Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/vA4JrulIXNTWx_15rvZ1Cl0Ch_o.roa
File: vA4JrulIXNTWx_15rvZ1Cl0Ch_o.roa (raw, json)
Hash identifier: W4g+4GOVWq6albnAxMx+daapwV81hLZMQK69sEB1woA=
Subject key identifier: BC:0E:09:AE:E9:48:5C:D4:D6:C7:FD:79:AE:F6:75:0A:5D:02:87:FA
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 051E8B8E
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/vA4JrulIXNTWx_15rvZ1Cl0Ch_o.roa
Signing time: Thu 16 Jun 2022 10:07:44 +0000
ROA not before: Thu 16 Jun 2022 10:07:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 141.11.74.0/23 maxlen: 24
141.11.86.0/23 maxlen: 24
141.11.104.0/22 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.4.0/24 maxlen: 24
141.11.234.0/23 maxlen: 24
141.11.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85887886 (0x51e8b8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jun 16 10:07:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc0e09aee9485cd4d6c7fd79aef6750a5d0287fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:7e:9c:58:f4:04:e0:fa:68:0e:2f:a4:bd:
ca:0b:7d:2a:fc:b6:74:4f:99:cf:fe:10:cd:e4:a0:
d1:b8:68:17:97:4c:62:7c:3f:0e:25:76:59:44:4e:
1d:12:a3:1e:47:6a:0f:44:7e:d6:a2:06:35:9c:48:
c6:82:bf:44:7d:81:68:d3:5e:fd:30:92:0c:cc:2e:
ec:bb:54:77:f8:8b:6a:85:56:41:db:86:49:15:35:
c1:d0:e7:35:05:b1:16:b4:d7:19:28:66:37:be:ee:
ee:72:c3:0f:33:b7:35:d5:90:96:2a:81:3e:9c:78:
32:05:26:9f:1b:44:70:f7:a0:01:1a:75:2d:de:7d:
67:a6:07:c9:35:39:2a:84:35:c2:bd:fe:bb:c4:8c:
89:e9:fa:e8:e0:74:09:de:a8:7d:7f:f5:6e:06:74:
95:cc:33:f6:f7:69:a6:b8:a2:3e:a8:cb:37:35:4a:
0b:20:4f:d9:11:10:de:dd:2f:db:6c:2c:5e:c3:cd:
be:02:7e:ff:32:84:ff:33:da:36:ea:9b:72:33:f8:
72:bf:5a:2c:d0:73:b3:e1:9d:02:a2:58:0e:f2:7b:
b2:b9:c2:62:f4:4b:21:cc:f2:71:07:9b:2f:2d:3a:
ce:e6:f4:ba:19:d9:15:7d:76:00:1c:77:46:20:63:
bc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0E:09:AE:E9:48:5C:D4:D6:C7:FD:79:AE:F6:75:0A:5D:02:87:FA
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/vA4JrulIXNTWx_15rvZ1Cl0Ch_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
141.11.4.0/24
141.11.74.0/23
141.11.86.0/23
141.11.104.0/22
141.11.144.0/21
141.11.234.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:df:48:45:c7:b8:e5:c5:ab:be:3d:6f:79:a1:5a:28:5d:93:
ae:e6:c5:fa:6a:39:07:e8:6e:25:a4:39:d1:19:61:79:da:60:
79:18:51:af:a9:5a:5e:c2:0d:36:60:75:ec:6d:88:37:1a:07:
a1:c7:33:19:0a:08:c2:24:d5:7b:88:5d:fb:e6:d1:ae:fd:eb:
8f:56:89:c0:1f:60:77:e0:3b:1a:1c:ff:13:cb:1f:d5:71:69:
1d:b3:55:6d:6d:f6:14:b1:e6:f5:69:67:00:16:a5:22:03:3b:
f9:b5:34:68:0d:83:d7:57:22:db:a1:73:ba:9a:49:af:2c:18:
34:03:2f:1b:46:16:b0:0a:15:de:c4:d3:60:ce:ce:cd:87:89:
bb:43:9f:53:6d:bf:d2:f0:2a:c7:0c:cf:ce:05:63:49:05:16:
da:d1:b9:61:3b:80:a3:e5:d6:f5:5c:59:25:42:bd:34:1a:82:
a8:7b:d1:6b:2d:4f:7a:ee:30:7b:da:22:fa:3f:5e:5f:6b:88:
74:71:ac:71:ba:69:eb:cd:1b:31:06:1f:1e:db:24:6f:ed:52:
d2:de:2b:0d:ad:41:04:41:d9:ef:12:f6:72:c1:98:18:be:07:
72:83:f1:46:ad:88:12:21:ed:62:34:35:27:18:f3:47:f0:30:
ae:05:2a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org