Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/DsF-gn0gUGxnB2TaChAE_UBExtU.roa
File: DsF-gn0gUGxnB2TaChAE_UBExtU.roa (raw, json)
Hash identifier: 8EjuszpeKgHs4NMY94kpS6Ii0NwMgzXCy+mUEqO0BJ4=
Subject key identifier: 0E:C1:7E:82:7D:20:50:6C:67:07:64:DA:0A:10:04:FD:40:44:C6:D5
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0182696687D0AB87939F4F71925AC0C2FF95
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/DsF-gn0gUGxnB2TaChAE_UBExtU.roa
Signing time: Thu 04 Aug 2022 15:08:23 +0000
ROA not before: Thu 04 Aug 2022 15:08:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 141.11.224.0/22 maxlen: 24
141.11.128.0/22 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:69:66:87:d0:ab:87:93:9f:4f:71:92:5a:c0:c2:ff:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Aug 4 15:08:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ec17e827d20506c670764da0a1004fd4044c6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7a:da:f4:1d:c7:02:2d:9e:25:b9:2e:c8:f7:
3d:1a:93:5f:76:ac:cf:c5:67:a1:36:a4:c3:8f:23:
3b:46:00:4c:60:6f:55:73:2c:bf:34:ef:81:70:60:
01:8f:18:4a:5a:5b:3f:55:19:e5:d2:b2:77:cf:4b:
28:91:19:f8:8d:e7:05:d3:77:e2:ad:be:74:d2:8c:
7e:8f:04:02:81:c4:03:2e:02:0a:6d:2a:df:a1:4f:
7f:a8:93:25:48:e8:76:18:13:fb:0a:35:84:df:23:
80:ba:7b:e6:d8:6b:69:dd:75:e3:70:bf:2d:8e:a9:
45:fa:bd:db:89:62:75:3f:0b:b8:97:76:4e:f6:d8:
ea:b7:cb:8d:3c:e2:1c:43:7e:59:77:26:09:dc:a9:
e2:b6:09:4a:80:b3:0a:c1:0f:e4:95:4b:02:46:3b:
d4:f4:4e:72:e6:cd:a0:5b:ce:e9:fb:ef:78:99:7b:
d6:1a:31:b6:61:d1:46:0e:c2:32:4f:9c:e9:ee:e7:
a1:a0:56:c2:ef:f0:5c:5c:eb:f2:1e:0e:dc:04:ba:
ed:3c:9f:53:85:ee:fb:cb:18:ae:bf:3d:42:fe:37:
b2:88:fc:e4:49:fd:c9:0e:95:d3:a2:f2:71:6d:76:
61:ce:11:49:a4:b9:61:d2:97:10:24:dc:45:27:f8:
37:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C1:7E:82:7D:20:50:6C:67:07:64:DA:0A:10:04:FD:40:44:C6:D5
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/DsF-gn0gUGxnB2TaChAE_UBExtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.21.0/24
141.11.128.0/22
141.11.136.0/22
141.11.224.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:ad:21:2d:a2:d6:2d:17:73:6f:b1:3d:74:65:9d:c6:0e:d6:
3b:4b:27:12:b4:b5:80:67:0b:71:0a:b7:a6:9b:91:48:84:3b:
76:d9:f2:48:d5:13:59:23:c2:98:2f:26:df:18:4f:5d:89:9a:
dc:3f:f3:9e:09:41:96:f8:4a:97:4c:3c:63:85:ab:4a:b0:38:
06:b3:e6:24:1a:f3:8c:79:1e:2d:df:02:07:a3:9e:0d:5f:33:
32:cb:6e:ea:73:28:8d:59:d0:01:e9:2a:dd:75:ae:d2:75:94:
f4:0c:94:c7:9f:58:9f:78:65:2b:da:f0:41:3e:02:cd:be:5f:
47:b1:94:a7:01:f8:9e:81:9e:e6:6f:f4:fc:7b:33:a9:2e:c1:
b2:d6:1b:b7:a0:48:f2:d1:2e:12:1e:2a:d2:ad:50:43:08:60:
d0:18:d9:6f:3d:31:b0:4f:00:31:7f:0b:8f:6f:b5:ce:e8:6b:
d7:10:eb:11:86:e3:f6:a0:c2:5c:ae:83:d3:36:a6:24:60:ba:
1f:e2:6b:e6:18:eb:63:e7:62:a3:d0:0a:91:9d:2d:f6:5b:ca:
2b:38:92:af:73:48:3c:c6:13:cb:ae:cc:0d:89:b7:d4:d9:2e:
9d:19:08:e7:61:99:70:fa:9b:59:31:6f:95:32:22:15:03:bd:
b5:f0:e8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:53 2024 by rpki-client on console-fra.rpki-client.org