Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/rrsE7mG27T5HVxWJBqNoB3xJJzo.roa
File: rrsE7mG27T5HVxWJBqNoB3xJJzo.roa (raw, json)
Hash identifier: 0b1KuJDj1f5mIlOQni+Hq7pUXUIpn3Ap6RFxrZYq+MU=
Subject key identifier: AE:BB:04:EE:61:B6:ED:3E:47:57:15:89:06:A3:68:07:7C:49:27:3A
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 047E8C33
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/rrsE7mG27T5HVxWJBqNoB3xJJzo.roa
Signing time: Mon 09 May 2022 10:53:44 +0000
ROA not before: Mon 09 May 2022 10:53:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 141.11.232.0/22 maxlen: 24
141.11.230.0/23 maxlen: 24
141.11.228.0/23 maxlen: 24
141.11.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75402291 (0x47e8c33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 9 10:53:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aebb04ee61b6ed3e4757158906a368077c49273a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:56:82:e2:8b:55:56:80:ca:c1:80:3c:70:
fe:3f:81:cb:e8:ed:d6:45:2c:ef:1e:23:9f:4c:2e:
35:a3:de:7c:a3:4f:29:be:b9:a4:3d:2a:aa:8c:e4:
79:69:bc:76:7d:42:c2:1a:f7:8e:a9:da:f2:5e:2e:
06:b5:be:41:fd:3c:9f:af:44:c2:28:4b:fc:03:49:
aa:48:cb:d2:0a:b2:a3:5c:c2:46:0a:d3:74:34:3a:
85:9d:34:6b:8c:ea:73:c8:94:05:ba:e9:6e:d9:bd:
0a:c5:04:2d:30:6a:76:3a:e3:d9:9d:bb:2c:ad:2c:
40:90:77:47:46:af:8f:98:8f:63:98:53:a7:9b:24:
bd:f8:5c:ba:5f:2d:4a:c6:b6:44:6b:99:9b:50:f4:
aa:91:a8:da:09:ff:86:dc:fd:74:42:07:49:3e:9d:
44:40:de:9f:56:38:7b:e8:97:32:b0:16:a2:61:7f:
38:23:a8:3f:6a:c5:0b:7e:da:1d:15:a5:bc:15:2c:
51:c8:f5:87:1f:59:6a:5d:7d:b5:c6:f5:e8:96:78:
9e:48:ec:70:91:e3:43:84:df:c9:2d:03:dd:65:aa:
98:9e:ef:ac:b1:fe:9a:80:46:57:a8:dd:7d:ab:29:
17:34:b0:35:da:98:bb:d0:74:bf:75:e7:7d:77:85:
5b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BB:04:EE:61:B6:ED:3E:47:57:15:89:06:A3:68:07:7C:49:27:3A
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/rrsE7mG27T5HVxWJBqNoB3xJJzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.228.0-141.11.239.255
Signature Algorithm: sha256WithRSAEncryption
63:c2:41:cf:6b:3d:ee:5e:a5:8e:6d:73:34:39:a3:00:ca:83:
73:aa:3b:f6:a9:b0:e7:e4:32:2f:83:44:ae:a3:c0:a5:08:1d:
67:83:1e:e9:cb:13:ae:1e:f5:cf:ce:21:1a:f2:4e:5b:be:d8:
a2:b5:e0:05:15:49:b7:15:a5:5b:bd:0b:e7:c3:01:0d:3c:25:
be:b6:60:42:bf:23:25:84:3e:8f:e1:ff:44:ed:65:6d:40:a3:
7e:25:cf:ce:b3:1b:b4:b1:fb:5d:d8:1b:ad:c1:68:1f:a3:0e:
71:58:e3:d2:3b:13:67:2b:34:74:15:47:ca:1f:b4:bc:95:59:
d6:cf:f6:56:75:78:5f:46:57:50:31:5c:48:e0:ac:83:3e:b9:
bc:4c:28:9c:6d:19:26:f8:6a:17:3a:7e:00:eb:44:9a:04:d5:
87:cb:e7:6c:75:9b:fb:57:ad:9e:35:70:24:be:ff:4b:bb:04:
58:32:10:64:cf:a0:ad:a9:d4:c2:b9:c3:e8:95:1e:f2:3e:fc:
ff:11:6d:d9:4b:be:df:54:14:34:80:f9:3e:b8:70:8a:70:8b:
cf:88:f7:30:61:15:d0:b9:c1:89:57:eb:d9:f0:a3:62:97:fd:
15:4e:81:18:07:18:d5:78:95:ff:f4:b4:a5:2d:78:dc:2e:b8:
0f:02:1a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org