Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/9TJ6V1Xv_KA4mZh_qDzS6Q73zII.roa
File: 9TJ6V1Xv_KA4mZh_qDzS6Q73zII.roa (raw, json)
Hash identifier: cC21+Ad/hoW4NVnnaJXKQZ0Z7RuJiVQ8vtNxdOKdxBI=
Subject key identifier: F5:32:7A:57:55:EF:FC:A0:38:99:98:7F:A8:3C:D2:E9:0E:F7:CC:82
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 018210FBBF4A697DDDC565A371164C18632F
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/9TJ6V1Xv_KA4mZh_qDzS6Q73zII.roa
Signing time: Mon 18 Jul 2022 11:05:10 +0000
ROA not before: Mon 18 Jul 2022 11:05:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 141.11.200.0/21 maxlen: 24
141.11.98.0/24 maxlen: 24
141.11.208.0/20 maxlen: 24
141.11.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:10:fb:bf:4a:69:7d:dd:c5:65:a3:71:16:4c:18:63:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 18 11:05:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5327a5755effca03899987fa83cd2e90ef7cc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:59:d1:9f:c7:31:2e:fd:82:bf:d9:0b:17:07:
e3:3b:2a:63:46:78:2f:cc:82:fe:94:e8:fc:ff:4e:
2f:de:7f:74:0c:f2:d1:f4:b6:71:ad:1d:a9:2a:64:
75:0f:d0:d8:5a:b5:44:fe:9c:a6:c5:09:0e:70:92:
f1:ff:55:77:58:a0:d7:f3:40:99:d4:6e:15:58:d9:
35:69:42:85:59:1c:65:b6:d2:4d:ba:e4:52:e7:18:
41:e2:51:18:63:c3:53:b8:af:58:eb:c6:48:8c:25:
57:89:01:d1:78:87:c3:cc:d5:5c:b7:8e:35:39:5d:
dd:96:81:e4:f2:90:d9:3e:31:ae:fc:e7:05:f2:83:
b0:a3:68:2f:37:c1:bb:a7:28:99:d3:c9:c0:6c:6f:
73:e8:ba:fb:b5:61:75:06:d0:ab:9c:b0:58:f2:a5:
d4:a8:57:49:b1:37:a5:8d:a8:0e:b9:40:60:43:80:
82:08:36:bc:04:5a:83:ce:d3:d3:57:1a:59:5a:ed:
cb:4c:e3:cf:c2:22:aa:62:e1:8d:bf:df:02:f7:b0:
98:f1:b1:4a:73:08:04:16:70:f4:8c:52:5e:b8:a0:
a0:09:92:6b:bc:a8:f3:46:77:f6:6e:f4:ec:24:3d:
0f:90:b9:f5:b0:3b:33:8d:20:b1:22:0a:7d:ae:ab:
d5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:32:7A:57:55:EF:FC:A0:38:99:98:7F:A8:3C:D2:E9:0E:F7:CC:82
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/9TJ6V1Xv_KA4mZh_qDzS6Q73zII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.98.0/24
141.11.127.0/24
141.11.200.0-141.11.223.255
Signature Algorithm: sha256WithRSAEncryption
8b:44:28:3e:bf:9b:56:8c:b9:47:60:f4:10:88:70:7d:68:04:
1e:f8:42:8b:c6:b5:a3:8a:2d:e7:20:1d:28:f1:dd:a4:bb:49:
9c:4d:f4:e8:ba:47:fc:fa:27:70:51:85:b2:3b:c3:4d:07:88:
8a:b9:fa:98:97:5b:e1:b1:4a:59:22:ff:77:b4:0a:bf:b3:fa:
22:fb:8d:bd:02:ab:de:c7:46:59:98:1d:7f:52:66:83:8c:db:
c1:a2:3c:0a:cc:a5:ed:55:dc:e9:63:13:e6:43:96:3f:79:5b:
28:89:de:67:80:fd:29:06:e4:09:11:62:05:1c:9b:32:c8:1e:
1e:a6:1f:40:9a:42:ca:fc:e7:86:cf:36:7e:45:9e:54:6f:71:
8f:8f:c9:d5:49:4b:d8:c8:ca:5c:f0:cf:49:2c:f6:63:76:af:
00:8b:0b:eb:f1:fa:65:3c:00:91:eb:ab:ad:39:8a:4d:2e:56:
50:0a:03:f8:22:4c:02:6c:8e:f7:63:ff:88:c6:03:6a:94:fc:
69:4f:e6:73:f3:39:a4:46:76:5d:f8:b4:f4:f8:77:e7:4a:11:
71:3a:c7:97:e0:bf:44:17:96:fe:38:d7:0c:0f:68:55:68:fc:
87:43:6a:06:60:bf:b5:14:63:e1:49:af:b0:3e:12:64:92:93:
84:28:3b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:53 2024 by rpki-client on console-fra.rpki-client.org