Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/n9NF9YDPcdZg5Ge6DJZVkfHHFGU.roa
File: n9NF9YDPcdZg5Ge6DJZVkfHHFGU.roa (raw, json)
Hash identifier: dEriH/g3iYYUkhgRu1+TlrfpO0fvri5qDs02LZrxRFI=
Subject key identifier: 9F:D3:45:F5:80:CF:71:D6:60:E4:67:BA:0C:96:55:91:F1:C7:14:65
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01850B2CF39B9C758B0FD196E9DB3DEEF6AF
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/n9NF9YDPcdZg5Ge6DJZVkfHHFGU.roa
Signing time: Tue 13 Dec 2022 11:09:33 +0000
ROA not before: Tue 13 Dec 2022 11:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 141.11.186.0/24 maxlen: 24
141.11.90.0/23 maxlen: 24
141.11.96.0/24 maxlen: 24
141.11.102.0/24 maxlen: 24
141.11.106.0/24 maxlen: 24
141.11.5.0/24 maxlen: 24
141.11.228.0/23 maxlen: 24
141.11.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0b:2c:f3:9b:9c:75:8b:0f:d1:96:e9:db:3d:ee:f6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Dec 13 11:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fd345f580cf71d660e467ba0c965591f1c71465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:37:36:08:94:9d:22:51:66:ae:ad:ae:5f:c7:
cd:38:e1:07:b0:0a:61:35:be:4d:92:db:d8:f9:ef:
20:3d:d2:32:d1:de:14:51:7e:f4:70:2c:a5:c5:f1:
1b:09:06:31:45:34:29:47:47:fa:6b:55:ed:13:bb:
65:76:45:ca:71:ad:05:ac:e1:ac:be:08:0b:d1:2d:
a7:12:aa:c0:48:3d:7f:8b:96:51:0a:9a:6a:59:9e:
3d:e9:f3:6a:08:4b:bd:6c:e6:e8:0d:13:1d:15:e6:
1d:4a:63:6b:aa:b5:4e:04:2e:3e:7d:59:ec:6b:4b:
81:a3:6f:82:35:3a:4d:14:1d:1c:0e:9b:54:50:1d:
57:9c:35:ac:8a:b6:4e:d0:b2:29:16:3e:83:81:80:
c9:89:7c:cb:80:72:e5:f6:74:63:b0:07:87:e0:f5:
b8:7e:cc:13:b5:d6:5d:03:e2:a4:c4:30:2c:2f:52:
5d:ad:36:bb:fd:e3:d8:bf:83:db:e7:a0:51:06:c4:
4a:7e:af:f8:e4:9e:d3:58:3d:8a:56:8a:e3:0e:ed:
a3:94:d3:b8:28:be:fc:f9:80:bb:0a:96:5a:6c:d9:
a8:1a:ee:10:8b:d6:27:b7:4a:9e:3f:58:97:a9:f5:
d7:28:4e:b2:f9:c3:db:e2:43:21:7d:1b:d1:51:3b:
5c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D3:45:F5:80:CF:71:D6:60:E4:67:BA:0C:96:55:91:F1:C7:14:65
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/n9NF9YDPcdZg5Ge6DJZVkfHHFGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
141.11.26.0/24
141.11.90.0/23
141.11.96.0/24
141.11.102.0/24
141.11.106.0/24
141.11.186.0/24
141.11.228.0/23
Signature Algorithm: sha256WithRSAEncryption
07:a1:bd:83:8b:1f:81:51:3e:cf:1e:ab:f2:05:ac:3d:77:83:
2c:de:92:0e:b3:e9:38:47:56:85:56:bb:05:82:e8:f6:a2:e0:
e8:2a:1f:c4:c6:83:95:38:e2:e7:78:c1:87:c3:d0:bc:3c:73:
ac:87:0d:99:da:cb:35:5b:e7:f6:d8:aa:02:5e:ed:9a:0a:e8:
74:09:7f:28:d1:a8:9d:8d:df:82:63:d1:9a:b5:14:c3:7e:7c:
3c:b5:95:95:1f:88:d4:18:00:8e:26:4b:ca:45:04:2a:48:13:
55:f8:58:d2:10:e3:61:af:97:4d:8a:34:04:27:58:01:12:43:
a7:c1:79:4d:ad:21:1c:97:2d:d5:3d:7e:58:19:55:52:cb:dc:
1f:74:25:f5:34:5f:e0:d2:5c:1f:63:c4:a7:fb:f0:51:23:ae:
f3:1d:9c:5a:03:45:e1:7a:52:10:72:e9:b7:46:60:58:fa:ef:
e6:a1:1d:0f:5d:1d:d7:10:e1:76:9c:90:e6:68:6b:95:6d:cd:
85:1b:2e:83:55:bb:46:3e:ff:53:be:1a:0d:a4:51:35:0b:08:
b0:ba:39:c3:6b:e8:ef:5f:d7:59:08:af:36:18:ea:fd:81:e4:
01:d8:aa:c5:7f:ab:6f:e9:36:b4:12:2c:e9:7c:cb:ff:86:74:
1d:be:90:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:17 2023 by rpki-client on console-fra.rpki-client.org