Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/hBtTCPRhCpunufTgY6uD61lOGJs.roa
File: hBtTCPRhCpunufTgY6uD61lOGJs.roa (raw, json)
Hash identifier: 6axxJRDzEiUJ94UqaPU+94CJ6Z/a2Apz4AgVC1q8AhE=
Subject key identifier: 84:1B:53:08:F4:61:0A:9B:A7:B9:F4:E0:63:AB:83:EB:59:4E:18:9B
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04C951E0
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/hBtTCPRhCpunufTgY6uD61lOGJs.roa
Signing time: Mon 23 May 2022 09:55:31 +0000
ROA not before: Mon 23 May 2022 09:55:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 141.11.68.0/24 maxlen: 24
141.11.69.0/24 maxlen: 24
141.11.188.0/24 maxlen: 24
141.11.189.0/24 maxlen: 24
141.11.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80302560 (0x4c951e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 23 09:55:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=841b5308f4610a9ba7b9f4e063ab83eb594e189b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6d:4c:04:60:f2:46:2e:be:d7:23:ef:e3:44:
66:cf:b2:55:92:05:12:a4:cb:65:2b:3a:c1:f5:32:
8b:91:5c:f5:a0:d6:2f:df:7f:38:9a:7d:f2:7b:0d:
b7:a9:21:c6:57:6b:1f:df:1a:27:3d:e1:92:a2:a4:
e8:b7:16:fd:14:fa:d7:fa:62:06:fd:25:f8:9f:b6:
30:ec:92:7f:3f:5b:7b:e8:f7:98:b3:c0:46:45:8c:
a2:91:76:3c:e8:15:0a:64:88:9d:46:63:65:5e:14:
e1:30:fd:7f:e6:e4:e0:b7:36:17:02:7f:d0:50:da:
e7:ee:a5:2c:0d:98:16:f6:c6:e4:5c:ca:66:5d:7f:
41:31:5e:6f:d9:15:ad:dd:1d:71:ca:bf:8a:70:78:
f7:64:98:7d:c7:af:1a:77:ee:20:ef:e5:7e:2f:0a:
60:98:10:12:0b:04:85:05:c0:f0:6e:56:98:52:0f:
04:6d:2f:a2:2e:6f:90:b5:e1:a0:3d:83:c7:bf:9b:
22:e4:62:a0:cc:bb:b4:0f:39:4c:80:5a:71:13:65:
d8:bd:17:7c:da:e9:0c:76:42:f4:24:9a:5c:5c:74:
25:2c:88:b2:dc:0d:71:9f:fa:7f:6f:07:09:76:13:
d5:a1:4c:f6:c3:1c:5a:37:34:2c:f6:0d:83:bc:4a:
99:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1B:53:08:F4:61:0A:9B:A7:B9:F4:E0:63:AB:83:EB:59:4E:18:9B
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/hBtTCPRhCpunufTgY6uD61lOGJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.20.0/24
141.11.68.0/23
141.11.188.0/23
Signature Algorithm: sha256WithRSAEncryption
09:bb:27:da:6d:0f:67:dd:09:ef:3c:a3:3e:eb:8a:bf:9c:26:
f0:6c:79:69:b0:51:af:e7:91:77:f5:d5:f8:42:b4:76:f1:3b:
c7:5a:8d:69:58:f2:ba:85:62:d1:50:99:4d:2a:00:09:63:d2:
c0:1d:22:e2:c1:fc:13:60:bb:86:9b:7d:f2:3e:60:6f:48:66:
1e:d8:c0:de:11:61:6c:30:5b:10:8d:6f:0a:df:70:37:d1:57:
4d:ff:8f:27:4b:4f:da:06:71:fd:84:16:95:53:03:8d:4e:00:
49:8c:72:56:46:84:7a:64:ea:08:4b:57:a6:33:0e:26:65:dd:
f4:c5:4d:e1:53:e7:9a:37:c0:11:47:6a:2c:83:af:59:71:ff:
25:b0:4c:df:a2:71:dc:b6:1b:b0:ac:4d:d6:13:13:02:77:c1:
de:93:14:1a:a5:71:91:cc:8f:3d:54:25:d3:94:eb:99:5b:bc:
07:eb:c8:1a:64:49:8b:70:66:15:21:7c:3c:ee:f6:93:af:cf:
1b:62:c5:e4:4c:85:e1:d3:48:5c:97:10:35:64:fe:07:0b:7a:
f3:7d:45:1f:29:63:a4:b2:fc:f6:95:97:b2:3f:c4:65:e0:37:
d4:4a:6f:32:4b:3d:4c:d3:3a:c1:40:87:bf:f9:db:4f:42:93:
05:af:5c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org