Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/UK18h-hLWUYxARqgp1RTNjsBzPA.roa
File: UK18h-hLWUYxARqgp1RTNjsBzPA.roa (raw, json)
Hash identifier: 2UDc+PBSskRF6kVEYWTxJb/JuUFpAV++siqY6nySA8U=
Subject key identifier: 50:AD:7C:87:E8:4B:59:46:31:01:1A:A0:A7:54:53:36:3B:01:CC:F0
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 041896FC
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/UK18h-hLWUYxARqgp1RTNjsBzPA.roa
Signing time: Fri 22 Apr 2022 13:01:24 +0000
ROA not before: Fri 22 Apr 2022 13:01:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 141.11.168.0/23 maxlen: 24
141.11.178.0/24 maxlen: 24
141.11.5.0/24 maxlen: 24
141.11.121.0/24 maxlen: 24
141.11.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68720380 (0x41896fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 22 13:01:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50ad7c87e84b594631011aa0a75453363b01ccf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c2:e0:7d:d0:ef:a0:2f:66:02:2d:e9:5f:1b:
b2:96:85:5f:c1:13:cd:3c:4d:2e:50:e9:95:d3:bd:
9a:dc:6f:13:ce:97:25:36:d1:ee:79:24:ad:9e:ff:
1d:45:fa:5f:23:23:38:a0:9f:9c:45:d9:20:7c:2c:
e7:c1:a8:7e:f0:f6:4c:59:b0:d3:ec:b3:de:a8:33:
7d:1d:60:5d:e4:8e:1b:a7:d1:bb:ac:eb:a5:84:97:
53:4c:a9:64:19:40:7f:9d:b8:ad:37:9c:87:3c:63:
74:3e:c0:19:35:a6:6c:41:6a:72:ca:4c:a1:c8:f9:
4b:07:58:25:c7:5b:ab:ae:3f:be:13:12:a6:7d:f2:
62:bd:bf:a4:6b:6d:84:20:ce:78:63:1d:38:c5:9d:
c9:19:89:9a:76:05:db:06:a4:b2:98:6e:d0:ab:14:
48:48:65:43:fe:de:91:38:4d:18:59:b0:a4:cb:b4:
a5:ff:c1:36:38:d9:83:a3:bc:9f:b7:34:c8:b8:35:
3e:9c:45:89:d3:22:9c:90:95:39:4e:9e:3d:35:9e:
d2:e6:69:f9:6d:59:63:bf:24:f6:0e:50:f4:a9:a7:
0d:ef:a8:97:1d:fb:45:63:e4:65:af:44:48:f7:7e:
0d:00:3a:98:be:e1:8d:bb:c6:48:30:01:e0:01:fc:
6a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AD:7C:87:E8:4B:59:46:31:01:1A:A0:A7:54:53:36:3B:01:CC:F0
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/UK18h-hLWUYxARqgp1RTNjsBzPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
141.11.26.0/24
141.11.121.0/24
141.11.168.0/23
141.11.178.0/24
Signature Algorithm: sha256WithRSAEncryption
94:98:3a:c7:ad:fb:51:6b:62:9b:06:a3:41:e5:76:17:4a:a2:
fd:36:ee:5f:55:b7:43:13:00:6f:64:de:91:15:1c:22:6f:21:
72:2d:e1:60:28:56:e1:06:7a:f8:d5:c4:35:29:af:3a:fa:25:
f8:d2:46:c2:40:50:f0:d1:8e:c4:3b:21:61:83:06:e6:93:15:
ca:8d:93:c6:d9:cb:a5:ad:04:2a:97:b9:59:ba:a7:66:9a:d1:
bb:bd:31:48:4a:d4:0c:5f:a0:b0:73:f9:8a:a1:fa:a9:4f:58:
59:f8:12:7b:30:01:d7:93:7c:69:b2:b6:8d:bc:3b:c0:35:e6:
a9:dd:d7:7c:aa:25:15:e4:4b:c3:15:be:c7:c8:b0:92:bf:20:
21:c9:3a:5a:03:d7:67:3e:f0:4a:fe:56:83:30:16:42:91:37:
23:62:7a:93:42:aa:52:74:a2:88:d0:12:ab:61:f5:86:40:58:
2e:66:18:38:37:0b:38:60:e4:76:f9:ec:e4:2d:53:25:6e:68:
37:0f:cc:74:1f:90:99:0d:e2:05:97:4d:07:52:3c:c7:60:84:
79:9b:bd:4b:e9:12:3a:e0:62:c6:1e:14:63:14:b3:14:be:51:
2d:af:a4:04:36:4a:b1:09:66:78:3a:31:c0:4b:81:26:29:73:
7b:8c:14:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:53 2024 by rpki-client on console-fra.rpki-client.org