Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/WoZQqzhTG9z0H65NW6LblFsRuxE.roa
File: WoZQqzhTG9z0H65NW6LblFsRuxE.roa (raw, json)
Hash identifier: Zi2tmcSp51usjtzI8tP+BGC1y/ILLPjOAlrM+whHwQc=
Subject key identifier: 5A:86:50:AB:38:53:1B:DC:F4:1F:AE:4D:5B:A2:DB:94:5B:11:BB:11
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01835FBDCC039CC39B3BA5992734E1E53254
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/WoZQqzhTG9z0H65NW6LblFsRuxE.roa
Signing time: Wed 21 Sep 2022 11:10:17 +0000
ROA not before: Wed 21 Sep 2022 11:10:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.11.44.0/22 maxlen: 24
141.11.40.0/22 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.42.0/24 maxlen: 24
141.11.41.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.10.0/23 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.22.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.33.0/24 maxlen: 24
141.11.32.0/24 maxlen: 24
141.11.160.0/24 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.189.0/24 maxlen: 24
141.11.187.0/24 maxlen: 24
141.11.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5f:bd:cc:03:9c:c3:9b:3b:a5:99:27:34:e1:e5:32:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 21 11:10:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a8650ab38531bdcf41fae4d5ba2db945b11bb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:18:6d:15:d7:38:04:ed:09:43:c8:fa:d0:66:
82:b9:92:c5:dd:c9:85:f0:00:cf:92:24:95:ec:d5:
5e:20:10:7c:9c:22:7e:d7:91:7d:1b:11:dd:3b:e3:
cd:a1:58:80:d2:b0:67:d8:1f:af:ba:26:a0:4d:07:
b5:c9:fa:1f:36:4e:c4:2c:8d:0f:b8:be:a7:e9:9b:
4f:c7:da:69:a2:fa:7a:ce:c0:2a:e3:a8:f4:96:ee:
ab:7d:9b:cc:f8:9a:3e:10:41:8b:45:a3:72:14:41:
1d:db:77:cb:eb:1a:d9:ce:16:cc:15:b0:30:11:e6:
8f:62:03:93:f2:14:cb:88:9d:73:f8:f2:96:4a:00:
e3:2d:d4:55:d0:28:07:58:2a:de:84:b7:97:ce:b5:
16:5e:65:9f:50:eb:4b:6d:9a:d3:92:39:fa:f3:01:
46:dc:a4:d1:93:c0:21:8f:12:5a:cb:e2:4a:3e:fa:
61:31:b2:4b:d3:f5:81:a9:72:12:7e:8b:8e:34:14:
e8:45:8c:99:7d:39:7b:f7:7f:a5:88:0f:3f:61:84:
6d:ee:49:c8:31:d8:38:26:4c:ce:0d:5e:86:c8:b3:
cb:5e:49:b4:6a:71:c1:fb:56:e1:ab:62:17:c0:be:
49:94:90:c4:be:7e:28:d0:f3:ea:14:1a:a2:5f:17:
96:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:86:50:AB:38:53:1B:DC:F4:1F:AE:4D:5B:A2:DB:94:5B:11:BB:11
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/WoZQqzhTG9z0H65NW6LblFsRuxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.2.0/24
141.11.10.0/23
141.11.17.0-141.11.18.255
141.11.21.0-141.11.22.255
141.11.25.0/24
141.11.28.0/24
141.11.31.0-141.11.33.255
141.11.39.0-141.11.47.255
141.11.99.0/24
141.11.160.0/24
141.11.176.0/24
141.11.182.0/23
141.11.187.0/24
141.11.189.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:a0:19:ad:9e:01:56:35:39:67:8f:1a:ca:75:ab:fd:38:91:
d2:5f:fc:ff:b6:ef:ba:af:99:08:6a:b7:96:98:a3:0b:7f:45:
5b:e2:96:0b:36:ee:cc:7c:73:33:88:f8:4f:2e:75:b2:6b:29:
0f:d8:bc:35:66:ae:1f:9b:8f:dd:07:98:65:4a:98:5e:07:09:
08:4b:e2:03:ae:72:ec:ae:03:36:e1:5c:95:eb:31:52:79:a3:
56:f7:bf:33:1c:d7:6f:89:bf:3a:7a:45:99:8d:17:8b:61:7d:
dd:60:6c:40:35:69:2f:a6:68:b7:4e:20:85:dc:b1:53:ad:b0:
39:70:c3:de:d0:76:7b:45:21:21:79:d8:d9:8e:d9:af:0f:bf:
51:23:e8:f2:e2:0b:4a:ce:da:1c:18:98:f4:12:18:c6:9f:d6:
43:a4:f0:63:e2:78:23:ca:93:45:e0:37:cf:62:d3:f3:25:62:
68:01:24:f5:49:6f:bb:0f:49:11:ec:68:f0:05:57:9b:38:3b:
98:50:54:b4:cb:3d:7d:92:10:cb:a2:77:38:3c:de:ef:e1:f2:
bf:f3:75:d1:35:21:00:ee:10:f8:5b:93:e5:72:86:66:9c:93:
f7:83:41:81:05:7a:d0:82:e5:f6:42:7a:01:1f:ea:23:bb:11:
60:7d:d4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org