Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/lCfef87-abLGjronx97LXVTCeMs.roa
File: lCfef87-abLGjronx97LXVTCeMs.roa (raw, json)
Hash identifier: hdWoysv7PBDKtrMm+kQLhmxSkNj2KtvXB1v6H76Z5I4=
Subject key identifier: 94:27:DE:7F:CE:FE:69:B2:C6:8E:BA:27:C7:DE:CB:5D:54:C2:78:CB
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 03A9EBDA
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/lCfef87-abLGjronx97LXVTCeMs.roa
Signing time: Wed 30 Mar 2022 16:36:11 +0000
ROA not before: Wed 30 Mar 2022 16:36:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 141.11.192.0/19 maxlen: 24
141.11.187.0/24 maxlen: 24
141.11.104.0/22 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.4.0/24 maxlen: 24
141.11.6.0/24 maxlen: 24
141.11.122.0/24 maxlen: 24
141.11.127.0/24 maxlen: 24
141.11.128.0/19 maxlen: 24
141.11.20.0/24 maxlen: 24
141.11.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61467610 (0x3a9ebda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Mar 30 16:36:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9427de7fcefe69b2c68eba27c7decb5d54c278cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b2:08:a9:c5:90:c2:41:db:aa:25:bf:70:1e:
2d:7f:5e:b5:97:fc:f9:2b:eb:ac:94:78:17:a7:26:
4a:71:fa:c8:43:d4:de:2e:02:dc:6d:f0:4d:28:81:
1f:86:ec:82:89:64:65:78:38:6e:d3:e2:76:04:9a:
6a:b6:1e:95:ed:b8:a4:09:72:a2:b4:85:a0:99:6c:
a0:e7:a3:fe:35:88:b7:7e:81:7d:15:33:2c:46:c2:
13:65:2a:55:8e:65:31:74:f6:42:25:b9:c9:77:ed:
19:be:21:4c:76:7b:1a:3f:e2:2a:74:c7:24:62:d9:
58:48:51:f4:9b:ec:49:86:b7:32:c2:34:96:5f:f3:
70:c5:1c:87:81:f9:1d:b8:cd:f4:bb:6e:ed:63:df:
f6:a3:19:6c:13:af:a3:04:c2:42:cb:bf:0e:10:3d:
b0:0c:06:e6:20:20:37:3c:16:e4:f9:79:65:74:d6:
2b:8d:7b:98:94:3f:a9:1a:cd:ad:d0:6c:5a:4f:47:
01:3b:0d:95:84:b0:a4:fc:da:c1:cd:d9:6a:b7:92:
e3:98:53:83:f4:01:51:58:51:b0:d7:47:7f:3b:01:
75:ef:68:47:d9:09:aa:7d:86:44:42:fb:b0:fa:81:
ed:55:35:ec:a1:cb:1f:16:7b:e3:cc:b0:46:64:ba:
3c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:27:DE:7F:CE:FE:69:B2:C6:8E:BA:27:C7:DE:CB:5D:54:C2:78:CB
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/lCfef87-abLGjronx97LXVTCeMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
141.11.4.0/24
141.11.6.0/24
141.11.19.0-141.11.20.255
141.11.104.0/22
141.11.122.0/24
141.11.127.0-141.11.159.255
141.11.187.0/24
141.11.192.0/19
Signature Algorithm: sha256WithRSAEncryption
87:4d:c2:c7:a6:d7:b4:88:15:47:aa:7f:63:f1:44:28:fc:ff:
0f:d9:71:24:5a:da:33:0a:4c:fb:ce:ff:46:5b:04:c2:41:a9:
80:cb:03:d4:90:e8:26:cc:24:61:8e:dd:a8:15:b3:ea:0c:ef:
82:64:cf:88:9d:1b:6b:5c:64:31:a6:47:5e:d2:e5:e5:51:fd:
b7:89:b3:3b:5a:d8:32:81:60:d2:3b:9d:48:18:b8:f8:0a:c0:
a3:ff:cf:46:9b:18:7d:2f:ad:16:87:0e:b7:44:fa:82:bf:e9:
9d:cb:e0:58:6b:16:84:f7:6b:47:a7:aa:3e:d0:50:d9:4c:50:
5c:bd:a2:33:38:7f:72:fa:7a:a6:68:f3:89:64:0b:a5:20:fb:
fb:af:6f:6e:aa:fe:65:d9:34:0c:44:42:73:16:19:68:f4:b9:
d3:93:05:ac:9a:8c:1f:c7:22:0a:36:34:b9:17:81:d8:a3:3a:
18:87:c8:fe:93:ff:0b:75:a1:bf:64:34:61:7d:73:3e:bb:d0:
b2:1e:29:c5:a8:6a:e5:9c:9b:a3:7f:e5:48:b8:5f:62:b0:8e:
ac:37:93:3f:fd:43:d6:a9:40:55:ef:47:7f:37:45:91:c5:c4:
8d:9d:1f:0f:31:26:87:69:b6:b6:06:29:4b:66:24:a0:6c:c4:
9b:9b:e3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:17 2023 by rpki-client on console-fra.rpki-client.org