Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/r523C5_gzw4RkoXUt4JUavDS31g.roa
File: r523C5_gzw4RkoXUt4JUavDS31g.roa (raw, json)
Hash identifier: UUL28PHC/hxIWvaU7exeK/SjhhCsX6yf4j5+RKDGYBE=
Subject key identifier: AF:9D:B7:0B:9F:E0:CF:0E:11:92:85:D4:B7:82:54:6A:F0:D2:DF:58
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04F8A51D
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/r523C5_gzw4RkoXUt4JUavDS31g.roa
Signing time: Mon 06 Jun 2022 11:41:35 +0000
ROA not before: Mon 06 Jun 2022 11:41:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 141.11.68.0/24 maxlen: 24
141.11.69.0/24 maxlen: 24
141.11.99.0/24 maxlen: 24
141.11.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83404061 (0x4f8a51d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jun 6 11:41:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af9db70b9fe0cf0e119285d4b782546af0d2df58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:75:04:4a:b0:33:68:b2:5a:85:f5:a9:35:
83:4e:0c:aa:0f:e4:ab:39:d5:a8:6d:ab:f9:56:03:
30:37:12:c2:c5:fd:2c:81:b8:0a:2c:4c:ef:3d:01:
a3:73:b1:21:3b:dc:93:56:a6:af:56:29:e9:80:79:
ab:a5:09:11:21:d8:21:85:9e:62:d3:77:c1:ec:35:
31:af:f7:5a:ea:4b:43:e1:89:54:f9:d7:d0:b6:37:
a7:79:2e:f5:41:15:b4:77:bb:2f:11:52:1e:68:1a:
d8:5b:83:35:bd:0f:9a:37:8f:cc:8f:90:e4:df:62:
4a:44:9f:30:44:d4:68:9b:ac:fc:5a:98:4b:38:e4:
2c:48:dc:1c:22:e8:3b:57:d6:14:82:cc:68:1c:2c:
86:f9:36:e8:5b:0b:6b:02:1c:7d:fc:3f:b0:98:68:
54:76:ec:ab:87:cf:c5:54:a9:02:cf:a3:70:c3:6d:
c5:d4:e7:fd:ab:eb:13:55:d0:30:ae:8e:e1:8f:c6:
fc:5d:b2:c7:8b:05:e9:3f:15:38:e0:f1:65:98:35:
a9:e6:0a:a4:e0:81:e6:18:da:c3:eb:99:03:ef:48:
e9:17:88:e2:de:bd:99:97:26:83:74:46:4c:fb:34:
41:60:b1:d9:ab:13:48:78:5e:f4:c7:51:55:cb:74:
d9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9D:B7:0B:9F:E0:CF:0E:11:92:85:D4:B7:82:54:6A:F0:D2:DF:58
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/r523C5_gzw4RkoXUt4JUavDS31g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.20.0/24
141.11.68.0/23
141.11.99.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:7f:5c:b2:25:94:85:90:f6:ea:48:ec:0a:6a:09:68:94:ef:
4a:29:a8:b9:b7:ff:1b:22:aa:e6:ba:e1:09:c8:e7:cc:52:7c:
a0:72:45:dc:a1:b5:75:fc:12:09:1b:22:a8:b8:40:87:27:99:
59:a0:e7:c4:d7:9f:2d:e8:59:84:e2:78:f0:fc:c2:19:37:58:
70:57:8f:eb:9b:31:12:06:9a:37:8f:d2:79:5b:0e:72:af:34:
04:d3:00:4e:ad:17:2d:42:f3:15:a4:cb:4a:ac:f6:23:13:7a:
cc:e3:0d:2b:56:40:b4:ad:31:e7:f1:b1:cf:01:60:5c:84:28:
83:6d:01:f5:54:27:f8:e6:62:bf:93:fb:a9:66:23:98:2b:58:
df:cb:a7:21:4a:ea:de:94:cd:ec:40:87:cc:d9:7f:03:4e:55:
06:1a:9c:46:36:48:f5:6b:da:b8:bb:bf:e2:92:77:63:5d:78:
70:cf:21:82:b6:ce:cc:48:4c:18:c2:d3:e6:6a:8e:bd:2c:15:
8a:9c:10:f6:f3:2a:1a:96:5f:e9:45:80:70:da:9e:43:b6:9f:
ce:c2:5c:b8:78:67:f7:e5:2e:25:d5:26:78:c7:cf:82:2c:98:
3b:de:17:aa:ab:c1:9d:5e:a9:85:c4:e1:9a:c9:1d:74:19:d5:
dd:87:c3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org