Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/rMz2qQu_pbGrC9uOhlGIbogCZNM.roa
File: rMz2qQu_pbGrC9uOhlGIbogCZNM.roa (raw, json)
Hash identifier: /ixXXejZsoA8heQNbG7gYT4fy4Fe08e1OVvnKnscg5Y=
Subject key identifier: AC:CC:F6:A9:0B:BF:A5:B1:AB:0B:DB:8E:86:51:88:6E:88:02:64:D3
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0433A367
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/rMz2qQu_pbGrC9uOhlGIbogCZNM.roa
Signing time: Tue 26 Apr 2022 12:35:15 +0000
ROA not before: Tue 26 Apr 2022 12:35:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 141.11.74.0/23 maxlen: 24
141.11.192.0/19 maxlen: 24
141.11.187.0/24 maxlen: 24
141.11.86.0/23 maxlen: 24
141.11.104.0/22 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.4.0/24 maxlen: 24
141.11.127.0/24 maxlen: 24
141.11.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70493031 (0x433a367)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 26 12:35:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acccf6a90bbfa5b1ab0bdb8e8651886e880264d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:20:b1:8f:d6:70:4f:71:49:76:99:14:84:
53:ca:32:6b:da:d2:df:a2:25:ee:59:c8:cd:dd:93:
c7:76:02:10:3d:21:3d:81:7a:d4:06:e2:87:72:81:
17:1d:47:c7:4a:c9:d4:8e:1b:83:02:65:0f:a7:b4:
35:6e:25:6e:09:bf:2e:31:fb:b4:90:6c:b5:49:b1:
53:11:70:35:c9:6d:b0:be:05:c2:dd:8b:10:ae:0b:
83:21:07:e8:00:39:4a:91:8c:ec:11:c9:90:34:2d:
9e:ce:00:d8:d8:8a:b5:e0:3e:63:bf:aa:82:72:12:
d7:dd:4d:bc:c7:0b:49:d0:7d:1a:56:d9:92:05:7a:
5e:36:dd:cc:ec:d8:83:a2:bf:b1:98:63:ed:ad:83:
0a:ed:6e:8b:62:c0:2f:bb:b2:0e:bd:21:01:23:12:
f6:ee:b6:dc:03:a7:8c:bc:a0:d5:ac:05:35:d8:0d:
7b:01:28:9f:b2:d2:85:07:1a:9e:70:79:7d:0a:8c:
a8:5f:81:a3:dc:c8:6b:b5:d6:88:f8:9c:6e:7f:47:
16:ce:69:74:84:4a:fb:70:e0:34:97:1f:d1:54:ba:
f8:25:ac:d9:54:7b:cb:94:a5:6e:e3:12:d7:dc:06:
5d:cd:d3:68:4d:37:a9:9d:1e:d2:72:fa:e0:a5:af:
92:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CC:F6:A9:0B:BF:A5:B1:AB:0B:DB:8E:86:51:88:6E:88:02:64:D3
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/rMz2qQu_pbGrC9uOhlGIbogCZNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
141.11.4.0/24
141.11.74.0/23
141.11.86.0/23
141.11.104.0/22
141.11.127.0-141.11.159.255
141.11.187.0/24
141.11.192.0/19
Signature Algorithm: sha256WithRSAEncryption
48:4e:bb:51:3f:ed:12:5b:da:49:9e:69:c3:86:2f:00:60:6e:
ba:ad:ce:10:4a:64:c9:ff:15:cd:6a:cb:3a:50:9c:6a:ea:32:
02:0f:7c:d9:20:60:bd:94:e9:9f:49:2a:1b:81:ea:c8:06:78:
a9:6b:03:eb:6c:d8:44:51:2d:87:56:f0:b7:4d:b0:41:64:d9:
db:01:08:cf:af:9a:ba:9c:ef:b4:06:25:46:f6:15:e6:5d:d0:
50:e6:eb:dd:78:9f:c9:cd:f7:60:a4:c8:71:be:4c:24:72:6f:
0a:2d:a6:c1:4c:fb:0f:d9:c9:5e:89:5a:89:e8:22:f1:0d:c3:
88:f3:cc:3b:3c:b7:48:f2:58:d0:6f:ed:48:c8:9f:e8:04:7b:
bd:4f:93:31:a6:43:7b:1a:a6:12:c9:ab:04:76:17:32:84:a7:
62:ed:46:df:c7:bb:85:65:ba:c3:88:19:eb:23:7c:db:c8:dd:
ed:28:c7:c9:70:39:12:88:c6:b2:49:95:5d:38:17:dc:5f:23:
1d:81:df:a6:bd:ca:b2:83:05:ca:5a:ae:11:75:ac:29:38:d0:
fd:a0:d3:3a:90:7a:b5:12:49:6a:81:9b:67:ef:b8:bd:cb:38:
9c:57:bc:60:00:b4:5f:2e:08:ae:82:dc:6a:5c:ca:28:3b:95:
52:10:36:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org