Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/CjQhTj1uFVtj_OpP7OlchiIZe_M.roa
File: CjQhTj1uFVtj_OpP7OlchiIZe_M.roa (raw, json)
Hash identifier: iKHiC+4do25VkwXlYhN/UcSC4c/tAknKFqjhp6zOBxo=
Subject key identifier: 0A:34:21:4E:3D:6E:15:5B:63:FC:EA:4F:EC:E9:5C:86:22:19:7B:F3
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 046CE341
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/CjQhTj1uFVtj_OpP7OlchiIZe_M.roa
Signing time: Thu 05 May 2022 14:53:10 +0000
ROA not before: Thu 05 May 2022 14:53:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.11.44.0/22 maxlen: 24
141.11.43.0/24 maxlen: 24
141.11.40.0/22 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.42.0/24 maxlen: 24
141.11.41.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.80.0/20 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.0.0/24 maxlen: 24
141.11.10.0/23 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.22.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.37.0/24 maxlen: 24
141.11.33.0/24 maxlen: 24
141.11.32.0/22 maxlen: 24
141.11.35.0/24 maxlen: 24
141.11.34.0/24 maxlen: 24
141.11.160.0/24 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.192.0/19 maxlen: 24
141.11.92.0/22 maxlen: 24
141.11.128.0/19 maxlen: 24
141.11.240.0/21 maxlen: 24
141.11.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74244929 (0x46ce341)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 5 14:53:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a34214e3d6e155b63fcea4fece95c8622197bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:ac:b2:b7:eb:ca:cd:ac:85:2c:28:f4:b3:
72:b8:c5:c6:eb:fd:d8:66:5e:77:ee:7c:88:10:22:
f3:e0:f0:bd:92:5f:94:25:e6:14:70:b1:6b:5e:5f:
fa:a1:3c:0e:71:a3:74:a3:71:cf:64:c3:01:62:bd:
cc:13:0d:9f:47:4e:74:7c:e8:3f:5f:be:fe:9e:f0:
00:18:13:ab:88:b4:02:1d:56:bd:0c:13:84:7f:9c:
6e:7c:ce:b7:83:96:c5:a6:de:c2:96:7e:84:7c:77:
c9:2e:dd:f0:85:80:4d:4b:83:07:7a:07:e8:69:ae:
db:d4:37:f5:3a:a3:aa:8a:65:c2:2f:cd:ee:68:60:
0f:14:bf:de:b7:fb:d9:73:bb:b2:9f:ec:61:13:5e:
2d:3d:b8:00:8b:49:4a:9c:54:b8:5e:6c:73:6a:1a:
ca:9a:3e:9f:d0:ed:6a:b9:81:fc:14:28:31:a1:85:
ac:66:b6:95:51:d4:5a:44:b5:07:25:95:0b:ab:3d:
8f:36:75:8c:33:83:a1:c6:c1:92:9f:ff:65:cd:d2:
37:fb:56:fe:37:8a:7a:d7:04:4c:ae:bc:6d:0b:0c:
d5:72:c9:c1:3c:44:74:b3:03:73:32:6d:86:84:1c:
92:48:9a:0f:f1:83:b4:fc:4c:a0:db:a2:0e:44:ef:
f2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:34:21:4E:3D:6E:15:5B:63:FC:EA:4F:EC:E9:5C:86:22:19:7B:F3
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/CjQhTj1uFVtj_OpP7OlchiIZe_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0-141.11.2.255
141.11.10.0/23
141.11.17.0-141.11.18.255
141.11.21.0-141.11.22.255
141.11.25.0/24
141.11.28.0/24
141.11.31.0-141.11.35.255
141.11.37.0/24
141.11.39.0-141.11.47.255
141.11.80.0/20
141.11.128.0-141.11.160.255
141.11.176.0/24
141.11.182.0/23
141.11.192.0/19
141.11.240.0-141.11.251.255
Signature Algorithm: sha256WithRSAEncryption
6f:7a:50:62:3c:55:d9:ca:82:45:32:d6:4e:42:4a:25:b9:7b:
7c:aa:00:10:b8:ec:ef:93:b1:ee:9c:ed:54:e6:32:25:76:b3:
12:4e:59:5c:da:be:49:ee:31:06:86:a0:ad:e4:8e:40:8b:e4:
80:75:01:ce:39:1e:0e:38:2f:5b:ff:5b:da:dd:fb:3f:a4:35:
c2:79:3f:04:99:9e:d9:34:3b:7f:5b:e9:2d:99:ce:d9:5c:60:
ec:37:05:54:32:e2:26:e5:b7:14:af:a0:41:a5:2d:7f:65:bb:
2a:8e:05:29:1c:de:d8:4e:e4:09:1b:42:cb:cf:63:e4:9a:66:
5c:24:f5:72:28:4a:f6:76:c2:3b:af:34:73:61:b0:a2:2a:4c:
04:ff:4e:06:94:58:a4:36:d6:5d:78:f8:b2:4b:88:80:29:98:
10:91:73:15:05:65:34:1d:da:5a:c2:c7:dd:6a:6f:9c:04:58:
cf:da:5a:b8:ff:9a:fe:5b:aa:90:37:0c:cd:58:21:8f:02:34:
d9:cc:89:a3:54:d8:f9:35:ac:fd:f7:0b:20:9a:1a:8e:a7:f9:
a4:9c:60:bf:a4:5d:d9:f9:93:fd:35:1b:fb:21:d1:44:72:1e:
bc:2d:9b:3f:21:49:39:e3:38:98:05:a1:da:f8:9f:1c:88:46:
fa:c3:b0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:53 2024 by rpki-client on console-fra.rpki-client.org