Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/oBq2m7fpq-oV11BTNZeenN0sCDM.roa
File: oBq2m7fpq-oV11BTNZeenN0sCDM.roa (raw, json)
Hash identifier: D/WzFLwkCfECPzW+6M+RkX/gmAtahxZ8XBa3FxY7hQ0=
Subject key identifier: A0:1A:B6:9B:B7:E9:AB:EA:15:D7:50:53:35:97:9E:9C:DD:2C:08:33
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0183BC1E203C1577E9A06738DFF2D25DF874
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/oBq2m7fpq-oV11BTNZeenN0sCDM.roa
Signing time: Sun 09 Oct 2022 09:40:34 +0000
ROA not before: Sun 09 Oct 2022 09:40:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 141.11.0.0/24 maxlen: 24
141.11.124.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.243.0/24 maxlen: 24
141.11.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:bc:1e:20:3c:15:77:e9:a0:67:38:df:f2:d2:5d:f8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Oct 9 09:40:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a01ab69bb7e9abea15d7505335979e9cdd2c0833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:28:2a:81:af:91:7a:ae:a9:59:51:57:3d:21:
4a:d9:4d:77:28:a3:34:67:54:77:11:d3:70:96:ee:
06:a2:dd:7c:ec:d4:51:c7:1a:be:7a:79:52:3a:4c:
b3:4a:b6:db:b0:1b:c8:6a:50:2a:ae:43:10:7b:47:
6d:7e:0e:92:e2:78:e8:e9:f4:3d:8a:0a:d8:43:de:
0e:5a:a0:60:3f:f5:7e:92:96:18:1c:b1:ca:72:63:
c4:ed:85:03:01:98:f6:a8:8e:36:24:ff:48:48:75:
78:a1:e2:d9:e3:e6:df:86:2b:42:d9:7e:d3:5a:69:
d6:92:c3:14:04:19:59:b2:3d:7a:f9:fb:04:4d:c9:
7f:f6:37:78:fa:05:a0:18:8b:2e:f9:27:90:2c:af:
08:3b:96:32:fe:88:e6:11:e9:11:b8:1b:78:3b:39:
a7:f2:5f:44:a7:86:2a:8f:43:93:21:14:83:ef:1c:
16:1a:67:17:61:ce:bb:b5:83:a6:64:47:c3:33:de:
89:f7:34:48:a4:1b:8c:b6:4a:b8:87:25:c9:06:cc:
5e:a3:5c:7b:a7:f2:01:e3:8a:c1:f9:a7:2e:9d:45:
63:b0:93:ab:69:fd:0a:f2:91:0e:72:75:65:9b:50:
8a:81:52:3c:5e:43:5c:09:6c:61:e3:40:68:41:7b:
e1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1A:B6:9B:B7:E9:AB:EA:15:D7:50:53:35:97:9E:9C:DD:2C:08:33
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/oBq2m7fpq-oV11BTNZeenN0sCDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0/24
141.11.28.0/24
141.11.124.0/24
141.11.242.0/23
Signature Algorithm: sha256WithRSAEncryption
95:03:51:be:d1:b8:dc:c3:ef:33:71:4a:68:74:83:f7:21:ad:
cd:05:72:96:49:36:95:69:6b:78:6f:92:c5:24:8e:d7:ec:e1:
c1:dc:9d:5a:e8:1e:ac:8d:71:cc:fc:ce:74:6d:48:d8:26:c2:
d2:e4:df:3c:0b:de:25:a4:ed:49:4d:0c:e0:57:7b:da:21:bc:
3c:0d:11:51:f9:8f:bd:de:4a:07:61:94:2f:71:85:82:9b:a0:
cf:45:19:be:a9:1b:98:b5:9e:c2:fa:dd:f4:da:c9:0d:b8:b1:
f8:05:41:64:25:75:64:86:64:97:0c:88:0e:6d:e5:54:84:96:
04:25:c2:67:aa:c7:8d:ce:32:50:26:3c:2a:94:99:87:70:30:
e4:a5:11:0b:29:91:46:32:69:0c:18:af:2b:63:cb:84:71:5d:
c9:66:98:b8:55:31:df:b0:2c:ad:e9:a6:22:33:98:72:7e:52:
aa:c4:00:06:49:0c:8f:1a:96:e8:52:09:49:fa:d1:99:45:32:
ad:9b:bd:75:ed:a0:a5:78:b2:13:84:08:c2:59:2c:1e:fb:ae:
b9:9c:f7:a6:dd:3c:5a:99:a5:9b:75:14:ea:b3:ef:48:92:c8:
e8:c3:a7:b4:98:ad:a8:01:ed:04:ef:13:cd:69:e0:33:55:43:
7c:11:a2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org