Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/v-TNsbdCGP5GqcsDSOlNwjvBM_o.roa
File: v-TNsbdCGP5GqcsDSOlNwjvBM_o.roa (raw, json)
Hash identifier: CV1St5EOMcD6LhRruNjmOmVPrwdaYS1uuP0eLKDGnDk=
Subject key identifier: BF:E4:CD:B1:B7:42:18:FE:46:A9:CB:03:48:E9:4D:C2:3B:C1:33:FA
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 038B01CF
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/v-TNsbdCGP5GqcsDSOlNwjvBM_o.roa
Signing time: Sat 19 Mar 2022 19:41:12 +0000
ROA not before: Sat 19 Mar 2022 19:41:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 141.11.224.0/22 maxlen: 24
141.11.232.0/22 maxlen: 24
141.11.230.0/23 maxlen: 24
141.11.228.0/23 maxlen: 24
141.11.236.0/22 maxlen: 24
141.11.98.0/24 maxlen: 24
141.11.103.0/24 maxlen: 24
141.11.102.0/24 maxlen: 24
141.11.101.0/24 maxlen: 24
141.11.100.0/24 maxlen: 24
141.11.99.0/24 maxlen: 24
141.11.110.0/24 maxlen: 24
141.11.123.0/24 maxlen: 24
141.11.121.0/24 maxlen: 24
141.11.125.0/24 maxlen: 24
141.11.124.0/24 maxlen: 24
141.11.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59441615 (0x38b01cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Mar 19 19:41:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfe4cdb1b74218fe46a9cb0348e94dc23bc133fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fc:e5:aa:49:cb:ca:09:c2:71:51:5b:1c:5e:
f8:67:29:e6:25:dd:f6:9e:f6:a3:f1:34:1d:8a:6c:
72:8e:6f:5e:86:6e:d8:b9:36:d1:3b:23:59:99:f1:
09:7e:a1:74:fb:f5:44:2f:a9:93:d5:c8:d6:41:ff:
e6:90:2d:aa:aa:94:eb:6f:54:2c:c1:4f:1b:71:ad:
79:ce:dc:84:13:32:5b:9d:fd:ad:2f:0f:b6:d4:0a:
a5:33:40:8b:6e:6e:3b:10:bf:b0:86:e6:98:d7:d1:
3e:3b:ba:47:90:a9:18:61:fe:1c:98:ba:ab:79:32:
2d:9a:d0:23:83:b3:3e:f6:1d:0e:ed:9d:a8:e7:4b:
36:ff:91:54:e9:17:27:5f:1a:c5:0c:a0:db:08:53:
5b:0e:22:8d:6c:e3:48:bf:6b:61:cd:94:61:ce:34:
ee:bf:92:1b:41:68:9b:f1:40:74:81:f2:e2:14:7c:
9f:1f:2c:82:5e:18:2b:2a:30:4e:3b:fa:e8:ec:34:
b1:c3:c0:32:14:d9:2e:52:bf:e2:04:5d:c3:7a:b5:
e5:f3:92:37:3e:22:aa:93:b8:b1:95:3d:11:42:fb:
79:7d:df:da:90:46:f8:77:d3:a0:46:f2:0e:ee:8c:
ee:d1:ed:18:67:24:8b:3f:ff:a7:30:a5:82:19:2e:
9f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E4:CD:B1:B7:42:18:FE:46:A9:CB:03:48:E9:4D:C2:3B:C1:33:FA
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/v-TNsbdCGP5GqcsDSOlNwjvBM_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.98.0-141.11.103.255
141.11.110.0/24
141.11.121.0/24
141.11.123.0-141.11.126.255
141.11.224.0/20
Signature Algorithm: sha256WithRSAEncryption
85:aa:43:59:ae:8d:82:0f:dc:1b:c2:2b:e7:f4:b7:e1:9e:c0:
2f:d7:48:0e:35:ad:69:3c:e8:db:6a:13:04:82:0e:52:41:c2:
79:6c:fa:82:e8:be:ce:f1:56:b4:ec:a2:3d:44:d1:20:a2:28:
41:c8:02:fe:a4:f7:88:b0:f1:a7:fb:4e:bd:0b:2f:25:ca:2d:
d1:13:01:32:e2:8a:7a:77:8b:09:2c:48:07:a4:52:20:13:52:
78:d2:24:b8:f0:85:18:90:67:f6:db:1c:0d:6a:01:cd:44:fa:
9b:3d:0f:05:21:04:ae:47:d4:3e:f5:08:83:1a:68:4b:6f:9a:
70:a4:d5:37:31:0b:42:31:39:4f:6b:db:3f:48:d5:5c:75:71:
d6:0a:59:68:29:a5:d1:31:f7:d4:aa:82:d1:33:74:3d:b5:bf:
8e:15:00:1e:24:dc:9d:4e:12:0d:b5:a4:2a:16:ee:94:81:8f:
f7:39:5b:86:0b:45:9c:0e:92:18:9a:9e:81:5a:6e:cb:16:00:
39:d5:66:cb:31:a1:45:b8:79:29:cd:a0:51:2a:48:f0:5d:ec:
58:6a:ea:4c:79:90:8d:00:7a:6d:56:c0:c8:c4:7f:1b:87:d5:
c0:ce:62:85:80:8c:b5:98:51:5d:a0:46:ac:f4:83:fe:6d:5f:
25:6d:f4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:17 2023 by rpki-client on console-fra.rpki-client.org