Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ynYsqdk5xRiG4tP4AC6yVLWo5f4.roa
File: ynYsqdk5xRiG4tP4AC6yVLWo5f4.roa (raw, json)
Hash identifier: Jric6Y32x3Zl69R0pQiQaX1HhkIfcDQcSTaqUA2virw=
Subject key identifier: CA:76:2C:A9:D9:39:C5:18:86:E2:D3:F8:00:2E:B2:54:B5:A8:E5:FE
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 018221672212C72D67B4BA8F180654D95CB3
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ynYsqdk5xRiG4tP4AC6yVLWo5f4.roa
Signing time: Thu 21 Jul 2022 15:36:23 +0000
ROA not before: Thu 21 Jul 2022 15:36:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138687
IP address blocks: 141.11.185.0/24 maxlen: 24
141.11.190.0/24 maxlen: 24
141.11.100.0/24 maxlen: 24
141.11.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:21:67:22:12:c7:2d:67:b4:ba:8f:18:06:54:d9:5c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 21 15:36:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca762ca9d939c51886e2d3f8002eb254b5a8e5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:57:92:f4:c1:df:83:31:b7:fe:35:70:26:
db:f4:a9:13:b0:84:43:91:43:f4:e0:03:2e:32:ef:
76:83:3e:a2:44:d2:68:16:b5:35:54:2d:d3:76:6c:
0f:69:87:84:5e:b0:b7:88:da:a0:b6:7f:43:5b:d3:
40:f2:0f:c9:a3:fd:1f:59:44:87:47:94:17:e7:dd:
51:0b:4a:56:12:08:1d:6f:a3:ea:f7:e9:01:85:21:
14:ef:49:c6:2e:88:d3:0c:fe:29:59:5e:0e:1c:1f:
9d:d1:53:a3:84:11:67:f1:c8:86:73:9d:cd:4d:ab:
9e:bb:d8:3b:f8:22:6c:46:fa:6c:19:f8:98:6a:13:
9b:83:bb:a2:17:77:9f:dd:d9:fa:e8:99:13:d7:46:
e8:f8:b8:a7:90:e6:02:13:40:bf:c0:11:65:2b:d0:
75:60:eb:94:fb:1d:32:d5:90:4a:ad:87:20:2d:ca:
77:4a:28:2f:f3:e1:58:6d:cc:ff:20:d5:6e:5a:b6:
a1:de:2f:62:e2:6d:20:6b:ca:a0:6b:01:b2:ad:7c:
df:be:05:53:5c:90:dd:df:59:41:53:de:7b:71:03:
ea:04:27:a9:0a:72:1e:dd:92:26:93:b7:1a:7e:dd:
46:a7:a9:1a:d1:04:57:4e:be:94:7f:b5:66:b7:08:
28:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:76:2C:A9:D9:39:C5:18:86:E2:D3:F8:00:2E:B2:54:B5:A8:E5:FE
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ynYsqdk5xRiG4tP4AC6yVLWo5f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.100.0/24
141.11.107.0/24
141.11.185.0/24
141.11.190.0/24
Signature Algorithm: sha256WithRSAEncryption
73:64:78:f0:4e:54:8e:d0:c4:73:4e:28:f6:7d:df:e6:e7:c3:
a5:07:80:b2:33:ab:a2:1b:4f:35:f2:e1:50:c4:c2:b1:12:23:
97:36:0f:13:c1:3c:11:f8:4a:7d:8d:22:d1:ea:0d:ac:e9:20:
0c:c2:ef:e5:9e:43:e7:87:54:19:f2:04:8c:16:05:55:73:ff:
f9:61:d1:61:c2:1f:95:06:6e:6e:1e:d7:52:72:78:7a:d6:4c:
f7:af:ae:4f:e9:df:11:ea:03:e5:ed:cf:5c:9a:79:8f:41:c1:
81:ef:cb:a2:19:b8:0d:b9:fd:58:1d:cd:11:12:55:d1:c4:98:
c6:e1:fc:37:60:41:93:85:63:3e:be:6a:bc:d5:83:05:a7:e1:
ff:01:fb:2f:bb:38:5c:ac:6a:3c:e5:ea:71:94:5d:c2:c6:fd:
70:02:88:39:ed:eb:e2:01:04:b7:86:01:55:78:0e:d6:61:c4:
ee:f2:97:0d:66:ae:c4:5a:da:e8:f0:e0:e6:fd:93:df:9c:7a:
84:7a:ab:20:42:a7:4a:21:1c:ba:45:63:b4:94:b6:02:67:ad:
59:91:2a:01:62:7a:3c:65:b2:ee:23:b0:40:9b:54:62:13:76:
cb:ef:99:27:0b:3d:5a:09:0a:cf:39:fc:e8:02:d5:ba:a5:10:
92:ca:5e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:54 2024 by rpki-client on console-fra.rpki-client.org