Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/v8zfe6TnhofnlnlwAx-EjM8XO00.roa
File: v8zfe6TnhofnlnlwAx-EjM8XO00.roa (raw, json)
Hash identifier: zEBid/2OGLj3P3WEagDDd8KatCUmzYxBkLRvWy2xclk=
Subject key identifier: BF:CC:DF:7B:A4:E7:86:87:E7:96:79:70:03:1F:84:8C:CF:17:3B:4D
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0184DD5DE402C5096CC22F9D04B75DA71CF1
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/v8zfe6TnhofnlnlwAx-EjM8XO00.roa
Signing time: Sun 04 Dec 2022 13:40:28 +0000
ROA not before: Sun 04 Dec 2022 13:40:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43350
IP address blocks: 141.11.182.0/24 maxlen: 24
141.11.184.0/24 maxlen: 24
141.11.187.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.246.0/24 maxlen: 24
141.11.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:dd:5d:e4:02:c5:09:6c:c2:2f:9d:04:b7:5d:a7:1c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Dec 4 13:40:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfccdf7ba4e78687e7967970031f848ccf173b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:b0:65:4c:61:9e:49:d4:3e:b0:18:fc:40:
02:ae:9f:a6:45:30:95:2e:ff:84:67:58:94:6e:a6:
82:6a:f3:e7:9c:22:c4:2c:06:9f:b2:9e:c4:72:42:
cc:ad:22:ce:b5:1a:47:de:00:20:1b:84:04:64:a5:
8a:84:49:4a:8b:d5:38:7e:ae:60:c6:9f:a8:7b:af:
c2:93:54:85:70:90:af:ad:2f:50:54:39:27:28:99:
ae:36:5c:a2:13:9f:76:23:69:29:44:26:fa:ff:09:
56:4e:1a:62:89:18:d7:6a:93:bc:9a:0e:b8:b4:87:
01:f3:5a:bf:5c:79:6b:f6:39:ed:9d:4b:e1:67:11:
0e:ba:90:00:05:f1:61:4c:c5:45:52:b4:a3:df:f5:
a7:47:26:70:fd:32:10:df:85:09:fa:40:d4:4b:a7:
c2:53:29:c1:b9:b2:a7:c4:32:bc:d8:ef:01:74:45:
b2:f2:0e:ec:d8:30:ef:4d:cd:7c:ae:6d:7e:88:bc:
bc:96:82:62:68:73:6a:ce:32:e2:53:a7:e2:73:bb:
c0:ba:83:33:71:1f:1e:9c:a6:34:51:4c:be:e8:42:
f9:36:4d:88:54:76:62:ba:3c:6a:21:d0:57:d9:b1:
e5:cd:ee:e5:73:6e:0c:e1:ca:43:5b:3a:14:36:fd:
17:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CC:DF:7B:A4:E7:86:87:E7:96:79:70:03:1F:84:8C:CF:17:3B:4D
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/v8zfe6TnhofnlnlwAx-EjM8XO00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.21.0/24
141.11.182.0/24
141.11.184.0/24
141.11.187.0/24
141.11.246.0/24
141.11.250.0/24
Signature Algorithm: sha256WithRSAEncryption
57:92:6a:e6:02:72:fb:e9:f7:78:67:c1:3e:88:b6:63:2e:ef:
55:b3:fa:9f:62:5d:82:27:9a:7d:bb:20:7b:d8:2c:e8:85:18:
91:f7:6c:07:c9:e1:0b:e0:73:b2:5b:9e:94:e0:34:4a:10:7e:
15:50:da:a1:21:11:a2:31:00:31:da:87:f9:1a:99:ad:e5:bb:
b8:25:d3:86:1d:6b:65:ae:41:8a:c1:f6:50:19:78:67:64:e5:
b2:89:56:e3:37:da:26:28:5a:c7:97:dc:b8:0c:36:a5:d1:8a:
1b:ee:ab:20:a9:29:a2:13:7b:21:3e:b7:b2:c9:54:3f:cb:32:
1b:01:f4:d2:4c:f3:65:0d:6f:fe:38:b3:2a:f5:88:4e:91:15:
a1:b4:02:40:c3:7d:a7:4d:ad:b1:ae:43:c4:1a:18:bb:0f:3f:
0b:7a:bf:28:ed:b8:e7:d3:ed:26:83:62:21:c4:91:b3:08:96:
75:16:ad:b5:e8:d0:94:33:ba:0d:ec:db:0e:36:09:3e:df:a5:
87:33:92:2d:22:31:65:f3:3b:a8:29:aa:17:77:8b:3d:eb:44:
06:e5:24:fc:62:d3:9e:b0:08:2f:85:25:dc:29:10:e6:c1:61:
a8:70:9f:e0:be:96:ce:cc:05:db:da:24:ac:f8:e6:f5:ff:80:
0b:9d:bf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org