Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/6G50N8WQYpmbRRmlbEhCDE3x8Gc.roa
File: 6G50N8WQYpmbRRmlbEhCDE3x8Gc.roa (raw, json)
Hash identifier: wu1cEcBBikU8+nuP32Z1uwysgmSfDPqCSzkOCnIcUNE=
Subject key identifier: E8:6E:74:37:C5:90:62:99:9B:45:19:A5:6C:48:42:0C:4D:F1:F0:67
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0184865453C77C0BE0C958877C34DF122883
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/6G50N8WQYpmbRRmlbEhCDE3x8Gc.roa
Signing time: Thu 17 Nov 2022 16:03:04 +0000
ROA not before: Thu 17 Nov 2022 16:03:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 141.11.68.0/24 maxlen: 24
141.11.69.0/24 maxlen: 24
141.11.4.0/24 maxlen: 24
141.11.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:54:53:c7:7c:0b:e0:c9:58:87:7c:34:df:12:28:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 17 16:03:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e86e7437c59062999b4519a56c48420c4df1f067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:36:ed:d8:ab:95:9c:04:89:5d:54:7e:ea:99:
fb:d5:bd:71:e9:03:31:e5:27:cb:66:9c:e7:ff:f2:
33:7b:df:82:40:9c:43:26:6a:37:59:07:15:62:8b:
be:0d:d6:c9:7b:20:43:72:14:aa:79:8c:f9:9f:81:
da:ea:6b:67:cb:fe:9c:c8:45:01:83:0b:4e:ee:d0:
c5:4b:f3:6e:0e:ea:ae:36:74:5c:e4:4c:32:3b:d9:
e9:fb:f2:b2:2d:1a:9b:d2:f5:7e:1a:8c:49:66:7d:
c2:83:7a:eb:9e:43:69:89:70:1d:21:1f:34:db:1b:
b4:5d:6e:cb:aa:e6:08:72:4f:ac:ae:96:e2:59:7e:
13:1d:95:a8:29:48:e9:d0:45:9f:79:f4:83:7f:84:
f3:e4:21:8f:fe:83:dc:6e:86:59:8e:12:d2:01:9a:
29:0f:5f:46:ef:de:27:23:05:54:b8:7c:06:bf:06:
e0:ec:17:7f:11:95:9d:54:66:ee:bc:c9:0c:a9:0f:
fc:39:c4:43:a4:02:08:b2:2d:bc:e8:3f:27:ad:fb:
ae:a1:2a:eb:e3:95:d6:e3:d0:79:b6:5e:98:a7:a6:
e2:1a:5d:3b:fb:7f:3c:50:71:5a:9e:59:7a:25:86:
28:93:84:9b:b4:ac:3d:78:7a:65:9e:19:19:d4:ef:
bb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6E:74:37:C5:90:62:99:9B:45:19:A5:6C:48:42:0C:4D:F1:F0:67
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/6G50N8WQYpmbRRmlbEhCDE3x8Gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.4.0/24
141.11.20.0/24
141.11.68.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:94:9f:3f:6f:36:c3:86:20:9c:49:99:1b:3d:cd:dd:06:7a:
14:c5:58:1d:26:ec:84:b7:aa:8a:24:ec:c3:b2:b1:00:a9:d1:
53:af:2a:3f:a1:4c:fa:68:82:12:69:93:00:62:7a:f7:1c:a2:
fa:ff:bc:42:f9:73:2b:65:33:60:1c:8b:5b:62:1b:f0:e4:cf:
b9:16:4e:c8:ac:36:ff:a8:eb:c4:34:3f:9c:63:59:07:85:22:
f1:a5:e3:d8:43:f5:36:f8:fb:3e:b8:1e:81:ee:3f:c1:64:ca:
85:d4:7a:c7:3c:b7:6a:59:47:4c:ab:b3:f1:2a:6a:a0:2b:3c:
c1:cc:d7:42:f0:63:29:5c:41:2c:33:df:57:3d:9c:00:a2:40:
7c:ec:2a:74:7f:d0:5d:6e:db:49:2e:88:94:ec:ba:5c:68:62:
3e:e3:fc:26:66:47:70:30:b9:d7:9a:3c:8a:5c:af:0d:ba:db:
d0:4d:61:cf:17:9b:7a:c0:13:62:2b:89:71:f9:22:d6:9c:e7:
65:f7:45:a8:4b:ef:75:37:cc:cf:48:db:0e:d1:87:b7:2e:44:
d1:ee:bf:53:20:c1:10:c1:5f:74:32:d3:3f:66:e3:24:23:31:
a3:02:c3:bb:a0:9d:25:74:fb:d2:68:9e:3d:1f:dd:59:ef:2f:
53:c7:f3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:56 2023 by rpki-client on console.sobornost.net