Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/t12SudKKiXdMUxQsjqNbkls_XoU.roa
File: t12SudKKiXdMUxQsjqNbkls_XoU.roa (raw, json)
Hash identifier: viLJKvl0Zp9MTeLjXTNLwZSFfDf71637BFTyzy9RW7c=
Subject key identifier: B7:5D:92:B9:D2:8A:89:77:4C:53:14:2C:8E:A3:5B:92:5B:3F:5E:85
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 043182EC
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/t12SudKKiXdMUxQsjqNbkls_XoU.roa
Signing time: Tue 26 Apr 2022 11:54:53 +0000
ROA not before: Tue 26 Apr 2022 11:54:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 141.11.224.0/22 maxlen: 24
141.11.232.0/22 maxlen: 24
141.11.230.0/23 maxlen: 24
141.11.228.0/23 maxlen: 24
141.11.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70353644 (0x43182ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 26 11:54:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b75d92b9d28a89774c53142c8ea35b925b3f5e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e5:26:26:a6:05:4a:c9:53:67:28:0e:90:22:
b1:f0:23:c1:58:e6:2d:17:45:66:d5:ef:ad:64:45:
b7:15:0d:f4:0e:b9:bc:7a:95:c9:78:a6:a3:2a:5e:
4f:9a:f7:26:a1:30:a9:c1:94:80:f8:9d:15:de:ac:
0d:d1:1b:c6:d7:68:e8:39:f2:a3:84:57:c7:16:b8:
18:00:7a:37:6d:04:19:bc:fd:1d:a8:7f:4b:c7:ff:
9f:9e:0f:ae:35:aa:fd:cf:21:4a:7c:a1:58:2b:bf:
7f:96:59:b5:04:75:a6:1f:7a:fa:cb:fa:35:1f:bf:
bf:9d:d9:46:30:7f:30:08:aa:6c:9d:70:22:cd:00:
2e:d3:71:ff:40:55:26:6b:f8:cf:64:0e:36:73:4d:
39:69:d2:f6:78:87:88:a9:86:67:2a:4c:d6:67:b7:
32:48:b2:b8:37:5e:6b:df:67:98:5f:75:6a:70:06:
98:34:3a:ee:29:94:1e:e0:40:c6:0e:16:81:e6:f7:
35:db:d4:10:d7:2f:01:a7:d9:6a:d6:3d:7a:7f:b6:
e2:1d:35:a3:07:78:3d:b2:ae:c8:a6:e0:cc:b2:e7:
62:17:7b:2b:ac:75:81:ee:06:f0:fa:c8:93:7c:a0:
4c:5f:49:72:0f:f8:6d:42:d3:63:91:b7:72:a0:65:
82:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5D:92:B9:D2:8A:89:77:4C:53:14:2C:8E:A3:5B:92:5B:3F:5E:85
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/t12SudKKiXdMUxQsjqNbkls_XoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.224.0/20
Signature Algorithm: sha256WithRSAEncryption
0f:f5:2c:95:01:a1:2d:9e:fb:31:51:5a:79:ff:a3:ff:d5:b6:
df:b2:08:60:a8:fa:a6:a0:84:6a:95:10:76:6a:6e:b0:1f:db:
25:c0:ea:16:99:99:2d:22:7b:8b:05:c3:0c:77:a9:ee:05:7a:
a2:ef:d4:58:f3:e5:81:45:18:06:ee:08:94:b1:89:21:bb:25:
de:a3:79:6c:85:a2:a2:59:6e:7a:0e:b0:73:14:c8:33:79:3c:
c8:55:50:d5:8f:4f:c5:65:33:48:45:0c:22:cc:fa:3c:01:b3:
0a:66:a3:70:fa:93:12:f8:78:7f:b4:68:2a:a5:62:0e:78:75:
29:75:6b:16:dc:a4:03:a3:b1:e5:bb:57:65:18:14:1b:cc:2d:
25:dc:8f:b0:cc:4b:7a:f1:72:97:1d:a9:46:09:68:ec:34:c9:
a8:17:92:93:ac:a3:3f:0d:57:c9:5f:c4:5e:f5:c3:96:b6:67:
2c:52:6f:a3:d6:6b:66:1e:92:73:4d:a9:42:b6:89:73:5d:2f:
97:b6:22:bf:88:12:f1:1c:da:bc:65:e9:3d:05:b8:44:bc:18:
98:c4:78:d9:87:4f:c1:65:c0:29:c0:71:1d:0f:61:c3:64:3f:
cf:6d:ce:92:0b:c8:7f:a0:8a:c5:f7:c5:29:f7:12:41:b9:98:
cc:c0:bf:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org