Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/uUtoMK1AIwJ3zsy2qt8kXk0hxWQ.roa
File: uUtoMK1AIwJ3zsy2qt8kXk0hxWQ.roa (raw, json)
Hash identifier: ig5XsDqCSmzgJ+3/B3zyHu4F87AJGfna41dwkaGRzSw=
Subject key identifier: B9:4B:68:30:AD:40:23:02:77:CE:CC:B6:AA:DF:24:5E:4D:21:C5:64
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01823F07602C3DA21300A8702A7CA170CA4A
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/uUtoMK1AIwJ3zsy2qt8kXk0hxWQ.roa
Signing time: Wed 27 Jul 2022 09:40:24 +0000
ROA not before: Wed 27 Jul 2022 09:40:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 141.11.224.0/22 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3f:07:60:2c:3d:a2:13:00:a8:70:2a:7c:a1:70:ca:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 27 09:40:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b94b6830ad40230277ceccb6aadf245e4d21c564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c7:20:72:50:58:a6:82:b9:0f:16:0b:45:bb:
a2:ae:5f:8d:71:fa:9e:f5:87:b5:95:16:94:7f:a9:
91:40:6a:fb:b3:e0:b9:e8:be:9a:ba:d4:a4:6e:71:
35:42:e6:d3:12:6b:84:9b:b6:49:23:90:b0:53:51:
5a:1b:06:81:5e:22:ee:a3:fd:df:52:dc:6a:c6:89:
66:cf:3f:b0:0a:ef:c6:8e:1c:b6:71:be:58:2a:3b:
d6:12:2c:0f:74:d3:b6:08:ed:aa:a4:6f:93:fd:ea:
96:c9:1f:de:60:c4:6a:53:6b:f6:7a:bf:04:ee:30:
3d:14:a8:7e:a2:38:d7:6f:7b:c5:59:36:49:e8:0b:
af:a6:b3:92:3d:34:78:77:41:b8:7d:2a:55:3c:a4:
4e:32:18:0a:f2:45:6f:41:1b:5e:c4:a6:2d:0f:35:
51:56:18:ab:5c:db:aa:84:59:e7:6e:86:63:dc:80:
64:21:72:f7:ae:ee:9a:46:2d:40:e6:3f:7b:62:2e:
62:12:86:55:c2:cd:dd:06:52:87:6d:42:77:b1:7b:
32:2e:15:f8:a8:5d:43:d2:73:f3:f2:68:7c:e7:92:
8a:b3:62:b3:3c:4d:5b:02:cc:a7:dc:30:d2:9e:cd:
80:d4:ba:b2:1c:68:5f:bb:dc:54:85:6e:62:bf:74:
01:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4B:68:30:AD:40:23:02:77:CE:CC:B6:AA:DF:24:5E:4D:21:C5:64
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/uUtoMK1AIwJ3zsy2qt8kXk0hxWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.21.0/24
141.11.136.0/22
141.11.224.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:43:02:59:21:93:91:f2:ca:51:ab:59:d9:62:5c:53:76:cc:
1c:ea:0e:a8:2b:59:60:ee:c1:d3:b5:b5:62:87:c4:a6:bd:66:
fd:8a:24:41:a3:3a:cb:0f:9e:b4:a3:75:dd:89:be:56:a6:91:
4d:ee:6f:d8:f1:80:2f:e6:ef:a4:90:b9:63:e4:76:9c:59:78:
55:02:76:4d:b0:5c:12:9b:d1:ee:02:7a:fb:7a:be:e5:a6:26:
91:a3:fd:ca:6d:ae:e3:4f:85:b4:4c:e4:27:0b:c1:bf:d9:c6:
a9:11:97:9c:22:8f:be:b0:0d:ca:b7:d6:ec:7f:0b:36:2b:61:
92:8f:5b:04:82:3c:fa:b0:cc:b3:04:96:3d:8c:71:59:b3:b5:
a6:5d:ed:63:90:8a:8a:e4:a0:98:4b:d9:38:c6:1c:f1:86:03:
96:2d:f5:bc:4d:e3:2d:72:bc:3a:67:89:f0:b7:68:7a:a6:14:
75:8e:61:49:03:15:d3:d5:97:3d:01:6c:f6:e4:50:e7:91:ec:
98:31:e9:1d:27:87:9e:0b:56:bd:db:74:dd:e1:77:2f:5c:26:
ac:28:2e:e5:ac:4c:7e:bc:8f:ed:cd:5c:fb:5b:b5:3f:c9:63:
da:7e:25:f9:c2:16:01:a1:fe:e5:7b:75:a8:64:a9:23:1a:da:
ec:73:c3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:54 2024 by rpki-client on console-fra.rpki-client.org