Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/j_mMQm3wJeVVq2wiOm714qGE0qo.roa
File: j_mMQm3wJeVVq2wiOm714qGE0qo.roa (raw, json)
Hash identifier: IY3hnsvYdjJMeEIK2P1Y5L8WA+fEzvXUwi5wX+ZUNaw=
Subject key identifier: 8F:F9:8C:42:6D:F0:25:E5:55:AB:6C:22:3A:6E:F5:E2:A1:84:D2:AA
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 048D71FB
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/j_mMQm3wJeVVq2wiOm714qGE0qo.roa
Signing time: Wed 11 May 2022 08:43:02 +0000
ROA not before: Wed 11 May 2022 08:43:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 141.11.184.0/24 maxlen: 24
141.11.123.0/24 maxlen: 24
141.11.124.0/24 maxlen: 24
141.11.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76378619 (0x48d71fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 11 08:43:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ff98c426df025e555ab6c223a6ef5e2a184d2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fe:f0:1c:86:13:f2:6f:a4:2d:b9:69:86:7e:
ad:25:69:09:fc:09:54:fa:38:d8:8a:c1:a4:be:14:
35:4d:13:2f:d6:95:9b:5e:5f:8d:3d:ef:f0:e0:45:
6d:40:75:4e:73:bd:50:ea:1b:25:82:8a:3e:9c:1d:
3f:6d:3d:c3:3c:c9:82:34:be:9d:bc:5f:63:de:7f:
d1:4a:43:6c:d5:43:d4:be:4b:53:41:bb:4c:d4:07:
ee:02:66:8e:72:96:75:ad:cb:c8:21:0c:70:f6:3a:
46:0e:fc:9c:c3:0c:f8:cd:10:7a:10:d4:4c:b0:62:
68:37:23:d5:e1:d5:f4:de:75:ec:ce:dc:2f:af:a1:
ac:ff:19:ee:9c:7a:24:41:a8:1f:87:fa:3a:c0:2c:
88:d1:aa:52:06:e7:f8:8a:2e:a9:6f:66:4d:6f:45:
ac:41:3f:d1:51:b5:24:2b:09:06:f6:48:d3:02:8b:
7d:53:55:5b:cc:50:57:20:f9:cd:f2:c7:6b:5d:fa:
42:92:e7:44:7e:0b:41:e6:4b:69:c2:32:9f:6e:c1:
03:8c:57:5c:3d:c8:48:55:82:22:45:0b:1d:5b:b8:
a6:49:b7:83:0f:11:d5:7f:19:2a:cf:e6:ea:5c:a9:
e0:0a:7a:e6:bd:d7:12:0f:39:25:8d:ed:a2:c8:d9:
7e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F9:8C:42:6D:F0:25:E5:55:AB:6C:22:3A:6E:F5:E2:A1:84:D2:AA
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/j_mMQm3wJeVVq2wiOm714qGE0qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.123.0-141.11.125.255
141.11.184.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:96:8c:d1:55:50:46:f8:18:c8:4f:fa:aa:bf:d1:24:bb:24:
f0:0a:eb:89:4b:68:19:55:22:37:13:e4:bd:ba:81:03:e3:f2:
e1:72:4b:cf:6c:2a:f4:65:4b:c4:82:4b:6c:8e:6d:a2:7a:41:
06:b3:f8:39:46:36:7d:59:d3:1b:d5:99:5a:89:a2:cc:42:c0:
a9:5e:4c:ff:e6:53:11:17:9c:9a:e6:60:6b:43:cd:fe:87:5d:
70:aa:53:85:a0:de:83:7d:93:d7:a3:04:63:ad:30:b3:46:82:
de:6f:97:a4:e7:08:8a:52:56:12:5f:fc:0f:06:19:0a:7b:a1:
20:b1:15:b5:27:1e:a8:32:2f:7d:ca:0e:4e:d1:80:47:26:97:
cd:56:38:cb:be:b3:9b:8d:a3:5e:7b:0e:71:24:6d:3a:1d:fe:
03:a1:03:eb:70:4e:6e:5f:bf:2c:42:54:59:0a:b2:87:3a:c8:
2f:fe:2b:9e:d7:0b:76:73:ac:b6:dc:58:de:05:06:6e:be:ef:
c0:ee:65:1a:a5:42:67:a6:38:c2:56:a0:64:19:2d:94:a5:8d:
94:fc:10:c6:ad:0e:6d:8f:c0:b5:53:d5:56:9d:b2:d6:1c:9c:
cd:1d:ad:9f:7e:b0:1c:07:4c:b1:92:85:05:41:41:f3:e1:3a:
89:99:fd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:17 2023 by rpki-client on console-fra.rpki-client.org