Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/juz6frqxfpicPXa5FZRtD9vxnbc.roa
File: juz6frqxfpicPXa5FZRtD9vxnbc.roa (raw, json)
Hash identifier: NsK8rkOHj7WC30MuTFrH1zWZ0SE/zQrpyPkXxum75+I=
Subject key identifier: 8E:EC:FA:7E:BA:B1:7E:98:9C:3D:76:B9:15:94:6D:0F:DB:F1:9D:B7
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 05006D7A
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/juz6frqxfpicPXa5FZRtD9vxnbc.roa
Signing time: Thu 09 Jun 2022 14:47:03 +0000
ROA not before: Thu 09 Jun 2022 14:47:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 141.11.74.0/23 maxlen: 24
141.11.86.0/23 maxlen: 24
141.11.104.0/22 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.4.0/24 maxlen: 24
141.11.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83914106 (0x5006d7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jun 9 14:47:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8eecfa7ebab17e989c3d76b915946d0fdbf19db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fe:f6:b6:46:4b:ef:c7:93:65:94:c3:28:14:
43:97:53:94:0a:a4:af:65:11:00:33:77:ef:cf:0d:
a8:27:f7:88:4b:4b:d1:f1:08:32:92:52:8e:e0:be:
64:72:e8:1d:5e:29:22:12:33:5f:82:8c:42:0e:88:
4c:5c:15:53:88:f5:0f:6f:0b:79:a2:71:a0:fc:83:
37:35:aa:70:08:fe:5d:60:13:0f:fb:b4:53:ae:45:
82:3e:5d:db:13:9e:d2:6d:41:85:e8:81:1b:fd:74:
bf:5f:6e:0d:0e:fc:6d:3e:10:ec:bf:b4:c0:f6:c7:
a4:d5:55:3f:61:03:cf:b0:9f:d7:70:e5:80:16:59:
76:4a:24:63:4e:88:16:c8:f6:06:ea:b2:66:39:c5:
37:b9:a3:59:7c:2c:eb:79:04:78:bf:c0:1e:53:80:
2c:39:b0:6e:e0:fb:37:85:cf:86:e3:14:52:60:fe:
b4:06:da:be:fa:84:ac:8a:23:fa:7e:0f:e0:77:1c:
41:6a:36:3c:9a:96:69:fb:73:79:09:4f:2b:20:3d:
2c:7b:2b:5d:7a:50:00:b9:79:ec:f6:72:4e:94:c7:
8c:16:10:dc:12:db:4d:f9:af:de:b9:b6:f8:82:50:
d6:8d:5a:5b:68:cc:08:d1:e5:f1:47:27:18:7d:66:
d4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EC:FA:7E:BA:B1:7E:98:9C:3D:76:B9:15:94:6D:0F:DB:F1:9D:B7
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/juz6frqxfpicPXa5FZRtD9vxnbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
141.11.4.0/24
141.11.74.0/23
141.11.86.0/23
141.11.104.0/22
141.11.234.0/23
Signature Algorithm: sha256WithRSAEncryption
36:8e:8a:8e:eb:43:e3:19:a1:de:e6:04:a7:23:9c:9b:3b:95:
6e:0b:3e:61:53:b4:35:84:b1:53:da:11:d2:6d:e5:a1:3e:e2:
30:7d:b6:db:92:68:70:00:02:a5:d2:4f:5d:cd:d8:ef:04:93:
8c:80:68:f4:8a:bb:d0:5c:60:d0:24:6d:81:38:4f:28:01:98:
04:7d:4c:b8:75:35:ee:0c:60:d2:e1:39:28:ed:ca:94:d3:37:
ca:3c:8f:40:67:79:81:94:81:61:3f:df:a0:c5:f4:e5:e2:34:
14:ef:5e:0a:0c:3e:8c:8f:1e:d1:7b:7a:4b:c7:47:38:8c:1c:
5d:b4:d3:d6:30:93:a8:73:22:c8:e6:46:92:8d:36:bc:0b:a2:
f7:e6:e6:02:7c:3c:8e:b1:31:9c:aa:a0:b4:7c:cd:94:20:d9:
bb:ee:73:91:35:79:5f:b5:4b:ab:07:d6:90:73:34:7a:85:08:
bb:a4:03:9c:53:02:be:59:d1:3b:59:04:2e:cb:1c:45:d7:2d:
92:d4:fa:8a:a9:61:5f:48:2f:75:90:16:4c:f7:f5:36:2b:c5:
9e:42:35:52:83:ed:77:3e:ee:94:f4:cc:a8:75:4d:44:da:f0:
05:84:1c:98:b4:bb:23:be:4a:24:74:7a:fa:34:09:d3:5d:32:
2e:ba:3e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:17 2023 by rpki-client on console-fra.rpki-client.org