Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/cmg5l5glAri3cWTK8TNrZY3Lv7w.roa
File: cmg5l5glAri3cWTK8TNrZY3Lv7w.roa (raw, json)
Hash identifier: 5Tn+4JwLlVcI7peonhrWyPi2XDIlEgcupN1+x1txVlE=
Subject key identifier: 72:68:39:97:98:25:02:B8:B7:71:64:CA:F1:33:6B:65:8D:CB:BF:BC
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 05597C92
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/cmg5l5glAri3cWTK8TNrZY3Lv7w.roa
Signing time: Mon 04 Jul 2022 11:27:25 +0000
ROA not before: Mon 04 Jul 2022 11:27:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 141.11.74.0/23 maxlen: 24
141.11.86.0/23 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.4.0/24 maxlen: 24
141.11.234.0/23 maxlen: 24
141.11.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89750674 (0x5597c92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 4 11:27:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72683997982502b8b77164caf1336b658dcbbfbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ab:22:6f:ef:d2:de:04:a5:02:9b:89:39:cf:
3b:7b:52:1b:1d:e3:b3:ae:49:8c:9a:4f:97:27:ad:
1c:99:ee:b2:c0:e1:89:c2:41:08:fb:5d:2d:86:12:
80:07:99:e4:65:fa:de:dc:8b:d4:00:9e:6e:27:2e:
9b:cc:f5:14:c0:0c:69:2e:c8:d5:44:17:1d:71:68:
9f:80:9b:5a:ed:e6:45:f5:0d:72:83:0c:d2:cf:4b:
b3:e1:c6:8d:87:65:7b:85:10:25:d0:fc:3f:72:72:
29:a9:3f:5f:2c:71:e4:3c:fc:d3:7d:4c:5b:40:79:
28:4d:0e:31:96:35:24:2e:21:f8:3e:5c:df:e9:05:
60:b7:d4:55:ca:2c:15:8a:9a:db:55:f3:0b:9d:ac:
0d:a2:16:93:90:69:fe:0c:e5:35:fd:91:da:1e:9a:
86:4b:df:d8:df:af:e9:26:b8:ce:2d:29:37:30:e2:
68:cf:a3:ea:f5:dc:83:84:83:de:5c:f6:7f:16:6d:
4c:c2:04:28:38:9e:3a:04:3f:e1:f0:aa:db:43:fa:
4d:17:bb:43:38:c7:02:da:11:53:44:8f:61:29:f0:
70:19:a5:ba:31:d6:cf:5e:b4:92:06:7e:58:e1:0f:
73:8f:67:d5:f9:44:45:3a:b5:5b:2c:dd:f8:17:40:
36:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:68:39:97:98:25:02:B8:B7:71:64:CA:F1:33:6B:65:8D:CB:BF:BC
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/cmg5l5glAri3cWTK8TNrZY3Lv7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
141.11.4.0/24
141.11.74.0/23
141.11.86.0/23
141.11.144.0/21
141.11.234.0/23
Signature Algorithm: sha256WithRSAEncryption
16:d7:66:de:a3:d4:90:b7:d9:d3:1d:bf:7b:32:05:89:43:16:
ad:a8:72:6a:93:e6:34:f4:79:7d:ca:f4:63:16:2b:96:19:0f:
0d:72:f9:cc:c1:cc:c1:e8:8f:07:28:a8:ac:b8:9e:f7:bc:c0:
3a:bf:7a:2e:56:c8:3f:aa:a2:32:3b:45:8c:8d:d4:82:ec:98:
3d:0f:c7:26:49:95:d0:cf:2e:33:d4:1d:02:ad:7e:6e:ac:8a:
9b:56:30:8a:dd:8f:b5:80:62:4b:c2:3e:51:a4:e1:4f:99:f1:
5d:f3:67:32:3f:cd:4b:e9:f1:7f:de:1c:74:b3:37:63:88:bc:
9c:27:e9:81:f5:5a:45:12:d4:b2:a1:dd:0c:7b:1a:ac:95:0b:
db:41:d4:9d:a1:3b:6d:26:c5:6e:1b:66:a6:86:56:66:7e:4e:
01:fa:c8:a5:65:97:3d:45:64:36:50:4b:27:1d:a0:0d:ee:90:
ce:1a:8e:61:43:1e:ee:96:cc:ce:cd:d6:31:c3:a9:be:d7:b2:
e4:88:4c:1c:c3:07:22:e1:51:5e:76:c6:82:dc:a8:da:fa:fb:
d7:cf:d4:e1:3b:57:ac:6e:9a:53:34:c4:75:a9:60:a5:66:51:
ac:35:5f:4e:52:48:f2:0b:82:0d:f9:25:64:32:fe:81:54:5c:
4d:3c:af:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:53 2024 by rpki-client on console-fra.rpki-client.org