Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ifRMXyHzDDTScWDDI4IieOd3uOw.roa
File: ifRMXyHzDDTScWDDI4IieOd3uOw.roa (raw, json)
Hash identifier: U2c0hXI3RP0F/FOcfca5jU1GBwh82JnIAraGypRnokE=
Subject key identifier: 89:F4:4C:5F:21:F3:0C:34:D2:71:60:C3:23:82:22:78:E7:77:B8:EC
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01833222929D97C04236E63492A56D08AFDD
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ifRMXyHzDDTScWDDI4IieOd3uOw.roa
Signing time: Mon 12 Sep 2022 14:37:49 +0000
ROA not before: Mon 12 Sep 2022 14:37:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.11.44.0/22 maxlen: 24
141.11.40.0/22 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.42.0/24 maxlen: 24
141.11.41.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.0.0/24 maxlen: 24
141.11.10.0/23 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.22.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.33.0/24 maxlen: 24
141.11.32.0/24 maxlen: 24
141.11.160.0/24 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.189.0/24 maxlen: 24
141.11.187.0/24 maxlen: 24
141.11.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:32:22:92:9d:97:c0:42:36:e6:34:92:a5:6d:08:af:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 12 14:37:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89f44c5f21f30c34d27160c323822278e777b8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9b:20:c8:c4:d6:dc:e2:04:c4:23:65:65:b8:
3d:d7:44:23:fa:40:22:c7:72:f9:a8:a9:2d:a8:22:
60:6a:38:11:a5:a5:1f:df:ec:53:fd:0c:0a:0f:3b:
86:52:85:8a:e8:88:64:3d:24:18:1d:43:80:0a:b8:
39:fc:16:7f:8a:9e:9d:28:60:23:d2:b7:4f:e4:78:
9b:4c:40:6b:74:9b:8a:47:e7:90:ec:35:b7:c1:dc:
70:fe:f6:d0:c7:d5:ff:43:9e:db:d7:e8:88:ff:73:
c4:5d:24:b2:a8:f0:ee:b5:1e:62:72:db:50:d0:9f:
a3:b7:18:61:05:58:e6:06:af:f7:7b:d6:77:f7:29:
33:b1:41:3a:53:11:04:65:e7:ed:8e:10:6e:7b:af:
ff:cc:64:e6:f5:12:ca:bc:9a:79:6d:92:4b:f1:57:
51:83:22:59:22:d1:7a:e5:1e:4c:6a:59:47:9d:a1:
e2:7d:5d:15:82:97:bc:24:bf:4d:62:f6:7b:98:ca:
f6:4b:df:03:0e:13:e6:6f:aa:50:3a:2c:dc:90:a0:
f5:77:fe:c1:3f:8a:ab:1c:92:73:4c:a0:3d:6f:bc:
f5:32:53:ca:d3:38:95:16:9a:27:7f:35:72:7a:41:
b9:3c:4e:4d:58:d8:c9:4d:21:8c:f7:e9:26:08:b0:
35:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F4:4C:5F:21:F3:0C:34:D2:71:60:C3:23:82:22:78:E7:77:B8:EC
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ifRMXyHzDDTScWDDI4IieOd3uOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0-141.11.2.255
141.11.10.0/23
141.11.17.0-141.11.18.255
141.11.21.0-141.11.22.255
141.11.25.0/24
141.11.28.0/24
141.11.31.0-141.11.33.255
141.11.39.0-141.11.47.255
141.11.99.0/24
141.11.160.0/24
141.11.176.0/24
141.11.182.0/23
141.11.187.0/24
141.11.189.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:49:89:b0:d4:30:75:7e:d2:6d:26:24:a6:12:bb:db:3d:dc:
07:c7:a9:55:21:c1:14:64:32:b9:de:35:7b:fe:a4:e5:bc:c2:
35:71:fb:b6:b5:8f:28:12:d2:ba:e6:ff:bd:5f:e1:18:22:a8:
3f:55:9b:f0:ae:52:4e:9d:3f:85:60:b7:62:0f:18:dc:a9:5f:
3d:69:cc:c6:b0:67:29:71:83:c7:cf:37:39:d0:e3:78:18:c4:
95:cd:73:fb:51:2c:cd:7c:5f:20:b1:3c:ea:51:01:73:42:f7:
d5:8a:13:51:56:e8:ba:fb:c5:aa:94:ae:b0:8c:b2:77:5c:89:
bf:f6:ab:01:b0:e7:bf:ee:69:f6:70:07:d9:65:bf:b7:9a:6a:
32:72:5e:07:ae:7c:bc:c5:1c:67:78:e6:4a:a4:57:9f:fe:7a:
5b:e4:4b:a2:df:6d:07:00:64:83:83:fe:be:b6:b4:54:97:c8:
d6:d3:56:2b:c0:e2:6c:d0:df:6e:eb:f3:49:1d:79:c3:c8:22:
1d:c7:58:ce:33:15:21:5d:cd:10:70:a9:f2:55:1f:68:17:38:
ec:72:89:76:bb:2d:a5:10:da:e3:92:a4:2c:84:28:61:34:42:
86:dc:ea:96:6d:bc:4b:9e:a8:54:d6:c2:d3:c0:b9:0f:02:9c:
07:fd:e1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:53 2024 by rpki-client on console-fra.rpki-client.org