Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/knPd9x95wZ617rCZ8L6nchAfzgk.roa
File: knPd9x95wZ617rCZ8L6nchAfzgk.roa (raw, json)
Hash identifier: hlYnQw45d+hP0BYLvD/zDx91hXyO0dxCd/gHSHj8lsc=
Subject key identifier: 92:73:DD:F7:1F:79:C1:9E:B5:EE:B0:99:F0:BE:A7:72:10:1F:CE:09
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 018250D4DBFB4D563DCC213FBBD974D385CA
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/knPd9x95wZ617rCZ8L6nchAfzgk.roa
Signing time: Sat 30 Jul 2022 20:38:23 +0000
ROA not before: Sat 30 Jul 2022 20:38:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399641
IP address blocks: 141.11.177.0/24 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.19.0/24 maxlen: 24
141.11.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:50:d4:db:fb:4d:56:3d:cc:21:3f:bb:d9:74:d3:85:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 30 20:38:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9273ddf71f79c19eb5eeb099f0bea772101fce09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b5:6c:84:dd:e7:32:ba:90:f4:c2:bc:76:80:
34:c3:2d:ae:21:5e:fa:02:84:b0:cb:7a:b3:43:9b:
dd:33:0e:34:68:60:15:c2:31:df:75:20:92:c7:32:
24:f0:0e:60:59:06:13:f4:d5:b1:86:9b:09:eb:b8:
e2:8d:70:c7:5c:51:31:b2:7a:6f:d8:44:6e:8a:1c:
20:d5:37:07:ce:95:6d:08:cb:fa:09:53:cc:d0:8b:
97:1b:f4:f0:73:21:f6:e1:e8:aa:82:bd:e0:5d:54:
46:5f:19:40:bb:4f:0c:a1:1e:d9:8a:56:43:3a:09:
9b:1f:82:15:69:e4:d9:13:b5:df:6f:ea:8b:e3:d3:
03:0f:85:7b:c7:ff:fd:2a:25:da:f7:39:4a:94:aa:
3e:ae:a3:7a:c5:2c:45:6c:95:ff:43:e1:51:18:78:
7f:0a:77:f6:91:47:45:77:dd:7f:6a:9b:4c:26:c7:
fa:eb:5c:11:d9:51:11:44:01:ae:3c:4a:16:57:e1:
3e:f1:ed:2d:aa:4b:90:ac:9d:c3:ca:51:ab:fd:6f:
57:5b:34:8f:b0:20:6b:1a:c7:e7:83:d5:12:8c:c9:
b0:71:1a:39:f4:8c:99:e0:68:55:b1:a9:1c:94:5f:
a5:48:36:99:ae:fb:53:4a:53:ac:43:97:97:57:6b:
12:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:73:DD:F7:1F:79:C1:9E:B5:EE:B0:99:F0:BE:A7:72:10:1F:CE:09
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/knPd9x95wZ617rCZ8L6nchAfzgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.19.0/24
141.11.30.0/24
141.11.176.0/23
Signature Algorithm: sha256WithRSAEncryption
91:27:16:79:03:ec:7d:d8:60:ba:ce:6f:10:a2:07:16:a5:9d:
2c:93:16:6b:5f:46:db:8f:5e:88:d4:43:80:8b:d1:dc:54:00:
2c:d6:ba:24:88:01:3d:c7:d1:12:b8:15:14:57:85:c4:b9:64:
87:92:a9:5e:1d:2f:60:87:55:ae:b9:65:47:d4:be:df:36:34:
70:5e:69:d5:bb:fb:73:1e:43:ff:01:f0:89:aa:83:97:82:b8:
ea:c5:73:f9:ec:0f:56:54:4e:97:6d:f8:96:b0:8a:f5:fb:f6:
08:0f:7f:12:01:bf:02:1a:63:79:ab:77:69:5d:22:cc:62:34:
b1:74:df:19:0c:e5:d6:d8:fd:64:9f:9b:26:e6:e0:c0:de:f4:
16:69:47:d3:03:69:d6:a9:e6:86:3a:28:83:7e:fd:92:49:d9:
d6:e2:fb:75:3a:8a:ac:bf:e8:2e:1e:ee:50:fb:96:5b:e1:42:
0a:54:d3:c7:14:7c:51:c8:26:00:f2:ae:1c:6d:ca:43:67:5e:
d6:e7:9d:3e:b5:be:2b:ca:64:77:41:5b:8e:16:37:b0:53:9c:
51:65:d0:7e:5c:99:66:2f:27:eb:d6:cc:b1:62:83:5f:41:f2:
33:83:ea:7d:4b:2b:ae:da:c6:64:04:34:e7:b8:e4:70:39:b0:
66:d0:5b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:17 2023 by rpki-client on console-fra.rpki-client.org