Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/mZijBrEaCgMHx5sbcTBA1B4iSfI.roa
File: mZijBrEaCgMHx5sbcTBA1B4iSfI.roa (raw, json)
Hash identifier: 4iRLhLCfxo6KSQ5ITvTYO/ts7NU2OzVeJI1Iz2ev3qw=
Subject key identifier: 99:98:A3:06:B1:1A:0A:03:07:C7:9B:1B:71:30:40:D4:1E:22:49:F2
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0182A72BBB2AA9F29E05CF90F7EBF8EBED15
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/mZijBrEaCgMHx5sbcTBA1B4iSfI.roa
Signing time: Tue 16 Aug 2022 15:00:37 +0000
ROA not before: Tue 16 Aug 2022 15:00:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 141.11.168.0/23 maxlen: 24
141.11.189.0/24 maxlen: 24
141.11.88.0/23 maxlen: 24
141.11.96.0/24 maxlen: 24
141.11.102.0/24 maxlen: 24
141.11.5.0/24 maxlen: 24
141.11.121.0/24 maxlen: 24
141.11.26.0/24 maxlen: 24
141.11.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a7:2b:bb:2a:a9:f2:9e:05:cf:90:f7:eb:f8:eb:ed:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Aug 16 15:00:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9998a306b11a0a0307c79b1b713040d41e2249f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6e:58:2a:a1:01:ce:43:af:c5:f6:0b:db:6f:
eb:51:dd:94:82:38:26:17:c9:82:b6:cd:9e:dc:0f:
33:63:42:2e:5d:eb:5f:7c:fd:93:a4:4d:91:13:4c:
3c:d1:c3:16:5b:a4:b6:9b:dc:08:bd:b4:ad:41:94:
30:42:ea:62:94:7b:b4:60:2f:a2:08:8f:ca:6e:0c:
7e:92:22:d2:20:4a:ed:24:4b:22:e0:f2:91:f0:75:
00:98:14:d1:d1:13:da:05:91:3e:88:44:c8:a4:a9:
8e:94:b0:cc:8b:9a:98:20:53:75:48:dc:f6:9c:e0:
21:14:9f:67:5f:f0:43:2a:f0:83:8a:26:ba:48:a9:
c0:a0:28:a1:88:81:aa:22:2e:61:10:2b:d2:db:28:
5d:69:3a:0c:28:26:04:13:35:69:6b:32:6d:89:fc:
da:7b:d9:bf:12:e6:37:a9:59:b2:43:cd:80:1d:65:
86:54:58:6f:15:86:26:3d:8c:8c:08:b0:8f:c9:fc:
e0:13:74:9d:ab:f7:0f:8c:82:33:f7:97:d4:08:d0:
05:e0:82:b7:b2:46:04:32:b1:03:1a:c6:02:70:e5:
41:b0:d8:3c:86:70:80:b1:46:9d:15:58:59:f9:7b:
80:bc:94:d0:6e:ed:b7:7a:f8:43:91:b9:65:ed:81:
16:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:98:A3:06:B1:1A:0A:03:07:C7:9B:1B:71:30:40:D4:1E:22:49:F2
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/mZijBrEaCgMHx5sbcTBA1B4iSfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
141.11.26.0/23
141.11.88.0/23
141.11.96.0/24
141.11.102.0/24
141.11.121.0/24
141.11.168.0/23
141.11.189.0/24
Signature Algorithm: sha256WithRSAEncryption
82:86:83:19:2b:45:68:95:da:65:57:01:d0:49:80:54:db:ef:
c7:00:d0:89:bc:70:c9:6b:6f:1d:a8:4e:fc:76:cd:15:1e:ca:
c9:46:ab:77:e7:01:9d:4d:93:e9:44:3a:a1:3a:36:bf:07:f6:
84:c6:a9:74:4b:ad:88:45:2c:d8:82:4d:35:ef:38:45:f6:75:
34:81:96:77:20:46:4b:6c:e7:a2:8d:62:e0:4b:06:80:13:e8:
11:03:f8:f3:2f:42:20:aa:91:19:c9:8c:f0:94:e0:98:e6:e9:
04:cf:53:9a:bb:fa:e2:0c:21:0f:7a:d2:07:f0:a3:5d:cd:a0:
61:f0:fc:28:3b:97:bb:45:b5:61:b6:45:c9:8e:85:4b:48:ba:
dc:51:9c:d9:6e:a4:6e:59:48:80:5c:c9:80:5d:3d:aa:db:14:
ff:ac:e5:47:ef:81:a8:e8:23:9e:42:02:83:12:96:d7:ff:4e:
02:ac:f9:88:0a:63:de:70:fa:52:92:da:2b:ca:34:b2:69:73:
13:75:0d:08:b3:4c:8e:99:06:cf:a9:20:35:62:84:47:39:d2:
f8:6f:91:6b:26:0e:24:90:4b:76:7e:b4:bf:16:20:c8:e8:23:
d4:da:3b:9d:4c:5b:9c:9a:bc:5b:c9:69:39:38:1d:07:63:1d:
a7:bb:b6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org