Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/gsPe9hHkzXSzr3ZvtgOYmzdqNEU.roa
File: gsPe9hHkzXSzr3ZvtgOYmzdqNEU.roa (raw, json)
Hash identifier: tZzPvICLcAA/CPJS33VHh7cd4xEBMDjSOpJLuhaoi0g=
Subject key identifier: 82:C3:DE:F6:11:E4:CD:74:B3:AF:76:6F:B6:03:98:9B:37:6A:34:45
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04B13A7D
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/gsPe9hHkzXSzr3ZvtgOYmzdqNEU.roa
Signing time: Tue 17 May 2022 10:08:30 +0000
ROA not before: Tue 17 May 2022 10:08:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 141.11.68.0/24 maxlen: 24
141.11.69.0/24 maxlen: 24
141.11.188.0/24 maxlen: 24
141.11.189.0/24 maxlen: 24
141.11.20.0/24 maxlen: 24
141.11.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78723709 (0x4b13a7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 17 10:08:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82c3def611e4cd74b3af766fb603989b376a3445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0a:74:b3:63:3b:c4:56:cb:0a:20:ce:07:6a:
be:3d:a2:80:43:9d:3c:58:31:71:d0:0f:2e:51:37:
87:a7:2e:bd:ea:3e:55:ff:d6:79:18:81:6a:38:15:
4c:9f:14:b6:f0:ec:26:3c:1e:dc:d7:1b:1e:d9:52:
80:72:f4:23:27:1c:db:9c:e2:dd:59:83:63:05:5f:
29:28:bc:b0:90:37:ab:1e:b7:94:19:6c:76:56:d7:
27:8d:97:8f:bf:20:15:b9:75:05:a7:74:75:e7:f2:
f2:85:b8:a4:99:b1:dd:21:22:43:90:48:33:8c:8a:
46:5e:25:e7:2f:4c:4a:55:0d:7e:3f:ee:a5:46:8e:
b2:fe:dd:c7:be:87:2d:5c:2c:cc:07:16:76:4e:8f:
98:0c:c8:56:19:53:b1:9c:54:d4:f7:4c:5a:33:6e:
32:e8:78:41:6f:33:08:a7:f3:a9:ee:d1:33:62:fc:
a1:01:57:47:3e:b3:de:6b:c4:a8:31:ed:70:49:3e:
92:d6:36:55:c9:fc:24:55:03:f1:72:74:3e:72:91:
ee:3c:88:39:f1:4d:6d:80:16:0c:24:47:3a:3d:5a:
fc:ba:05:f3:f1:ab:e2:84:74:b9:18:52:5a:73:57:
c1:04:d5:e7:d7:7c:ec:5b:9c:c2:fb:98:be:4f:d4:
e9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C3:DE:F6:11:E4:CD:74:B3:AF:76:6F:B6:03:98:9B:37:6A:34:45
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/gsPe9hHkzXSzr3ZvtgOYmzdqNEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.20.0/24
141.11.27.0/24
141.11.68.0/23
141.11.188.0/23
Signature Algorithm: sha256WithRSAEncryption
76:7f:4b:e0:d5:4e:f8:89:48:c0:71:80:f0:f7:ee:c3:1b:ac:
04:0f:8a:fb:67:90:2b:24:8f:c3:1d:e2:91:18:ad:85:fb:73:
d6:9b:77:50:23:2d:bd:8b:ab:35:26:fc:66:19:02:ce:9b:de:
e3:98:66:62:22:f0:ba:6e:b0:75:c9:e4:d2:ba:6f:30:0e:68:
c2:37:d5:7f:8c:13:4f:f7:06:fd:cf:68:91:79:b1:e6:ed:fe:
18:9f:be:fc:1b:1e:a8:a3:6f:52:e5:00:95:8a:a6:28:29:ab:
02:65:4f:73:ee:df:ca:ed:1a:f6:b1:15:e1:df:e4:42:0f:ff:
fc:eb:97:2a:e3:e7:50:6a:5a:5c:75:44:aa:e0:b8:61:ce:9b:
c1:e2:0d:09:fd:71:8a:d9:95:26:5f:08:97:42:31:41:c3:a9:
71:d7:0d:e6:de:a6:30:44:e9:77:d4:ab:a5:f9:d9:81:a9:e7:
36:05:33:e2:54:f2:f7:9a:c3:b5:ca:24:61:ea:45:2f:df:f7:
9e:72:f7:fe:53:e8:a4:e6:2e:da:1e:fd:bd:4d:a5:45:82:84:
e7:32:37:63:70:ad:a9:1f:c3:0a:98:3c:10:32:23:6b:b4:32:
42:30:cc:a0:c7:9d:2b:5f:60:2b:1d:a9:99:0d:46:ea:1d:88:
0a:97:6b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:17 2023 by rpki-client on console-fra.rpki-client.org