Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/wnLAdEZfXfS9sKgzB6ZjLLZhX_g.roa
File: wnLAdEZfXfS9sKgzB6ZjLLZhX_g.roa (raw, json)
Hash identifier: nqUMlLQuBzFFFTiM85y3D3W5RiBeAWYxee1sl2d51FM=
Subject key identifier: C2:72:C0:74:46:5F:5D:F4:BD:B0:A8:33:07:A6:63:2C:B6:61:5F:F8
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04976615
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/wnLAdEZfXfS9sKgzB6ZjLLZhX_g.roa
Signing time: Thu 12 May 2022 18:30:03 +0000
ROA not before: Thu 12 May 2022 18:30:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 141.11.230.0/23 maxlen: 24
141.11.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77030933 (0x4976615)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 12 18:30:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c272c074465f5df4bdb0a83307a6632cb6615ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:f0:75:e9:f2:00:b5:61:9d:fb:4a:2e:20:
40:38:b5:9e:0b:2c:2d:8d:1c:ed:2b:3f:17:52:2d:
6c:f9:19:57:c9:74:c7:3f:a1:8a:f4:9e:63:7b:4e:
77:84:a1:ad:2e:57:9a:38:dd:c0:53:04:b3:8c:a3:
2a:bd:1b:24:1e:70:76:d9:63:51:ad:cb:e7:b3:89:
2e:4f:d0:0f:60:0f:29:cf:98:e4:11:09:ac:44:f3:
90:63:e1:f9:b6:b7:0b:8e:0d:df:23:9a:0a:a7:6e:
2a:c6:29:ec:ca:fa:4c:65:f7:57:6a:87:0a:d1:cc:
87:ce:7a:00:c1:d6:88:3c:1d:fd:e4:4d:a7:e0:0f:
76:36:9e:9e:89:48:1e:5c:a4:27:2a:3a:d8:00:3f:
d8:a9:33:19:80:41:31:5d:c0:11:f4:1f:64:0f:e3:
58:6f:bf:80:71:56:2e:ea:7d:55:e8:d1:72:37:81:
22:eb:5f:03:59:62:b2:97:68:75:a2:5e:a5:46:26:
50:6e:ee:1e:e7:95:2e:c6:e5:51:5d:ae:31:68:1b:
a1:70:5d:7f:c6:c9:13:b4:f7:89:9e:62:56:4c:d7:
12:59:26:f9:5b:2f:e1:65:83:48:fe:f7:8f:92:51:
38:da:f8:91:22:7f:7c:28:d2:a3:56:38:f8:d3:2b:
3b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:72:C0:74:46:5F:5D:F4:BD:B0:A8:33:07:A6:63:2C:B6:61:5F:F8
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/wnLAdEZfXfS9sKgzB6ZjLLZhX_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.230.0/23
141.11.236.0/22
Signature Algorithm: sha256WithRSAEncryption
58:07:90:6f:02:ba:46:a1:c0:5c:45:07:b9:11:a7:d6:bb:0d:
a0:d1:62:cd:68:09:d4:5f:8b:48:63:4a:9a:d4:37:72:78:6d:
7a:62:bb:4a:2e:ef:ae:58:bb:96:27:f6:89:76:2d:98:e3:59:
9d:99:31:1b:d1:17:be:ca:1d:21:bb:a1:7b:08:35:3b:9d:a6:
53:21:07:6e:26:f9:1e:77:35:3f:3c:de:de:2e:cc:44:53:44:
bb:ee:55:59:4e:d6:1e:1c:a4:55:b1:55:8e:62:24:8b:98:3f:
78:87:31:22:bf:d1:60:29:cb:4e:25:bf:6b:4b:0b:77:86:06:
4c:bf:81:3f:95:6b:19:8e:1a:07:a3:53:a2:4f:54:14:e9:dd:
02:89:e2:da:b1:32:12:d6:63:c0:63:a7:71:63:c4:a6:ef:d0:
bf:54:76:40:6b:d2:fd:fb:43:ab:28:e8:90:de:12:f3:d1:90:
b5:85:cc:f7:35:80:23:1f:58:46:fe:21:d1:da:b1:a3:de:18:
70:6f:06:15:03:bb:e8:75:a0:eb:82:85:a0:ff:fe:4b:de:71:
a0:23:01:4a:5c:7d:05:ee:b7:4e:b7:6c:e9:55:29:bc:72:1f:
5a:55:fa:2a:d9:d1:ba:28:e1:2f:64:66:94:33:68:8e:60:1f:
f7:e0:a8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:54 2024 by rpki-client on console-fra.rpki-client.org