Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/EIGnow5mkyhOm6EDs6lLC0fk0NU.roa
File: EIGnow5mkyhOm6EDs6lLC0fk0NU.roa (raw, json)
Hash identifier: vAdd5li1/VYSYVcJLPaA+3k6A7L9ShqON2Ns+uEWFPE=
Subject key identifier: 10:81:A7:A3:0E:66:93:28:4E:9B:A1:03:B3:A9:4B:0B:47:E4:D0:D5
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0480E626
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/EIGnow5mkyhOm6EDs6lLC0fk0NU.roa
Signing time: Mon 09 May 2022 11:19:20 +0000
ROA not before: Mon 09 May 2022 11:19:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 141.11.74.0/23 maxlen: 24
141.11.192.0/19 maxlen: 24
141.11.187.0/24 maxlen: 24
141.11.86.0/23 maxlen: 24
141.11.104.0/22 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.4.0/24 maxlen: 24
141.11.234.0/23 maxlen: 24
141.11.127.0/24 maxlen: 24
141.11.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75556390 (0x480e626)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 9 11:19:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1081a7a30e6693284e9ba103b3a94b0b47e4d0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ec:76:90:fb:4d:36:80:6f:11:e4:e6:a8:6c:
0d:66:01:93:33:e6:da:25:fb:19:6c:0f:d2:4b:d5:
02:33:90:dd:eb:46:a8:43:6b:7d:6b:44:83:25:27:
fd:7c:f2:24:cf:19:ce:34:6d:63:82:de:63:d1:60:
ad:55:08:d3:ad:9a:67:e8:02:41:a4:af:f6:60:a0:
05:ea:4e:fb:7d:97:12:de:4f:c3:03:e2:42:92:50:
61:16:c0:8b:c4:b1:51:b7:5c:78:45:b7:42:f9:0e:
13:64:c3:72:d6:0f:24:0f:5f:a0:db:4b:af:5d:fb:
12:71:6f:71:f9:e0:64:01:19:dc:7c:47:6a:e8:0b:
72:3b:4b:ca:42:28:35:11:9b:96:ad:d0:4e:03:2f:
47:51:6c:bc:80:af:70:8a:15:bb:3c:d1:8a:c1:a8:
7b:a1:cb:e6:97:06:8d:92:e2:7c:96:a6:08:75:09:
2f:86:9a:33:cd:35:e7:50:5a:a4:7c:84:32:45:46:
56:64:ba:da:13:83:35:33:26:c0:4c:14:5c:c0:89:
8b:93:bb:bd:b3:33:4b:81:fe:e1:50:40:6c:9e:d8:
89:38:86:0d:ef:fe:f7:27:4f:8e:fe:1d:d3:d9:13:
3c:9e:99:fd:a7:cd:8a:56:c7:84:b7:3f:fd:3c:5e:
ea:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:81:A7:A3:0E:66:93:28:4E:9B:A1:03:B3:A9:4B:0B:47:E4:D0:D5
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/EIGnow5mkyhOm6EDs6lLC0fk0NU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
141.11.4.0/24
141.11.74.0/23
141.11.86.0/23
141.11.104.0/22
141.11.127.0-141.11.159.255
141.11.187.0/24
141.11.192.0/19
141.11.234.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:b6:19:61:83:11:6b:4c:92:f9:6e:1b:3e:90:d6:30:14:b2:
6e:cd:26:7b:fb:97:0d:06:7e:b7:9d:cd:28:21:67:ff:0d:1e:
e3:16:ef:16:86:ac:e8:d8:3a:06:b3:7e:1c:bc:fb:87:1a:8f:
a2:80:5d:a2:81:5b:8a:3b:0d:c9:ac:ae:fc:19:39:48:23:f4:
8a:5f:f2:6e:ee:65:ee:03:71:3e:35:50:70:b9:a3:0c:43:39:
90:18:b1:ef:6a:d2:36:52:8d:16:5a:76:5b:b6:d6:70:ee:ed:
1b:5c:ea:b2:65:15:55:06:4b:15:37:32:67:5c:78:d5:d9:a9:
fd:32:d3:88:95:5c:7d:a6:d2:01:b0:20:38:5d:46:49:77:65:
76:01:d1:a4:3c:21:b1:fa:02:12:46:31:da:a0:6f:f6:fd:f2:
ad:80:ce:8d:53:b0:88:73:1e:d3:c4:97:c0:bb:6c:7b:51:39:
8e:60:d9:7f:43:ab:0a:a6:f0:0b:21:f2:f6:fd:2e:0a:30:6b:
0b:a8:9d:ea:ab:68:98:d9:66:91:7b:3c:08:4c:e7:74:ec:da:
b3:4f:ca:3b:bf:c5:4b:66:b0:32:9f:62:f5:5b:9a:c3:e5:9f:
89:aa:52:2b:68:ae:d8:c6:4e:ca:91:d3:68:f9:ac:cb:ac:17:
da:10:ba:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org