Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/gIZC5VonhQEXMU5rX0tSzUeeDB8.roa
File: gIZC5VonhQEXMU5rX0tSzUeeDB8.roa (raw, json)
Hash identifier: O9bcucAe8YLfYHX2oqc9jr4GCPS2oPb4ZMBxUuZI9jE=
Subject key identifier: 80:86:42:E5:5A:27:85:01:17:31:4E:6B:5F:4B:52:CD:47:9E:0C:1F
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01843481C60B920B78445FC0914A5C0D0612
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/gIZC5VonhQEXMU5rX0tSzUeeDB8.roa
Signing time: Tue 01 Nov 2022 18:43:50 +0000
ROA not before: Tue 01 Nov 2022 18:43:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 141.11.68.0/24 maxlen: 24
141.11.69.0/24 maxlen: 24
141.11.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:34:81:c6:0b:92:0b:78:44:5f:c0:91:4a:5c:0d:06:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 1 18:43:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=808642e55a27850117314e6b5f4b52cd479e0c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f9:00:46:14:42:8d:04:ed:2d:ff:ef:d8:a4:
82:c2:c6:c0:cc:92:c3:4a:e2:62:5e:e7:c7:b9:73:
b8:d8:1b:10:58:34:d1:a8:d6:11:a7:62:42:b6:b5:
f3:e8:77:b3:1a:94:6f:98:72:47:bf:aa:e2:ab:d6:
1f:95:8f:91:05:ee:a3:56:1c:c2:f0:ad:3e:66:57:
54:16:5d:7d:bd:b6:34:ca:44:8b:13:3b:5e:8e:71:
b0:f1:4d:d8:d3:27:4e:66:0a:65:ab:bc:9f:39:cd:
3d:48:bd:f4:55:88:0a:af:2c:f1:aa:2e:d6:f8:25:
7b:b6:77:6e:de:e9:a9:38:d4:fc:64:45:93:a4:a7:
49:68:b8:c2:be:de:22:24:1b:2e:84:03:6c:82:f3:
54:f6:89:97:09:07:f3:24:a1:cd:13:60:b5:e6:c9:
4c:ec:3a:0a:19:14:86:7a:50:56:30:6d:ad:7a:50:
27:4c:67:b5:5e:cb:ac:40:0c:a3:31:1e:b7:65:e6:
54:a8:39:2b:7b:8c:63:0c:6b:c5:1c:c6:71:d1:bc:
77:96:ed:70:ca:9d:5b:0f:b5:94:3e:07:31:32:ac:
df:84:89:1b:34:05:12:19:2c:ce:64:ca:a1:1b:54:
ee:f5:f5:b0:ed:26:68:26:e3:97:71:83:73:78:16:
b9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:86:42:E5:5A:27:85:01:17:31:4E:6B:5F:4B:52:CD:47:9E:0C:1F
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/gIZC5VonhQEXMU5rX0tSzUeeDB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.20.0/24
141.11.68.0/23
Signature Algorithm: sha256WithRSAEncryption
09:13:29:72:89:b0:80:54:cc:36:ae:c4:b1:0f:bf:4f:0f:35:
2b:91:10:73:8c:74:a9:98:c3:3c:af:6c:00:d3:77:12:9e:c1:
d9:ab:26:ca:98:10:fe:b1:62:f9:94:08:0a:89:0b:76:70:52:
94:20:b0:39:ac:37:96:8c:96:15:7b:0a:c6:db:31:ef:49:86:
37:8c:15:d1:6d:f1:4e:61:46:23:e9:9c:ff:70:0d:60:b1:32:
af:6e:1f:04:e5:dc:96:9f:45:95:6a:bb:fa:dd:e8:20:34:08:
13:d2:f2:62:af:bd:b8:d5:79:23:1b:40:1e:39:29:3c:13:6e:
e2:4f:6e:0c:af:75:5b:4e:ff:6c:18:18:08:e2:f7:6a:e0:ee:
dc:c1:5f:b1:90:ac:9b:53:7f:a9:6a:e5:9a:75:9e:20:2a:d2:
3c:a8:58:86:13:71:dc:b5:5d:0a:4f:8c:52:75:c6:4c:5a:0e:
ce:24:e8:eb:03:63:7e:52:d0:de:4a:ca:79:84:89:27:6b:98:
7f:e2:ad:35:0b:87:a1:52:82:f7:c2:ee:e2:90:69:5e:56:29:
50:68:57:90:f2:bc:6c:14:31:db:10:e1:19:f3:0e:38:c0:ac:
1a:60:ce:d1:1f:54:2f:1d:a3:52:53:41:05:56:29:98:62:3b:
1a:ef:23:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:53 2024 by rpki-client on console-fra.rpki-client.org