Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/thoc2M1UnI6UbbJjwZl_yaS5tqA.roa
File: thoc2M1UnI6UbbJjwZl_yaS5tqA.roa (raw, json)
Hash identifier: X5zlLMdvdYSfQ/VUSQNRKwEim+Er7y8VZfoNBlb3CG8=
Subject key identifier: B6:1A:1C:D8:CD:54:9C:8E:94:6D:B2:63:C1:99:7F:C9:A4:B9:B6:A0
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 051B8082
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/thoc2M1UnI6UbbJjwZl_yaS5tqA.roa
Signing time: Wed 15 Jun 2022 14:44:46 +0000
ROA not before: Wed 15 Jun 2022 14:44:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 141.11.187.0/24 maxlen: 24
141.11.188.0/24 maxlen: 24
141.11.123.0/24 maxlen: 24
141.11.124.0/24 maxlen: 24
141.11.125.0/24 maxlen: 24
141.11.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85688450 (0x51b8082)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jun 15 14:44:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b61a1cd8cd549c8e946db263c1997fc9a4b9b6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:75:f2:ca:e9:93:d7:35:9d:16:6a:21:e0:02:
c5:a7:28:64:77:aa:bd:ec:fa:f0:d0:6c:ec:8b:dd:
d7:c1:0f:b0:a8:b9:9e:d0:ba:16:f8:22:f0:be:20:
84:64:8a:6c:0e:76:8f:14:f7:57:b9:b8:63:57:71:
dd:14:ba:83:86:43:09:d2:9b:a9:e4:d6:bc:81:30:
3b:dd:d3:c6:59:ba:d1:c8:00:2f:12:39:82:9d:5a:
49:98:96:c2:d5:51:66:9b:52:20:58:13:4e:37:7f:
68:bb:3e:ca:67:65:35:35:8f:90:05:84:da:c9:2c:
8b:26:4e:a5:71:d3:0b:f8:9c:b7:b4:9c:8e:67:92:
d1:7e:2c:b7:6d:34:9a:8f:9d:ea:46:8a:a9:bb:f5:
b1:1b:6d:d5:6e:4d:10:e2:1b:ea:c2:a3:ca:59:ab:
20:21:15:38:49:cf:6d:2b:9b:69:51:05:e7:ea:05:
2b:e7:fd:0a:e8:63:35:f6:76:9d:d9:f6:97:50:91:
0a:5b:7f:ba:32:d1:ee:52:4b:5e:46:ca:6c:29:e1:
9d:20:cc:53:5c:4c:bc:64:17:11:48:23:af:bb:46:
6c:40:04:bf:bf:53:81:b7:07:67:c9:47:ad:13:ad:
bf:b2:2f:09:2f:d4:00:55:43:70:a1:2c:62:61:90:
c4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1A:1C:D8:CD:54:9C:8E:94:6D:B2:63:C1:99:7F:C9:A4:B9:B6:A0
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/thoc2M1UnI6UbbJjwZl_yaS5tqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.123.0-141.11.126.255
141.11.187.0-141.11.188.255
Signature Algorithm: sha256WithRSAEncryption
62:b4:db:28:68:35:cf:84:ff:54:6b:54:29:e8:19:3d:63:45:
4e:80:50:ab:d9:3c:cd:0c:67:18:13:cd:70:3c:13:1f:d5:08:
79:3d:07:11:df:d1:86:cf:fc:72:3a:f5:dd:95:8c:fd:e5:10:
6e:f4:6f:cf:aa:4d:db:54:db:32:c2:4a:45:8e:6e:b7:92:59:
46:d5:ce:ba:47:3f:32:ad:94:e1:e3:a8:f6:75:f1:56:0d:5e:
fe:09:ab:7d:1d:35:90:58:76:86:fb:00:6e:5d:03:69:51:41:
b9:1e:b8:53:c4:85:29:dc:e5:b8:0e:9c:15:43:80:18:c5:2d:
86:1f:b2:5c:29:e5:dc:48:46:61:63:e7:df:0b:6f:13:42:c9:
d6:49:c5:c5:f5:46:ec:24:1d:91:09:6a:f4:48:cc:28:ed:15:
9a:b1:de:97:9a:9b:59:ec:29:78:4b:04:57:f6:d4:a7:e5:83:
a1:fe:88:29:22:7a:4e:90:e5:a8:9e:ef:c6:dc:78:e8:8b:d8:
2d:b3:28:a6:c3:db:b1:32:d1:23:9f:a8:84:bd:32:0d:5c:91:
25:75:a8:79:df:cd:0b:c1:bc:29:32:c1:44:cf:79:54:40:03:
cf:9d:ca:a8:cd:20:67:22:62:2f:1d:01:8b:be:e0:79:5c:85:
d7:38:49:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org