Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Chj75cRNcDVPxymL7JZinEGl3Rw.roa
File: Chj75cRNcDVPxymL7JZinEGl3Rw.roa (raw, json)
Hash identifier: oqWz8L4dZPWQR0pjfSFqf+bPskusbCzGogRJL3yTxGA=
Subject key identifier: 0A:18:FB:E5:C4:4D:70:35:4F:C7:29:8B:EC:96:62:9C:41:A5:DD:1C
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0519926F
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Chj75cRNcDVPxymL7JZinEGl3Rw.roa
Signing time: Wed 15 Jun 2022 08:49:44 +0000
ROA not before: Wed 15 Jun 2022 08:49:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 141.11.161.0/24 maxlen: 24
141.11.185.0/24 maxlen: 24
141.11.19.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85561967 (0x519926f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jun 15 08:49:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a18fbe5c44d70354fc7298bec96629c41a5dd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1b:cd:da:8c:6e:cb:87:3c:46:40:e9:bf:1d:
ab:59:69:9c:00:d3:a8:9a:79:fc:8b:3d:d4:16:c5:
cc:a7:55:98:d1:84:7c:6e:6d:a8:9b:93:a5:ab:54:
84:91:81:90:f2:af:4d:ff:98:33:2c:a3:07:0f:5d:
61:b0:ab:5d:66:ba:ad:bf:fa:fc:66:23:a6:4f:94:
32:42:37:b5:4a:a7:da:a5:05:1b:b0:0c:31:7e:34:
20:d8:ac:9c:3d:bc:ef:49:be:81:9e:78:a3:2b:5e:
9d:46:04:ae:53:1e:b8:40:ee:6f:10:c4:41:f2:e1:
6b:fa:18:61:df:cb:20:7a:df:d8:35:9f:d8:6d:4a:
b0:9d:2a:24:28:0f:f8:67:26:23:71:75:af:61:df:
77:ea:ba:d6:c6:25:15:bd:5b:73:31:ef:9a:3e:6c:
4c:aa:1e:33:8c:e1:17:ec:5f:5d:da:c6:88:5a:33:
8d:31:2e:80:15:00:5b:0c:0e:40:cc:67:e1:3d:2d:
8c:df:4a:89:c1:df:a7:0b:9a:9e:99:69:0a:33:c3:
2e:27:9d:ea:c9:35:32:b0:b5:63:cf:80:cf:01:f3:
8e:5b:f6:fb:12:ea:cb:28:32:bf:99:33:9b:9f:b1:
db:26:3d:0d:1f:bf:ed:da:17:4f:71:5c:4d:0c:a0:
f8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:18:FB:E5:C4:4D:70:35:4F:C7:29:8B:EC:96:62:9C:41:A5:DD:1C
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Chj75cRNcDVPxymL7JZinEGl3Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.19.0/24
141.11.21.0/24
141.11.136.0/22
141.11.161.0/24
141.11.185.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:0b:12:84:7b:37:50:a4:93:80:de:78:0e:73:a0:5a:c0:e2:
c3:fc:47:d8:7b:31:34:28:2b:6b:8b:38:5e:b1:54:d8:34:8a:
c1:22:ca:d0:41:8e:10:a0:22:98:f0:1d:eb:f7:f9:e3:07:2c:
9a:cf:74:00:af:50:8d:0e:3b:ea:e0:51:27:7a:c5:4b:07:71:
1c:6c:b6:8d:13:7b:c5:35:c3:9a:38:16:ba:91:1a:87:6d:9a:
b8:85:a6:fa:33:f9:73:74:5c:8e:16:bf:bd:6b:7b:8c:18:c2:
cc:83:dc:88:28:42:d3:74:ca:8a:b6:99:58:2e:b8:9e:1c:c4:
32:5f:8c:d4:6d:3b:90:8a:fe:98:02:9c:53:ae:48:f3:11:66:
93:57:ee:2a:45:7f:22:19:66:a9:ce:8a:47:08:a7:8a:60:5a:
6e:43:4c:d5:1d:77:6a:4d:fb:df:33:fd:f6:a9:61:72:ef:55:
07:d3:00:32:fc:b8:ea:ac:e0:85:78:18:56:61:5d:e5:05:78:
54:26:38:69:53:4c:ab:04:ad:cf:58:42:07:c0:9a:7a:b9:62:
f8:15:86:e2:ad:ae:e6:f1:c5:f5:65:0c:9f:ef:39:d8:e1:42:
b1:92:ef:fb:d1:14:13:fe:71:ff:e7:83:e6:bc:2f:95:72:11:
f4:22:7f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:53 2024 by rpki-client on console-fra.rpki-client.org