Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/x8NmEwt3VBGyRj-ZJ8gR17kJUU4.roa
File: x8NmEwt3VBGyRj-ZJ8gR17kJUU4.roa (raw, json)
Hash identifier: XbBBl2WbRR1waRdOYz2pKq1p7oSrk5+qldryjQPtlV4=
Subject key identifier: C7:C3:66:13:0B:77:54:11:B2:46:3F:99:27:C8:11:D7:B9:09:51:4E
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04D08F10
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/x8NmEwt3VBGyRj-ZJ8gR17kJUU4.roa
Signing time: Tue 24 May 2022 10:50:13 +0000
ROA not before: Tue 24 May 2022 10:50:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 141.11.68.0/24 maxlen: 24
141.11.69.0/24 maxlen: 24
141.11.188.0/24 maxlen: 24
141.11.189.0/24 maxlen: 24
141.11.99.0/24 maxlen: 24
141.11.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80776976 (0x4d08f10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 24 10:50:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7c366130b775411b2463f9927c811d7b909514e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c5:2b:65:24:2b:18:8f:0d:e9:b1:a4:d9:6e:
9f:bf:6e:f3:e9:09:88:6c:ea:d0:a6:cb:d3:aa:82:
98:85:72:c4:54:9b:08:ec:ea:63:30:5b:93:1b:1b:
fa:6b:47:62:e0:0f:7b:03:0a:14:26:22:33:0a:2d:
3c:4b:65:64:58:3f:cf:3e:f8:28:24:51:e6:52:23:
da:b9:2c:4d:97:42:90:36:02:9f:e7:20:0a:95:e5:
88:df:67:21:2b:82:bd:3e:2d:84:48:26:f4:51:fa:
c0:ee:1e:d5:ab:fd:ee:52:50:2e:13:b7:14:01:4e:
63:44:9f:a0:94:4b:57:02:89:14:fa:59:34:fe:0d:
6d:d6:14:8a:86:54:fd:56:7b:da:83:25:31:8a:ee:
47:37:5d:40:b6:be:7d:89:a3:c3:83:4f:f8:82:b5:
5b:b2:bb:aa:ef:d6:01:83:ba:f0:9a:30:d8:08:f5:
70:af:93:93:4a:af:b6:32:7f:01:f8:6e:30:90:49:
87:82:90:cc:ff:96:77:3b:0e:95:ce:6a:1f:07:3b:
95:b2:a7:32:06:9b:26:d0:96:dd:e4:e8:77:a0:fd:
42:d2:43:ba:b2:a7:47:ef:e6:e7:da:cd:fa:1a:46:
2e:be:5e:47:cc:20:2a:ee:ba:18:99:3a:c3:50:42:
32:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C3:66:13:0B:77:54:11:B2:46:3F:99:27:C8:11:D7:B9:09:51:4E
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/x8NmEwt3VBGyRj-ZJ8gR17kJUU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.20.0/24
141.11.68.0/23
141.11.99.0/24
141.11.188.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:ff:5f:f7:71:81:14:ab:b0:60:a0:f0:70:82:64:09:32:0a:
1a:b4:d9:39:82:48:75:75:97:1a:a0:13:06:cb:4a:00:5a:ca:
4e:cd:13:be:6d:83:cf:8e:f4:fe:67:82:6c:64:94:f5:db:43:
c5:2f:42:e5:e1:39:9c:f6:ad:3d:49:aa:ae:aa:bd:2f:56:62:
56:2c:7c:3d:a3:65:fb:8d:74:a5:5b:8f:b9:3b:24:62:48:3a:
6a:9d:d0:1a:92:56:9c:5b:2a:1e:8a:a6:6d:5a:60:ba:67:58:
2b:bc:58:73:bc:ff:f5:5b:f4:09:69:a6:a4:09:d8:d5:b8:2f:
ba:4e:b5:52:02:31:a9:8d:5e:23:98:de:d6:30:3c:ee:5c:b4:
e7:da:2b:4c:89:53:89:cc:2b:26:ba:f5:1f:cc:f7:ba:6b:4e:
ca:6a:92:67:aa:d4:01:92:08:ff:43:06:ce:8d:1a:03:1b:f3:
99:88:34:16:93:80:06:ba:6e:7e:0d:02:9d:ee:74:0e:ba:7c:
87:f6:0a:d7:0b:4a:7e:53:84:ba:22:fd:64:c0:ea:5f:7f:f8:
b6:19:86:d8:1b:87:0e:63:ea:3d:5e:ac:09:10:b0:f7:e0:7b:
c3:b0:0b:79:c4:81:6e:e1:ec:f9:21:4d:c3:ca:77:28:7d:ff:
b0:68:41:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:17 2023 by rpki-client on console-fra.rpki-client.org