Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/y01Afe5liPqQp2YE18sFV2QEBwg.roa
File: y01Afe5liPqQp2YE18sFV2QEBwg.roa (raw, json)
Hash identifier: fcpmF8gtSqjKbu+4RizNt/YByp2rndxGaNKkPcY+4QQ=
Subject key identifier: CB:4D:40:7D:EE:65:88:FA:90:A7:66:04:D7:CB:05:57:64:04:07:08
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 049BF681
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/y01Afe5liPqQp2YE18sFV2QEBwg.roa
Signing time: Fri 13 May 2022 11:23:46 +0000
ROA not before: Fri 13 May 2022 11:23:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 141.11.168.0/23 maxlen: 24
141.11.178.0/24 maxlen: 24
141.11.186.0/24 maxlen: 24
141.11.102.0/24 maxlen: 24
141.11.5.0/24 maxlen: 24
141.11.121.0/24 maxlen: 24
141.11.228.0/23 maxlen: 24
141.11.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77330049 (0x49bf681)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 13 11:23:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb4d407dee6588fa90a76604d7cb055764040708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:7b:2f:17:81:24:17:21:0d:b9:1e:30:85:
22:8c:bf:5f:52:a6:cb:45:51:14:5f:2a:a5:c2:2d:
85:e3:26:17:55:3c:56:cf:84:f9:44:f4:68:ce:10:
d4:3f:1d:7c:98:aa:76:c0:b4:d9:d2:4c:8c:ae:8d:
b8:b4:6a:b2:87:79:b3:9c:1e:2e:f6:48:8e:b4:fe:
f4:07:08:19:b9:9a:a1:05:dd:ab:d9:a1:fe:8d:57:
04:fe:45:32:7a:d7:2d:71:01:d4:92:5c:84:7a:18:
79:08:86:c3:1e:66:8f:e2:b5:6c:f5:63:2d:e4:79:
c4:35:a9:e5:71:c1:73:0f:67:fd:f6:37:14:d3:57:
c1:79:2a:1b:c9:a0:87:92:ff:6e:3d:a7:e5:08:0a:
d2:f2:6b:82:bd:39:98:31:15:67:5d:64:56:a1:3d:
10:5e:fd:f8:d8:44:af:c1:c3:f6:5c:ce:1a:ab:e0:
c1:f2:94:05:17:1b:ab:10:75:b4:86:af:37:19:78:
2f:81:e7:78:b2:6e:22:24:16:8d:85:c2:79:65:77:
39:9b:c8:0a:08:c2:b0:10:98:76:96:57:e2:c1:15:
52:85:7d:c2:52:33:c5:26:d3:51:d5:7f:1b:e7:be:
39:78:3a:c4:d5:f8:ce:a7:8b:59:4e:92:17:e8:64:
0e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4D:40:7D:EE:65:88:FA:90:A7:66:04:D7:CB:05:57:64:04:07:08
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/y01Afe5liPqQp2YE18sFV2QEBwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
141.11.26.0/24
141.11.102.0/24
141.11.121.0/24
141.11.168.0/23
141.11.178.0/24
141.11.186.0/24
141.11.228.0/23
Signature Algorithm: sha256WithRSAEncryption
64:19:d1:5c:3a:29:76:7d:d1:2d:0c:c3:ab:06:c4:dc:3c:db:
75:58:6f:3b:06:89:b7:6e:ad:52:8c:c5:f5:89:54:d3:1e:57:
a9:38:01:98:4e:ba:ff:62:cf:ca:97:a9:98:7d:58:c4:39:9c:
e3:7c:05:81:bc:09:fd:63:ea:7b:e0:42:dc:70:0c:4b:47:f8:
a2:60:4c:a7:b7:df:30:3c:04:b5:e5:ca:ba:1a:f5:f6:c2:fa:
23:0f:7e:4c:84:ab:71:d6:58:8d:b5:71:90:ef:b1:43:24:c0:
d6:03:e5:c7:84:f8:e5:26:15:f3:ed:a3:1c:5f:3b:33:ce:1d:
27:54:13:3b:9b:0c:9c:46:44:f1:95:72:69:e7:93:30:9d:33:
69:df:1b:6d:7e:7a:4d:ea:4a:55:64:17:6d:a5:14:04:d5:3b:
0f:e2:66:f2:98:d4:d3:ec:95:9e:fe:56:55:2c:79:b3:fb:e4:
c2:74:d4:44:5b:a2:94:ed:10:e6:80:da:00:38:de:21:c3:bf:
e6:8c:16:36:97:3f:c2:0a:be:5a:48:37:e1:4a:31:56:47:bb:
af:80:1c:d7:5c:f0:d7:53:a2:19:98:18:2c:26:ea:94:cf:9d:
69:1d:f9:b2:7f:57:dd:a8:0b:b3:24:2e:99:69:a6:9b:a5:47:
75:7b:18:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:34 2024 by rpki-client on console-ams.rpki-client.org