Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/7cXD6Fm1lkOCc2wUnMxUqXGfFGo.roa
File: 7cXD6Fm1lkOCc2wUnMxUqXGfFGo.roa (raw, json)
Hash identifier: qVGwMFj6S9oPdD0OgwInoyuvKMtY102SZ/IowvRLHpk=
Subject key identifier: ED:C5:C3:E8:59:B5:96:43:82:73:6C:14:9C:CC:54:A9:71:9F:14:6A
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 018369C659683A7417B070DC5D024E221860
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/7cXD6Fm1lkOCc2wUnMxUqXGfFGo.roa
Signing time: Fri 23 Sep 2022 09:55:50 +0000
ROA not before: Fri 23 Sep 2022 09:55:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 141.11.204.0/22 maxlen: 24
141.11.216.0/22 maxlen: 24
141.11.224.0/22 maxlen: 24
141.11.220.0/22 maxlen: 24
141.11.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:69:c6:59:68:3a:74:17:b0:70:dc:5d:02:4e:22:18:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 23 09:55:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edc5c3e859b5964382736c149ccc54a9719f146a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:49:1e:da:ee:07:a6:2a:5c:f3:c3:ac:a2:99:
e4:07:6e:11:d2:f0:96:39:36:2d:68:88:20:08:41:
1c:43:5f:80:cf:9d:85:a9:39:59:02:4b:90:d8:8e:
7b:9d:c8:2e:60:50:9b:93:8e:53:d1:78:30:91:2e:
9c:de:15:31:4f:7d:60:d7:7e:9c:35:34:7c:78:43:
7c:97:8d:c5:fc:4c:84:91:71:5e:c8:0a:88:5d:ae:
b3:9c:2f:59:2f:a9:03:37:42:14:5c:08:d8:fd:5a:
98:2d:f5:ba:f6:ed:11:84:9b:65:08:c1:16:97:c6:
70:50:c8:cd:97:ef:ba:3c:90:e2:a7:18:cc:48:c5:
19:aa:b9:49:10:f2:a4:25:a9:ff:52:02:32:bf:65:
9d:f3:78:9d:b9:81:d0:03:4a:1c:3c:c3:9b:a1:d6:
25:2b:fd:d4:c0:e3:01:89:0c:b2:48:63:c8:39:1b:
fe:f3:af:a3:b1:87:15:b2:7a:7f:0f:5b:80:40:f6:
dd:b9:d7:e8:f7:b9:b0:5b:59:b5:af:52:e3:17:7e:
16:31:f3:18:fe:63:b6:02:3e:9d:61:83:78:76:75:
f0:63:f0:e8:f0:02:e0:bd:7f:59:c8:30:f9:1a:70:
ef:e2:2b:30:c9:58:55:91:a6:85:5c:91:1e:1b:dc:
4d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C5:C3:E8:59:B5:96:43:82:73:6C:14:9C:CC:54:A9:71:9F:14:6A
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/7cXD6Fm1lkOCc2wUnMxUqXGfFGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.128.0/22
141.11.204.0/22
141.11.216.0-141.11.227.255
Signature Algorithm: sha256WithRSAEncryption
9b:04:6c:96:96:eb:4f:a4:fd:56:dd:a8:c6:e0:29:b6:e4:28:
51:c8:d4:2e:cb:b1:99:32:d9:75:77:86:ee:6e:72:c4:33:88:
f0:18:cb:73:75:1e:2f:9f:ce:be:b8:ca:a6:ee:3c:ae:6c:82:
a7:4c:c4:d0:6d:18:8b:75:ee:76:08:96:81:98:79:c0:cf:32:
f1:ce:83:9f:6b:5b:b4:ac:f1:eb:da:38:bf:30:98:e3:82:6f:
e3:93:b4:d3:c0:ad:56:43:ce:32:21:12:df:05:6f:54:1d:37:
69:a8:5c:77:fc:80:47:84:eb:82:b2:77:28:5b:32:8a:11:0a:
91:f3:78:2a:62:57:92:7b:41:46:e2:e2:df:27:44:92:7f:53:
7c:d0:81:ef:20:00:10:8a:df:fd:57:e5:34:4d:70:8b:99:8c:
d4:d8:64:80:a7:af:a9:71:36:02:c7:2e:68:96:4d:31:4f:7b:
6f:ab:15:cc:25:08:bb:ad:6a:6a:6d:59:c5:d2:1d:f3:b8:d6:
06:7f:0c:f3:12:57:f3:e3:a5:09:03:be:35:ee:e7:97:a2:ef:
49:8b:d7:6d:c5:39:87:74:55:3c:b0:49:17:4a:f8:43:c4:ca:
d4:68:d8:70:6b:bd:47:c9:22:1d:50:5e:cc:d3:b0:79:2d:68:
2f:30:2a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:53 2024 by rpki-client on console-fra.rpki-client.org