Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/zbJvmOwgl1HXkkGlGHUXKCeS9f8.roa
File: zbJvmOwgl1HXkkGlGHUXKCeS9f8.roa (raw, json)
Hash identifier: qgoZ/LMK8T4ZrNfSvKsb2hHy6MdZTejujzoKGXAgWEw=
Subject key identifier: CD:B2:6F:98:EC:20:97:51:D7:92:41:A5:18:75:17:28:27:92:F5:FF
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0432493E
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/zbJvmOwgl1HXkkGlGHUXKCeS9f8.roa
Signing time: Tue 26 Apr 2022 11:54:53 +0000
ROA not before: Tue 26 Apr 2022 11:54:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210443
IP address blocks: 141.11.224.0/22 maxlen: 24
141.11.230.0/23 maxlen: 24
141.11.228.0/23 maxlen: 24
141.11.232.0/22 maxlen: 24
141.11.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70404414 (0x432493e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 26 11:54:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdb26f98ec209751d79241a5187517282792f5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:84:94:0b:8a:f9:e5:5d:88:e1:bd:60:08:
15:9b:ff:8f:83:b2:42:fc:c7:2a:11:3c:6d:2b:ac:
b3:f7:0d:92:7d:ba:54:c1:cc:d5:a8:d8:78:4f:da:
e1:d2:6b:b5:34:49:3a:a7:64:d2:a2:d6:73:09:d2:
9f:e6:da:26:fe:9d:12:4e:f3:15:c6:22:0c:42:63:
d1:c2:77:75:88:f7:11:b1:a6:4f:17:11:f1:32:0c:
a0:31:4c:9f:6a:61:90:01:b9:22:6b:fb:bf:83:65:
69:19:0e:7b:7e:d6:2e:01:dd:2c:fc:be:bc:f6:98:
3e:60:73:95:b5:8e:70:ff:ed:45:02:df:42:b5:3f:
33:00:5d:60:72:4b:cc:c3:11:ce:a2:45:48:04:de:
49:3a:c2:a6:3d:b2:37:29:94:db:f7:1d:87:54:04:
ca:db:ea:38:e2:aa:7b:d0:b5:3e:46:80:9a:8f:8f:
30:56:7d:f1:e2:c1:fb:41:20:56:a5:a9:ab:5b:47:
10:6e:5e:30:70:ce:4a:3d:e5:79:2a:e8:0f:ba:c3:
57:1a:45:e6:1b:3e:a0:44:43:a2:eb:2a:13:a2:0b:
ae:cc:8d:41:f1:a6:2e:5f:c3:82:8c:6d:7d:38:f8:
82:18:a3:d6:bf:28:70:d4:70:c3:29:41:9c:61:cd:
ec:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B2:6F:98:EC:20:97:51:D7:92:41:A5:18:75:17:28:27:92:F5:FF
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/zbJvmOwgl1HXkkGlGHUXKCeS9f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.224.0/20
Signature Algorithm: sha256WithRSAEncryption
09:e4:b3:66:54:8f:d6:02:55:7d:49:0b:41:4a:17:6d:6f:5d:
7f:c8:c7:36:b7:da:28:90:18:a2:a4:da:dd:20:69:a0:60:0b:
4c:dd:d9:20:62:13:8d:8e:9f:9c:02:c3:57:29:37:7d:81:3e:
93:d4:c4:db:79:19:9a:47:f6:20:3f:b9:48:8a:ed:5d:0c:bd:
6a:ba:65:01:54:19:8a:d8:e0:fb:7c:07:6b:a0:e0:21:7f:a2:
c2:40:97:a1:cd:8d:0c:69:72:50:7b:5b:b1:44:a3:be:4d:5d:
81:41:59:b7:b4:4d:9a:9b:5b:e4:83:3d:9e:2f:19:85:15:a2:
d2:f2:95:1f:fb:34:06:0e:9e:bb:0f:b4:8f:6b:01:2f:b9:63:
80:e6:51:13:9c:09:37:50:9c:96:cb:16:c7:c1:74:27:6b:5e:
2f:f7:8f:19:5d:14:f0:96:9a:94:62:21:e6:56:a2:f9:c5:02:
d7:8b:55:48:a2:89:ad:c6:4b:d4:fc:22:7f:a5:ed:63:e0:be:
fa:bd:98:52:e1:cf:26:12:a4:bb:50:33:71:46:17:ce:9f:5c:
71:a0:79:5f:48:5e:d1:07:5a:04:58:4e:2c:67:b4:49:f8:fd:
a3:77:da:3a:ee:53:c1:1b:b6:99:88:c2:60:6b:01:1d:e1:5d:
58:45:d8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:11 2023 by rpki-client on console-ams.rpki-client.org