Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/TcgJyAICULXmwproD2-ydSFzDMk.roa
File: TcgJyAICULXmwproD2-ydSFzDMk.roa (raw, json)
Hash identifier: DZaUwQgwqNNPYQNCS7047mgYJp4Wn97mOQIAuD79Nmc=
Subject key identifier: 4D:C8:09:C8:02:02:50:B5:E6:C2:9A:E8:0F:6F:B2:75:21:73:0C:C9
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 02C304DB
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/TcgJyAICULXmwproD2-ydSFzDMk.roa
Signing time: Tue 25 Jan 2022 11:25:07 +0000
ROA not before: Tue 25 Jan 2022 11:25:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 141.11.224.0/22 maxlen: 24
141.11.230.0/23 maxlen: 24
141.11.228.0/23 maxlen: 24
141.11.122.0/24 maxlen: 24
141.11.232.0/22 maxlen: 24
141.11.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46335195 (0x2c304db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jan 25 11:25:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4dc809c8020250b5e6c29ae80f6fb27521730cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e7:2d:64:3c:a0:38:80:95:6d:60:89:b0:72:
91:b8:b9:4f:ad:72:74:4f:75:ee:dc:92:d4:76:59:
35:80:bf:8b:b7:05:ca:1b:dd:81:8c:d5:5b:6f:da:
c2:39:c1:01:60:78:03:e2:96:f6:a3:57:19:ab:ef:
dc:c0:01:27:d0:5d:02:e8:b9:71:8a:8c:d6:f5:96:
8a:ef:31:2a:e8:d1:04:4d:fa:fd:6d:65:8c:24:05:
50:6e:d9:ad:c6:78:61:37:88:21:d3:cc:43:f2:86:
66:48:a2:29:27:aa:b0:6b:a3:20:33:65:4c:ec:c7:
7f:f7:17:4d:65:12:d2:4d:75:02:d4:2e:cc:d3:f7:
0a:70:83:93:ac:b5:09:11:9d:5b:2c:47:c8:9b:54:
b5:d4:2f:91:71:3e:bf:50:70:bc:c5:6a:05:42:d9:
ea:7a:4b:b8:51:a4:21:db:41:9c:9e:be:4c:0c:82:
70:0a:88:b4:16:e5:3b:c7:53:bc:ed:04:c9:db:13:
77:ba:26:5e:96:ac:fe:6c:f6:cb:7e:37:60:9a:dc:
52:25:3a:2b:27:e8:f0:65:72:7e:a2:fa:72:de:8f:
8d:70:40:b5:c8:b9:2a:9f:a9:c8:99:97:d1:ce:e6:
f8:31:ed:31:f0:bb:43:01:99:81:0a:1a:15:35:cd:
ec:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C8:09:C8:02:02:50:B5:E6:C2:9A:E8:0F:6F:B2:75:21:73:0C:C9
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/TcgJyAICULXmwproD2-ydSFzDMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.122.0/24
141.11.224.0/20
Signature Algorithm: sha256WithRSAEncryption
73:98:17:41:20:6c:0d:b5:e2:dc:c0:29:9c:37:18:f9:ca:f6:
06:58:20:9a:03:c6:22:93:ef:31:f9:36:6d:63:a1:f9:11:c5:
22:76:a2:b8:bf:82:9b:e8:41:5f:e3:ee:dc:af:11:04:00:66:
e3:b5:c6:f8:11:a1:f2:f9:e9:1e:2e:cf:62:ee:30:ec:c1:81:
8f:c3:0f:86:e2:15:54:86:5f:54:7f:50:2c:de:1a:4b:0a:7d:
25:04:48:4e:c8:58:0e:8f:bf:64:d9:f0:75:6c:35:18:f3:1b:
61:af:f0:66:93:80:9e:e2:ad:b4:c1:40:35:c6:b7:c4:ef:89:
6a:77:00:af:0c:4e:4f:0a:cb:e8:68:1c:ea:ca:32:a2:eb:87:
c3:d9:81:6d:cf:03:77:8b:c5:41:57:40:89:f0:ba:2c:88:f8:
28:4d:bb:4e:60:5a:96:d5:2a:dd:2f:75:c9:40:6d:9b:3a:4f:
36:47:a2:1b:6f:91:0e:99:0a:00:58:82:1f:eb:ed:08:00:0e:
bf:f8:ca:ec:c3:1d:a2:82:19:b5:13:76:39:d2:5e:e3:34:03:
4e:57:66:4a:33:a6:de:68:77:40:06:72:2d:c7:5c:f7:2f:d5:
35:60:bd:e1:e6:d4:f9:ba:17:47:6d:8d:39:6a:b3:d0:fb:5e:
f9:97:30:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org