Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/iYodwgeldVz_37SSNJuleOkJSjE.roa
File: iYodwgeldVz_37SSNJuleOkJSjE.roa (raw, json)
Hash identifier: TtsqjXD72bYa2OEMjEeDVE6b05Yb5lr8cG4kxc8p08o=
Subject key identifier: 89:8A:1D:C2:07:A5:75:5C:FF:DF:B4:92:34:9B:A5:78:E9:09:4A:31
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0182F38A98B5766F7ABE9224FB87ECD04CBA
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/iYodwgeldVz_37SSNJuleOkJSjE.roa
Signing time: Wed 31 Aug 2022 10:55:22 +0000
ROA not before: Wed 31 Aug 2022 10:55:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 141.11.168.0/23 maxlen: 24
141.11.88.0/23 maxlen: 24
141.11.90.0/23 maxlen: 24
141.11.96.0/24 maxlen: 24
141.11.102.0/24 maxlen: 24
141.11.5.0/24 maxlen: 24
141.11.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f3:8a:98:b5:76:6f:7a:be:92:24:fb:87:ec:d0:4c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Aug 31 10:55:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=898a1dc207a5755cffdfb492349ba578e9094a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:42:91:64:cd:c7:26:4a:d6:02:a7:34:2e:f8:
dc:c0:03:b2:19:08:fd:ff:7b:e5:82:a8:4d:96:cd:
d2:01:aa:18:e2:73:77:db:87:0f:c0:62:55:43:41:
8c:b1:19:fa:90:00:99:cf:98:bc:a0:ce:b5:ea:1f:
e5:50:4d:1c:54:50:2d:92:c3:28:a9:95:2e:fd:43:
2e:5e:c2:9a:57:05:4f:2e:88:59:28:28:7d:5d:2d:
73:03:e7:03:d4:a3:f8:0c:9d:94:00:c2:78:5a:8c:
27:72:55:07:3a:da:f8:c2:c2:bf:27:da:8b:55:1e:
e9:b0:59:5e:a7:83:99:2b:b1:2b:b1:09:88:8d:e0:
a3:67:9e:fa:be:b9:3b:69:b4:8f:7d:0a:13:d6:cc:
8f:a4:c4:89:e8:05:90:49:b7:83:ac:07:a8:31:08:
4a:50:80:96:10:d0:bd:4c:a7:c5:85:3d:e8:a7:9e:
5f:95:80:ac:c7:73:34:dd:1e:53:f7:ef:40:e0:74:
47:6c:09:70:26:0d:b0:96:9c:0b:7c:f6:37:50:e6:
0d:ab:a5:e7:c6:70:8c:e0:bc:26:7a:f0:f7:1c:52:
2a:6e:b5:06:02:bd:e6:3e:80:aa:be:16:f0:cd:9b:
1d:ad:c6:59:11:17:45:5f:1d:7c:42:c4:12:30:bf:
97:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8A:1D:C2:07:A5:75:5C:FF:DF:B4:92:34:9B:A5:78:E9:09:4A:31
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/iYodwgeldVz_37SSNJuleOkJSjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
141.11.26.0/24
141.11.88.0/22
141.11.96.0/24
141.11.102.0/24
141.11.168.0/23
Signature Algorithm: sha256WithRSAEncryption
55:09:0c:c1:5d:53:67:18:fb:c8:9d:de:94:b3:ff:88:ad:a3:
3e:cb:61:ad:15:5d:dc:2d:32:ee:df:5b:81:f9:f7:7d:c7:42:
23:d0:99:9c:f5:0a:a1:0a:e0:a5:5e:19:97:5d:12:05:21:43:
64:1a:03:b1:17:43:be:f7:45:a4:f4:e9:68:eb:c2:0d:ca:49:
78:5c:07:7e:b7:41:9e:8b:b0:1b:71:8d:03:2e:e7:4a:f6:48:
ce:e0:b3:72:13:d4:b0:86:c1:90:7f:ad:a3:fa:8d:5e:21:09:
eb:aa:19:2d:a6:0b:af:e5:cc:01:33:c0:9b:87:99:4e:39:09:
14:b1:bc:e9:04:ff:a2:26:13:6d:24:79:53:ed:8f:be:74:b2:
a6:3a:1e:09:b8:4c:b6:b5:94:63:af:14:ee:0a:2c:98:38:4a:
5a:27:d2:43:e8:78:97:2c:87:a6:a0:26:6c:4f:00:0f:5a:a8:
6e:90:00:d4:fd:27:70:78:a6:c8:59:97:b9:2a:00:1c:fa:5c:
48:67:45:13:f0:78:c8:6a:ff:bc:6a:c3:1d:41:a4:49:63:30:
29:f9:0e:de:7e:6a:0b:a9:56:84:30:00:06:b9:47:e8:0a:dd:
40:77:45:be:df:69:81:73:08:53:b8:06:ea:d3:bb:42:1d:1a:
1f:81:1b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org