Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/BEGhd-G4gERtkyvkvrF9cXDJyYo.roa
File: BEGhd-G4gERtkyvkvrF9cXDJyYo.roa (raw, json)
Hash identifier: Rc5EZRZXgHjWJ+l6pJTDaYwL4wyFi8YboFbeRBZqkbk=
Subject key identifier: 04:41:A1:77:E1:B8:80:44:6D:93:2B:E4:BE:B1:7D:71:70:C9:C9:8A
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0183AC9D9BC375616E98B1FA69A19097056E
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/BEGhd-G4gERtkyvkvrF9cXDJyYo.roa
Signing time: Thu 06 Oct 2022 09:25:53 +0000
ROA not before: Thu 06 Oct 2022 09:25:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 141.11.68.0/24 maxlen: 24
141.11.69.0/24 maxlen: 24
141.11.20.0/24 maxlen: 24
141.11.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ac:9d:9b:c3:75:61:6e:98:b1:fa:69:a1:90:97:05:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Oct 6 09:25:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0441a177e1b880446d932be4beb17d7170c9c98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7b:27:6e:ab:d4:17:c6:18:9e:c9:d1:1e:fc:
c5:81:a6:e8:24:47:8e:71:8b:9d:7a:39:99:87:a4:
6a:ff:05:3b:3d:6d:73:fd:d0:75:a9:82:d1:5c:2c:
c0:e8:23:42:ee:c2:c3:42:0a:51:d8:f4:44:5a:e9:
e1:be:42:3b:ad:31:c4:f6:b9:8f:51:b7:11:06:4a:
a2:83:7b:71:4b:04:64:2a:16:72:c3:ff:b1:fe:23:
b2:b5:d7:4a:c2:49:20:6c:7b:e5:e9:95:91:cb:63:
08:39:3d:ff:8f:fa:d5:8a:69:37:b4:b1:50:c6:3e:
32:62:32:87:bc:58:45:8b:0e:61:6f:ab:75:eb:a1:
de:50:df:a3:08:67:4e:21:ae:26:14:58:c5:16:01:
be:f6:16:09:25:39:f5:14:72:4a:5d:88:59:b3:c2:
98:71:32:e7:53:fa:fe:0d:31:33:c1:18:f1:27:e4:
d9:8e:87:ae:70:b6:bf:e8:0c:5f:23:12:76:42:e5:
0a:e7:86:8d:90:79:ba:11:0d:1b:c5:be:48:1e:1b:
d7:c2:d9:2d:60:0d:70:8a:d3:30:b4:3d:63:dc:78:
ab:a2:0a:86:65:fa:86:55:1a:91:d2:0e:db:59:45:
5a:9b:e4:8d:ac:28:41:3c:0b:14:f9:f3:ec:92:16:
8d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:41:A1:77:E1:B8:80:44:6D:93:2B:E4:BE:B1:7D:71:70:C9:C9:8A
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/BEGhd-G4gERtkyvkvrF9cXDJyYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.20.0/24
141.11.68.0/23
141.11.251.0/24
Signature Algorithm: sha256WithRSAEncryption
36:ae:b0:5b:f2:3f:c6:76:8b:c6:ab:cd:0a:12:57:d7:0f:5f:
1b:83:d1:43:0e:73:9a:98:09:1e:5e:0d:c8:63:85:ef:3d:94:
20:4a:df:b5:41:ff:40:5d:69:fb:d1:ff:d7:cc:9f:09:e9:69:
2f:14:1c:9d:91:5e:17:ea:e1:2a:7b:e4:0b:08:b5:9e:74:40:
04:31:04:e2:36:9d:19:51:2e:09:e0:f1:6f:eb:3d:da:82:82:
08:c9:ed:bb:76:25:2f:2b:dc:d6:8e:7b:69:b2:5d:a8:a8:d4:
4e:d9:77:bb:7b:0e:44:8b:57:68:99:94:22:9c:0f:56:10:8b:
4e:92:96:40:af:93:4f:4c:fb:b2:c6:42:19:6b:5e:14:f5:cd:
10:7f:64:57:9b:c7:36:ef:e3:89:47:70:dc:80:4d:14:60:d8:
87:fc:60:e6:6a:fe:e8:28:a6:a4:f5:6d:f2:48:3b:94:28:1e:
22:f3:06:81:2d:ff:43:e7:da:4e:a8:2a:07:f8:ed:39:5c:9e:
dd:4c:72:a4:2d:a1:e9:77:5e:51:b5:21:3d:04:b3:d4:ec:92:
3c:d5:3f:96:5a:83:a4:4a:af:30:a9:09:98:2a:53:e2:e1:0f:
f5:2a:6c:d6:6d:68:1c:3b:87:c1:f3:8e:ab:33:da:f3:71:bf:
cd:80:71:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org