Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/TLkHvC8LfCgXMGL9Hn_XpJuHAMA.roa
File: TLkHvC8LfCgXMGL9Hn_XpJuHAMA.roa (raw, json)
Hash identifier: x0/RQAI+hW56AtW362m8T5iHYtiQQsBk7sB6Od4/rmA=
Subject key identifier: 4C:B9:07:BC:2F:0B:7C:28:17:30:62:FD:1E:7F:D7:A4:9B:87:00:C0
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 035AA576
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/TLkHvC8LfCgXMGL9Hn_XpJuHAMA.roa
Signing time: Fri 04 Mar 2022 19:01:20 +0000
ROA not before: Fri 04 Mar 2022 19:01:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22333
IP address blocks: 141.11.184.0/24 maxlen: 24
141.11.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56272246 (0x35aa576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Mar 4 19:01:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4cb907bc2f0b7c28173062fd1e7fd7a49b8700c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:5d:e3:a9:3f:d1:12:0d:02:03:23:db:1b:
de:5e:ab:ab:78:f2:0f:c8:7c:51:a4:2f:44:88:85:
13:40:00:b9:a3:75:62:b5:3b:1a:74:cb:ba:95:84:
72:6f:5c:95:bb:fc:23:6c:73:5b:fc:e9:8b:30:35:
6b:1b:88:be:e3:94:62:2e:19:6b:87:62:74:72:f5:
35:b7:9f:fc:24:67:cd:4f:d5:1e:f2:4a:89:bf:6b:
65:25:eb:49:1d:72:09:a9:f4:6e:ae:43:7f:9e:3d:
a5:52:06:16:70:93:ce:aa:29:d0:3f:a2:61:34:92:
49:89:54:d1:0f:61:70:36:3f:ed:32:4f:34:3d:bd:
d0:66:af:de:aa:b2:b8:26:23:37:7d:4e:a8:8e:95:
90:7f:2e:7a:64:e1:38:d0:39:29:c5:4c:22:60:8d:
7b:ad:d4:5d:9c:fe:f2:ce:8d:80:cb:ae:70:49:c9:
42:87:90:14:c5:1b:16:57:4b:42:f4:16:3a:e4:a1:
2f:a8:97:5b:16:ff:a4:16:20:d1:4a:d6:cd:d9:27:
30:e9:93:1f:01:5d:6e:fb:23:83:fa:6b:e0:5d:f3:
b5:14:34:ea:b1:93:17:ef:e8:57:28:36:a6:67:f0:
db:45:02:4f:87:8d:87:5b:7c:60:38:72:c3:81:92:
5e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B9:07:BC:2F:0B:7C:28:17:30:62:FD:1E:7F:D7:A4:9B:87:00:C0
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/TLkHvC8LfCgXMGL9Hn_XpJuHAMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.120.0/24
141.11.184.0/24
Signature Algorithm: sha256WithRSAEncryption
10:11:99:d4:bb:76:e8:89:a1:a8:7b:e2:f8:7a:ec:30:78:14:
8e:db:74:91:05:c3:3d:ba:86:c6:6f:de:76:47:ab:62:0d:8c:
46:d9:e3:59:5b:45:2b:d6:8d:82:8d:84:f7:be:45:0e:ea:4d:
50:14:fa:70:cc:5a:c4:c7:6e:f3:a0:a7:13:de:0f:2a:f8:fc:
d0:b1:f0:57:4e:1a:81:c2:ff:ed:77:26:79:64:33:fc:0f:1c:
52:54:7f:47:c6:b5:7b:8d:bd:cd:77:38:f5:73:9a:e8:23:3b:
1c:01:5e:02:68:73:95:b2:82:64:2a:1a:a4:f9:f5:10:57:a4:
54:9e:ea:d8:8a:a3:5f:9c:c8:13:4b:6a:ed:f5:65:80:a7:ee:
c0:c1:6a:0a:8e:c0:6a:51:54:83:0f:8b:3b:7e:3a:81:38:cb:
e9:ca:15:e7:90:2b:a2:79:e6:13:cf:2c:f3:fd:b2:ac:52:58:
d2:c1:31:1e:b0:c9:04:77:48:06:5b:50:29:b0:78:df:53:54:
04:57:75:64:7f:e4:d3:12:de:00:e2:af:33:11:b7:b8:1a:d4:
59:9a:50:38:b6:88:dd:76:c6:97:55:3c:2e:dc:c3:a0:2c:53:
8f:4a:5b:07:fc:e5:28:12:31:cf:89:e6:0a:72:dd:bb:68:1c:
91:c9:93:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:53 2024 by rpki-client on console-fra.rpki-client.org