Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Fpr2Gb9axZ6X9Mg9aYsP7LJv_bo.roa
File: Fpr2Gb9axZ6X9Mg9aYsP7LJv_bo.roa (raw, json)
Hash identifier: mcjuACU0AVGHoNe2JUJYZ7VydotQ2O6LBz/F8NQv/0Y=
Subject key identifier: 16:9A:F6:19:BF:5A:C5:9E:97:F4:C8:3D:69:8B:0F:EC:B2:6F:FD:BA
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0414B8AC
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Fpr2Gb9axZ6X9Mg9aYsP7LJv_bo.roa
Signing time: Fri 22 Apr 2022 09:49:27 +0000
ROA not before: Fri 22 Apr 2022 09:49:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.11.44.0/22 maxlen: 24
141.11.43.0/24 maxlen: 24
141.11.40.0/22 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.42.0/24 maxlen: 24
141.11.41.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.80.0/20 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.0.0/24 maxlen: 24
141.11.10.0/23 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.22.0/24 maxlen: 24
141.11.19.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.20.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.26.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.37.0/24 maxlen: 24
141.11.36.0/22 maxlen: 24
141.11.38.0/24 maxlen: 24
141.11.33.0/24 maxlen: 24
141.11.32.0/22 maxlen: 24
141.11.35.0/24 maxlen: 24
141.11.34.0/24 maxlen: 24
141.11.160.0/24 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.192.0/19 maxlen: 24
141.11.92.0/22 maxlen: 24
141.11.128.0/19 maxlen: 24
141.11.224.0/20 maxlen: 24
141.11.240.0/21 maxlen: 24
141.11.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68466860 (0x414b8ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 22 09:49:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=169af619bf5ac59e97f4c83d698b0fecb26ffdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f0:35:95:a7:84:8b:67:56:a6:8e:51:04:77:
0f:31:41:fe:f5:3a:d2:7e:db:c4:be:85:99:4d:f9:
25:08:6f:e3:7a:4c:cb:14:bb:9f:01:69:a6:ea:b3:
9b:f0:62:a1:16:bc:8f:60:df:18:95:3d:be:65:f3:
c3:90:ab:85:2f:de:d9:bf:7a:95:8a:a9:a6:00:c5:
c2:fb:6b:6a:69:da:5c:85:4e:2e:73:ff:84:ec:ae:
b4:69:b8:cc:a7:58:d1:56:74:4f:a6:24:44:fe:b0:
e7:eb:5b:b6:5b:3e:e1:9c:0e:ab:2c:e2:fd:3d:7f:
7e:ef:28:ec:a0:87:f2:db:bd:d5:27:c1:af:c8:e4:
57:53:2f:8a:77:cc:8a:4f:b1:36:32:d5:1d:4c:9f:
7c:71:cb:ae:89:c8:25:51:eb:9b:3f:a9:3f:05:63:
79:59:2c:00:09:74:66:62:bb:98:ac:c8:fa:b2:b4:
bd:f2:6b:d6:c3:ba:e8:07:ed:47:79:ca:92:a6:64:
72:70:7c:b5:64:1a:ee:4b:50:3a:63:0b:27:62:7c:
01:18:62:92:3d:75:af:97:ff:6b:35:f5:21:28:6e:
35:19:9d:0c:b3:85:c4:c9:c3:0a:70:69:62:c7:70:
39:61:f0:58:00:df:af:8c:ba:27:b0:87:1d:57:ce:
9f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9A:F6:19:BF:5A:C5:9E:97:F4:C8:3D:69:8B:0F:EC:B2:6F:FD:BA
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Fpr2Gb9axZ6X9Mg9aYsP7LJv_bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0-141.11.2.255
141.11.10.0/23
141.11.17.0-141.11.22.255
141.11.25.0-141.11.26.255
141.11.28.0/24
141.11.31.0-141.11.47.255
141.11.80.0/20
141.11.128.0-141.11.160.255
141.11.176.0/24
141.11.182.0/23
141.11.192.0-141.11.251.255
Signature Algorithm: sha256WithRSAEncryption
7f:64:f6:ed:5a:e2:60:b8:3c:ce:86:39:29:be:2c:ca:5d:1e:
bd:15:fa:d6:d7:b3:3b:97:00:26:5b:98:fc:17:60:5b:e9:3a:
e9:b9:4e:a5:56:3e:6e:fe:f2:34:50:65:e2:fa:a1:57:2b:03:
8d:7f:01:78:bb:77:f5:8e:b6:08:03:14:3a:d9:42:33:0d:5e:
67:39:46:17:f1:3c:37:d1:d6:a2:3a:f7:a7:2a:14:5a:1b:b2:
9a:2e:21:26:b4:db:fb:71:d0:67:ad:a8:1d:28:75:31:e3:de:
38:30:dd:98:a7:29:85:d4:c0:e9:05:93:ab:17:91:26:94:2b:
ca:c3:57:ff:e4:a8:79:e2:86:57:e0:2a:c3:33:8f:7c:8d:a6:
ae:1b:31:d4:cf:b3:b5:1c:09:6e:07:3f:0d:76:a0:eb:a1:bd:
54:9d:02:bb:da:a1:68:cd:5a:66:7c:b0:c3:8a:fa:4c:8f:55:
ab:2d:bc:89:89:5b:05:85:ba:fc:dc:c6:7b:e2:d2:98:e0:f2:
2a:bd:32:07:b8:22:ab:3c:d8:0d:76:99:2f:45:88:30:48:a6:
ad:89:4e:36:9b:20:da:06:40:c6:a8:96:1b:05:56:9a:20:e4:
31:44:2d:e4:36:91:eb:f1:47:ab:d2:55:73:90:36:71:8f:c0:
59:87:cb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org