Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/lCW2NsGiGm0CHVZV93CB-zicfQA.roa
File: lCW2NsGiGm0CHVZV93CB-zicfQA.roa (raw, json)
Hash identifier: /IQDGb4Sbjwwdn8Xaz5FO5p74insV0Zgyw+KmZGrh70=
Subject key identifier: 94:25:B6:36:C1:A2:1A:6D:02:1D:56:55:F7:70:81:FB:38:9C:7D:00
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0181F842B4813D129E1D8903A8246709D92E
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/lCW2NsGiGm0CHVZV93CB-zicfQA.roa
Signing time: Wed 13 Jul 2022 15:52:10 +0000
ROA not before: Wed 13 Jul 2022 15:52:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 141.11.168.0/23 maxlen: 24
141.11.88.0/23 maxlen: 24
141.11.90.0/23 maxlen: 24
141.11.96.0/24 maxlen: 24
141.11.102.0/24 maxlen: 24
141.11.5.0/24 maxlen: 24
141.11.121.0/24 maxlen: 24
141.11.26.0/24 maxlen: 24
141.11.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f8:42:b4:81:3d:12:9e:1d:89:03:a8:24:67:09:d9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 13 15:52:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9425b636c1a21a6d021d5655f77081fb389c7d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d5:ca:a8:92:de:70:67:fd:d0:d8:74:37:c9:
b1:92:15:98:fe:22:c1:33:81:ad:43:bb:56:66:1b:
ae:2a:78:ba:50:1a:41:43:dc:b9:69:5d:53:4f:93:
77:89:fb:80:74:1f:38:a7:85:d6:54:81:b6:af:31:
ed:59:ad:33:a4:8c:1f:1e:98:e5:e6:67:be:76:e3:
7f:ed:3b:0b:3e:86:78:12:58:bf:90:30:ef:67:16:
74:71:91:c7:89:ce:0c:ca:48:54:8a:5a:dc:4d:97:
3f:15:1c:5a:00:0a:78:c0:5c:25:3e:c9:c6:96:0f:
d6:8d:ed:e7:31:39:97:9f:57:18:74:27:30:0b:61:
48:28:0d:54:85:3f:f2:95:73:c1:9b:74:40:a5:47:
fe:4d:28:ec:11:97:d3:ad:20:f1:25:96:21:38:eb:
26:07:fa:34:54:af:61:e4:57:c9:72:30:b7:41:1b:
42:26:96:86:f4:67:d8:ac:0a:60:6c:40:ab:3e:01:
34:89:a4:7a:7f:cd:81:d3:f4:a6:ae:58:62:81:fe:
bb:a7:af:f1:44:4e:25:25:69:2d:f9:f6:12:09:2d:
c6:17:3c:fa:b1:4b:f2:44:8f:ac:3e:f0:ca:11:f6:
ee:15:a8:3e:06:70:85:e0:93:26:de:ab:63:a4:fd:
d1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:25:B6:36:C1:A2:1A:6D:02:1D:56:55:F7:70:81:FB:38:9C:7D:00
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/lCW2NsGiGm0CHVZV93CB-zicfQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
141.11.26.0/23
141.11.88.0/22
141.11.96.0/24
141.11.102.0/24
141.11.121.0/24
141.11.168.0/23
Signature Algorithm: sha256WithRSAEncryption
41:1a:b7:f9:9b:21:8f:d8:f4:1c:09:48:1f:22:68:09:17:c6:
ab:7a:e3:7c:e8:31:0d:f7:cc:ff:44:4c:a6:8d:d5:bf:ef:23:
cb:7b:fc:c9:16:b8:5d:55:1d:1a:a2:15:15:fa:cc:9d:85:46:
a3:bf:12:96:ca:82:c1:a5:92:7a:ec:5f:24:34:d8:7b:fd:de:
26:c3:2b:0c:da:3e:3f:1d:99:fc:92:d4:62:f7:b5:a2:38:01:
8a:22:aa:ab:07:8d:f5:7e:02:f4:22:19:5e:a4:80:c9:1e:5d:
51:9d:24:d5:59:c5:c7:dc:99:6c:50:6d:1b:de:3f:6d:a9:fc:
86:97:96:9a:3e:ae:0c:14:e6:f3:29:68:d0:79:07:1b:71:86:
f4:05:c8:ed:09:8c:8e:44:91:cf:57:4c:a2:2e:fa:c2:c9:b8:
23:3c:0e:37:b7:07:fb:09:20:e4:18:4b:5a:b6:34:a0:c3:9f:
ed:7e:d7:63:e6:39:cf:d0:d0:d3:79:0b:29:cd:c1:2c:9f:cd:
ae:dc:e7:33:a2:2f:31:32:04:fb:90:be:ef:14:8a:74:0b:3d:
a4:68:6f:46:62:54:d6:3e:13:e7:92:6c:af:0b:44:1e:cf:09:
e4:43:0e:e5:37:41:14:fa:f5:16:67:ed:fb:4d:8c:16:78:54:
ba:4d:42:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org