75:57:de:21:07:3b:02:ca:8a:90:4b:1b:d6:
b3:71:19:b6:63:fc:fb:80:68:c3:42:49:7e:6b:ee:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3D:2C:91:71:AA:F4:43:24:75:93:C9:B4:B4:1F:09:C0:30:EB:41
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/gj0skXGq9EMkdZPJtLQfCcAw60E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.190.0/24
141.11.192.0/23
Signature Algorithm: sha256WithRSAEncryption
73:be:2e:e8:22:97:c9:27:e3:b9:de:fa:ab:47:13:5b:4a:91:
e3:8f:b6:e9:f8:61:25:18:20:79:1d:df:ce:e3:05:c7:f7:7a:
8d:6f:a4:14:5c:6b:9b:9b:eb:b2:a5:b4:6e:8b:90:13:e4:3c:
47:eb:b6:fb:43:38:92:2d:9f:70:66:0e:37:f1:80:71:5b:99:
44:08:ba:d0:d4:39:fb:2b:d4:6f:0f:2c:73:c0:db:fd:c9:44:
42:e7:9d:46:1c:42:64:77:12:44:ba:e3:58:63:e7:5a:df:e4:
2f:4d:51:d9:49:3c:9a:1f:a1:c4:30:7b:21:29:ac:25:25:f2:
52:6a:a0:30:fe:4f:80:84:e2:c8:51:2f:4c:e0:3e:88:1a:2d:
d2:ae:27:b4:92:5f:b9:22:95:9e:37:0a:03:47:85:91:f8:6a:
b0:e5:d5:d6:0e:62:c2:8c:5f:97:44:04:ad:1c:45:e5:cb:8b:
aa:ce:9b:b8:f2:64:ee:50:7e:6d:b3:c5:d8:ff:c4:a3:f4:56:
cd:d7:01:4d:c8:a6:bf:33:af:ea:ec:b6:48:03:fe:45:79:c4:
de:a7:b5:ce:0e:76:d6:5f:78:8a:40:6c:b6:01:82:1d:88:3a:
95:5a:06:69:0f:3a:9a:ec:68:6b:ec:09:26:74:1c:65:de:2a:
50:37:b0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-fra.rpki-client.org