Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/c-Mka8HJWgS-V_n_-IQGMJu-Cr4.roa
File: c-Mka8HJWgS-V_n_-IQGMJu-Cr4.roa (raw, json)
Hash identifier: cv+s/O2xw2dHSumUXuYV1fjXfeF0PY7Nf0YL1nsXte4=
Subject key identifier: 73:E3:24:6B:C1:C9:5A:04:BE:57:F9:FF:F8:84:06:30:9B:BE:0A:BE
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0184A45FDB49F33B84694AB1BB6817B55807
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/c-Mka8HJWgS-V_n_-IQGMJu-Cr4.roa
Signing time: Wed 23 Nov 2022 12:04:16 +0000
ROA not before: Wed 23 Nov 2022 12:04:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 141.11.104.0/24 maxlen: 24
141.11.0.0/24 maxlen: 24
141.11.124.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a4:5f:db:49:f3:3b:84:69:4a:b1:bb:68:17:b5:58:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 23 12:04:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73e3246bc1c95a04be57f9fff88406309bbe0abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fc:cf:12:aa:f9:44:cc:55:bb:01:7c:c0:cb:
95:5b:7a:88:fc:a9:bd:b6:ad:c4:06:64:5a:95:4e:
11:65:2e:96:6b:93:a1:7e:ab:7b:c1:d7:67:aa:61:
cb:71:ca:8b:c5:d8:91:aa:05:e6:b2:07:6c:6f:93:
af:2c:7c:73:a1:03:c7:19:04:47:a2:cc:d0:fa:6a:
44:fc:88:14:0f:8a:e2:99:c1:d3:df:f1:31:8b:be:
94:80:77:cb:3c:96:2c:10:63:f4:15:3c:06:fe:94:
25:90:24:1c:63:44:97:49:0a:ab:38:e3:73:34:93:
5a:ff:3e:cb:53:4b:8b:97:4c:1d:45:a9:7c:c8:00:
36:4e:7a:3a:ae:eb:fd:c5:8a:2f:55:47:b2:ed:3d:
7d:c8:28:02:59:12:d8:a3:93:9c:3d:54:20:4f:33:
dd:78:ca:c8:91:0a:13:77:a4:24:e3:5e:5e:60:e0:
a7:f8:3a:6d:ee:3d:6f:2f:bb:6c:4e:a3:12:01:bd:
42:b2:67:9a:9d:d7:06:41:32:0a:8b:d6:2a:80:8f:
75:bf:35:a8:58:6a:0c:f7:29:e4:8f:16:27:74:2e:
e3:49:c9:43:3b:9e:26:24:7c:f8:67:69:2d:9a:47:
bf:34:b9:61:49:f8:04:9a:b0:45:62:96:8f:e1:6a:
8b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E3:24:6B:C1:C9:5A:04:BE:57:F9:FF:F8:84:06:30:9B:BE:0A:BE
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/c-Mka8HJWgS-V_n_-IQGMJu-Cr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0/24
141.11.28.0/24
141.11.104.0/24
141.11.124.0/24
141.11.242.0/24
Signature Algorithm: sha256WithRSAEncryption
08:f0:0b:67:c6:40:c7:75:d8:3b:74:47:46:f8:6f:b6:b3:fa:
12:9b:9e:16:f6:9a:fb:e2:aa:40:5c:bd:a7:0f:3d:02:77:38:
88:f2:dc:af:34:2f:c8:23:dd:ec:c7:0b:77:18:b2:17:69:df:
07:fb:db:2a:8b:9b:14:2e:dc:a8:79:4f:4c:70:cc:50:92:84:
3b:e5:95:4c:0e:3d:e2:e9:a5:d4:66:e4:9c:8c:fb:f3:a0:18:
4b:44:5a:11:55:7d:36:76:ee:4f:f9:33:26:40:d6:84:50:62:
fe:9c:e5:6f:4e:24:4c:e6:3e:af:9b:d2:88:98:c9:e4:5a:fa:
e3:4d:69:81:aa:3b:a4:90:49:11:d3:45:ab:0a:2d:73:fe:c1:
7a:ec:93:43:79:55:27:18:62:6a:4e:c7:c8:c9:ee:71:82:ff:
8d:76:37:69:d4:85:f2:bd:54:28:8e:53:36:f7:69:ea:c0:c4:
99:db:c6:d6:20:0b:a3:79:6e:ff:9d:18:56:f6:22:ca:03:89:
76:1e:7f:61:7a:3e:30:fa:cb:55:b2:fa:67:ba:fa:2f:a0:dc:
d1:fd:12:2c:b2:2b:07:e1:49:98:27:79:70:76:77:58:da:02:
83:27:ca:4f:64:9d:95:7d:f1:b1:51:11:53:f3:fe:30:58:bd:
60:33:09:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org