Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/mrq5w5lSgzDp5tVTjBLdzKpcqLM.roa
File: mrq5w5lSgzDp5tVTjBLdzKpcqLM.roa (raw, json)
Hash identifier: hOkBcMvFB5SrCzyYFoLvj7/C6c2Lz9osEdu6Mwio+Fw=
Subject key identifier: 9A:BA:B9:C3:99:52:83:30:E9:E6:D5:53:8C:12:DD:CC:AA:5C:A8:B3
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0184C2F5D32ABE80CA22CD78A414ABB53476
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/mrq5w5lSgzDp5tVTjBLdzKpcqLM.roa
Signing time: Tue 29 Nov 2022 10:36:41 +0000
ROA not before: Tue 29 Nov 2022 10:36:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207429
IP address blocks: 141.11.188.0/24 maxlen: 24
141.11.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c2:f5:d3:2a:be:80:ca:22:cd:78:a4:14:ab:b5:34:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 29 10:36:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9abab9c399528330e9e6d5538c12ddccaa5ca8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ce:6c:88:2b:f0:7f:76:50:ee:dc:e0:80:8f:
4d:55:dc:58:a1:b6:0d:f9:56:05:58:f2:ab:04:f7:
2e:e0:d3:6e:0d:50:40:93:82:ee:9c:0a:ef:a6:bf:
57:8f:c0:b7:ce:8e:e0:e9:98:46:12:c1:61:2d:03:
6d:2e:18:9f:1c:bb:54:17:6f:8b:87:87:6d:87:60:
08:31:51:a1:6c:1b:bb:da:fd:fd:46:0d:b9:d1:c0:
40:84:df:d2:ba:28:0b:b3:e6:f8:21:a5:57:a5:54:
01:29:9e:02:43:b9:d5:d5:c6:c6:a7:25:fc:af:ae:
d9:c0:60:4f:b4:d6:4b:6a:63:8c:5f:7d:d3:ef:e4:
34:91:d8:67:c1:b6:3e:28:ab:1b:2e:3c:ed:5c:08:
71:e9:e7:4b:a9:f0:11:e4:44:00:3c:91:00:6b:65:
f8:ad:11:0f:1f:55:7d:88:9f:42:75:bd:a0:4f:fc:
c9:5b:be:f4:68:98:d0:f4:4b:65:ed:26:f4:50:6f:
a3:b3:f2:da:c8:d1:a3:d9:2a:26:c7:9c:70:22:41:
73:2b:c3:27:85:b3:75:a1:81:80:41:3a:9b:fe:ed:
45:24:bd:b9:e0:38:5f:6e:23:b5:75:47:12:3f:48:
22:b4:e1:c8:42:42:01:61:f1:73:c3:87:ad:73:48:
b2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BA:B9:C3:99:52:83:30:E9:E6:D5:53:8C:12:DD:CC:AA:5C:A8:B3
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/mrq5w5lSgzDp5tVTjBLdzKpcqLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.125.0/24
141.11.188.0/24
Signature Algorithm: sha256WithRSAEncryption
97:21:88:4c:85:89:c1:0d:b8:64:8b:84:6a:cc:9b:20:05:4d:
03:f5:ad:dc:81:29:fe:0c:8e:5f:85:57:43:f8:15:1b:08:f5:
74:8e:3d:4d:a4:fb:01:27:bb:8e:7c:6c:c3:56:5d:65:b7:5a:
1d:b4:a4:44:99:1b:86:02:9c:78:19:40:ab:21:c4:05:ea:24:
23:7b:52:38:dd:d6:6a:68:76:38:9a:8d:5c:c9:9d:85:52:0e:
26:8a:ac:4e:71:1c:54:5c:73:e8:80:74:2d:b1:5f:6b:e5:c5:
3c:73:6b:30:4d:b3:3a:89:c9:af:90:81:df:2e:dc:00:cd:8f:
f4:ad:33:14:60:cf:e1:90:93:7f:4e:13:56:07:6e:31:85:b6:
6d:ca:83:27:fe:db:3a:d7:e1:83:fb:00:14:62:15:77:e6:be:
5b:0a:a4:d1:d6:e6:39:45:71:43:d7:51:60:2d:b7:7e:93:11:
ba:df:20:e9:6a:b9:1b:85:38:72:2a:66:84:4c:de:29:66:c9:
51:b1:3a:0a:4d:a5:40:ce:be:64:58:d7:c4:a6:49:93:45:f0:
ac:c4:92:a2:68:fa:66:10:15:88:3a:fd:30:b5:67:4e:50:d3:
c3:99:9e:bc:df:5b:fe:9d:8e:80:06:e9:f4:0f:61:d1:0b:50:
4e:5b:03:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:17 2023 by rpki-client on console-fra.rpki-client.org