Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/rs-jlVoT1dg9D88SLMQWyAfZHSc.roa
File: rs-jlVoT1dg9D88SLMQWyAfZHSc.roa (raw, json)
Hash identifier: 9c3TBccmgh4DE9E/cfCXQDTwbqytOHmUnVtU0ltbq/E=
Subject key identifier: AE:CF:A3:95:5A:13:D5:D8:3D:0F:CF:12:2C:C4:16:C8:07:D9:1D:27
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 030204A7
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/rs-jlVoT1dg9D88SLMQWyAfZHSc.roa
Signing time: Fri 11 Feb 2022 10:25:37 +0000
ROA not before: Fri 11 Feb 2022 10:25:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 141.11.168.0/22 maxlen: 24
141.11.72.0/22 maxlen: 24
141.11.80.0/22 maxlen: 24
141.11.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50463911 (0x30204a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Feb 11 10:25:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aecfa3955a13d5d83d0fcf122cc416c807d91d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:61:4e:79:0a:c3:a4:11:45:c8:a0:63:31:ac:
8b:8b:3b:30:5d:de:e4:9e:53:b7:cc:37:76:a2:30:
35:e6:c5:85:99:09:22:c5:f3:51:88:de:e8:5a:3f:
8b:21:9e:4d:ca:52:32:39:39:03:84:b3:e0:ae:8a:
29:82:13:59:1e:02:80:00:45:b1:54:00:56:7a:cd:
2e:ea:c8:56:e1:6f:66:06:ab:c0:bb:d0:b9:59:38:
f5:84:32:39:f6:c3:51:fd:e8:5f:64:06:69:9c:00:
b7:87:ea:9a:f3:61:f1:99:ec:68:f4:67:94:04:a2:
53:d3:a3:c5:d7:b7:ff:52:f1:24:77:4c:a6:0d:4e:
9f:6d:d7:bc:f9:30:e8:4e:45:ba:c2:92:ec:90:0c:
a7:fd:3f:c9:f9:d5:b8:2a:dc:a4:15:cd:cd:c7:53:
77:71:3b:da:09:94:9a:ac:05:0f:80:18:9a:da:5d:
31:03:f2:d1:f7:02:72:b8:de:e4:24:a4:63:35:30:
8f:ac:ea:d9:4f:f0:6c:fe:1f:08:18:f3:da:4f:2a:
50:04:e2:dd:ae:84:34:ac:7e:a5:b2:2b:31:27:a1:
a8:0a:3c:19:ef:ab:65:10:d5:01:17:90:db:86:43:
c2:1c:04:73:7f:92:1f:41:16:7d:9b:db:ae:c9:67:
41:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CF:A3:95:5A:13:D5:D8:3D:0F:CF:12:2C:C4:16:C8:07:D9:1D:27
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/rs-jlVoT1dg9D88SLMQWyAfZHSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.32.0/22
141.11.72.0/22
141.11.80.0/22
141.11.168.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:2a:13:8b:12:ad:ac:1f:20:9a:58:c9:be:a7:8c:6c:05:38:
0d:f2:43:9c:08:1f:0f:f1:22:9b:b4:46:29:ee:3a:91:b2:ea:
52:ed:79:fa:d6:04:8a:2f:85:7b:e1:c0:51:cd:f5:16:b2:a3:
0b:fe:db:8f:fa:5e:16:df:6f:61:aa:d5:7c:6f:cb:a4:ea:41:
c0:b6:42:e7:e2:81:31:b1:8f:33:b5:1a:02:fd:59:76:fe:a8:
f2:52:63:d9:27:80:a7:45:80:45:29:fe:9c:d1:8f:b1:fa:0c:
b5:74:63:03:88:7b:0a:08:d8:90:31:31:c9:dd:cf:24:03:b2:
54:cf:db:ca:ff:41:59:4f:f6:06:e3:a9:45:d6:28:fb:41:a1:
ea:51:e8:8b:fa:c7:eb:19:23:8e:96:da:8d:49:13:b7:da:8e:
66:ec:b4:85:0c:66:66:c1:66:d4:c4:51:98:0d:af:f3:8b:53:
ca:8e:43:2f:a3:45:28:5b:20:83:0a:c8:be:22:81:4c:e1:1c:
2b:4e:a4:94:d4:9d:0f:11:a8:65:b6:8e:a6:b6:84:37:98:15:
b5:37:b1:b7:7b:b2:e4:d2:b7:db:5f:2e:d4:e6:fb:05:b5:15:
73:7b:3a:8a:62:ae:40:71:ee:5e:50:07:98:a0:cb:f2:63:3f:
26:88:e3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:17 2023 by rpki-client on console-fra.rpki-client.org