Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/zDMscgtCRNRQQ5DmLrB43_IXcz0.roa
File: zDMscgtCRNRQQ5DmLrB43_IXcz0.roa (raw, json)
Hash identifier: ZvZbZiaR+wlhvyjSwX3G2SWsBhX/UkWuWUr4g0Qvj24=
Subject key identifier: CC:33:2C:72:0B:42:44:D4:50:43:90:E6:2E:B0:78:DF:F2:17:73:3D
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0182EF09F2CA813A695DE0356DBABC56D38B
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/zDMscgtCRNRQQ5DmLrB43_IXcz0.roa
Signing time: Tue 30 Aug 2022 13:56:22 +0000
ROA not before: Tue 30 Aug 2022 13:56:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 141.11.74.0/23 maxlen: 24
141.11.94.0/23 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.4.0/24 maxlen: 24
141.11.234.0/23 maxlen: 24
141.11.144.0/21 maxlen: 24
141.11.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ef:09:f2:ca:81:3a:69:5d:e0:35:6d:ba:bc:56:d3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Aug 30 13:56:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc332c720b4244d4504390e62eb078dff217733d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9d:61:10:e1:a6:10:4a:cf:3d:79:66:68:4d:
1f:43:72:82:60:50:aa:d3:76:88:0c:9b:82:ba:c9:
22:e2:d3:fb:c0:25:58:6b:30:73:11:0f:2d:09:65:
e9:d3:8e:35:3e:e5:9a:f0:54:02:7c:6a:f7:15:64:
0c:cd:5d:76:9f:c4:0e:3c:3f:8f:02:76:cb:f2:c9:
78:1f:45:c9:42:a8:ad:e4:88:a3:3e:25:89:c0:8a:
9f:da:ac:b7:43:6a:82:dc:f5:99:c1:15:7d:2e:7d:
23:f7:28:85:f2:71:2b:3b:01:74:9b:1f:7e:f2:f1:
7b:cd:4a:97:fe:78:a5:8c:35:a2:29:e7:c3:df:80:
5a:b6:d5:4d:0f:e2:4f:c0:98:9e:6d:85:26:1c:cc:
26:4f:d3:9a:aa:60:ec:0e:c7:29:56:75:74:ab:8a:
0c:97:91:42:54:f6:63:6c:f2:8f:d1:b7:36:94:16:
94:57:7a:17:62:7a:ea:7b:c6:84:4f:f7:6f:4a:7e:
99:2b:de:fc:f6:9a:39:47:ac:e6:11:77:15:be:9a:
ff:40:ef:2a:a6:23:9d:40:f2:de:8b:79:8f:83:a6:
af:a5:a8:a8:83:48:9a:47:7a:8c:c8:20:b5:07:df:
96:49:85:51:70:a7:26:33:d5:9b:56:0a:b1:06:f8:
d5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:33:2C:72:0B:42:44:D4:50:43:90:E6:2E:B0:78:DF:F2:17:73:3D
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/zDMscgtCRNRQQ5DmLrB43_IXcz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
141.11.4.0/24
141.11.34.0/24
141.11.74.0/23
141.11.94.0/23
141.11.144.0/21
141.11.234.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:60:de:5d:14:e8:68:3d:fc:53:c5:fe:9c:1e:bb:5f:88:79:
21:6b:13:cb:39:87:81:66:af:a2:b8:58:30:27:90:27:58:8e:
2d:14:76:6d:dd:a4:31:37:64:36:43:e6:36:c5:3e:81:33:ad:
41:ba:3e:4f:ec:91:97:ea:1f:0b:06:44:55:0a:75:2b:90:93:
d0:30:93:5a:f6:c3:7a:2c:f5:14:79:ab:1e:c4:3b:00:a0:96:
dd:52:c8:3d:77:39:28:ee:32:b2:aa:50:38:2e:35:20:4d:46:
b5:05:f9:83:16:cd:df:4a:d9:7f:06:22:8e:e2:f3:3b:c5:ee:
18:af:6d:fc:3f:e2:4e:67:63:80:ea:03:62:ae:d8:36:84:32:
87:f7:b9:3c:da:f5:43:1d:64:6a:15:41:aa:e0:ca:83:3a:ac:
30:17:cc:b5:56:a1:df:63:03:2d:79:c6:ec:31:7b:30:d7:a0:
2b:93:29:e2:8d:d9:d6:ba:f2:74:42:18:2c:3f:65:09:a7:a5:
e1:bd:3a:c7:32:cc:a0:3a:0f:fb:73:1b:08:b0:6c:30:80:73:
83:16:06:d6:ca:4d:e6:24:18:f0:82:b0:b0:3e:17:5f:80:5e:
27:91:fe:36:3f:6c:33:1d:94:ec:24:08:4f:e4:e4:5f:55:7d:
48:6c:2e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:11 2023 by rpki-client on console-ams.rpki-client.org