Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/WrT5xNmSnpA8qVpgw0wClAKTaXs.roa
File: WrT5xNmSnpA8qVpgw0wClAKTaXs.roa (raw, json)
Hash identifier: Haf3i60PB+Gh6Ox4qTOTih/oc3vTi4zYMLeU1ac7uAM=
Subject key identifier: 5A:B4:F9:C4:D9:92:9E:90:3C:A9:5A:60:C3:4C:02:94:02:93:69:7B
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04319FFE
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/WrT5xNmSnpA8qVpgw0wClAKTaXs.roa
Signing time: Tue 26 Apr 2022 11:54:53 +0000
ROA not before: Tue 26 Apr 2022 11:54:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 141.11.224.0/22 maxlen: 24
141.11.230.0/23 maxlen: 24
141.11.228.0/23 maxlen: 24
141.11.232.0/22 maxlen: 24
141.11.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70361086 (0x4319ffe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 26 11:54:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ab4f9c4d9929e903ca95a60c34c02940293697b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:fa:70:f8:60:69:7b:59:49:c2:58:08:18:
e6:4b:7b:7e:50:a9:0b:3f:e6:ea:35:d5:8e:36:95:
99:1c:c3:e7:7e:d8:9f:75:b4:f3:44:6b:07:a5:41:
ad:60:37:16:d4:75:b8:5d:0e:3f:4e:72:28:0d:61:
79:b8:a1:8d:77:ba:27:03:8e:f5:dd:19:e8:34:26:
3d:fe:1a:88:8a:93:59:7e:0b:68:ca:76:9b:da:9d:
9a:26:46:bc:03:d4:48:06:0a:c6:e4:75:b0:05:05:
f0:f7:5d:e2:bf:ed:44:b4:c1:58:f8:fb:2c:6c:dd:
e4:41:12:47:13:f2:ac:ac:c3:5f:fc:f0:c3:ea:dc:
a3:c6:81:1a:4c:84:e7:c6:be:4e:72:9e:d1:b6:f5:
c3:76:fd:e4:e6:88:16:cb:38:7a:44:69:fc:32:82:
a7:b5:2b:ae:df:27:0d:16:97:84:12:f8:05:24:2b:
cb:bb:41:a7:ab:c2:54:19:42:4f:a5:e3:79:80:cf:
e8:ce:6b:93:b7:84:6a:75:6c:61:38:21:fd:b3:63:
34:03:25:b0:16:2b:f6:5b:f0:c1:99:9a:fb:f4:dc:
43:b9:b1:15:2f:cf:f5:1a:25:d3:ca:2c:70:74:ba:
48:63:6c:55:fd:09:23:71:02:5c:f6:fd:b6:46:46:
9c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B4:F9:C4:D9:92:9E:90:3C:A9:5A:60:C3:4C:02:94:02:93:69:7B
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/WrT5xNmSnpA8qVpgw0wClAKTaXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.224.0/20
Signature Algorithm: sha256WithRSAEncryption
78:40:6e:67:c7:42:ae:df:1b:7d:60:9e:e2:74:7c:77:dd:3d:
66:bc:78:a3:8a:71:d0:a3:49:c5:05:23:1a:bf:f9:8a:e4:68:
ad:8e:a0:a1:dd:8e:dc:83:69:d6:cf:10:89:39:26:0c:bc:50:
44:90:55:e3:eb:93:af:45:21:18:1f:ad:77:51:90:bf:cb:37:
08:1e:39:85:43:4b:2f:b1:c2:f2:8a:a7:7c:23:28:2b:2f:07:
95:f9:a4:c9:82:92:36:6e:d2:ba:f4:d0:4a:fa:63:bd:f2:2d:
c6:21:af:d4:17:8f:d4:54:aa:48:ff:5c:83:65:16:36:06:95:
a8:84:51:81:dd:9e:ce:a4:f3:6e:6d:c2:8f:6f:d6:60:d1:63:
05:44:bf:61:c8:27:a8:c7:81:73:9f:87:3b:62:23:00:89:a5:
2d:0f:b5:46:fa:e8:40:18:26:0b:43:14:50:54:ec:dc:3d:fa:
1c:4e:5f:44:8a:56:fc:3d:de:2d:1e:7b:fe:78:39:f7:eb:a5:
59:2c:a0:1b:8d:d7:9d:62:3b:31:7e:9d:a4:75:1a:48:d2:d4:
26:b3:4a:74:8b:4d:6a:02:41:2e:5a:e7:b7:51:72:22:15:f6:
d6:79:ad:72:ee:c4:73:8c:b0:b7:2e:0b:73:67:12:94:78:68:
13:01:b0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org