Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/9RGs-g-FdootjGfnWOFPVh3bS6Y.roa
File: 9RGs-g-FdootjGfnWOFPVh3bS6Y.roa (raw, json)
Hash identifier: BCAN/0CcK+VV8fRkbi0dF1M0gjSk1VCqcRwv4qlcDco=
Subject key identifier: F5:11:AC:FA:0F:85:76:8A:2D:8C:67:E7:58:E1:4F:56:1D:DB:4B:A6
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0459A0D9
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/9RGs-g-FdootjGfnWOFPVh3bS6Y.roa
Signing time: Tue 03 May 2022 11:06:39 +0000
ROA not before: Tue 03 May 2022 11:06:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 141.11.224.0/22 maxlen: 24
141.11.232.0/22 maxlen: 24
141.11.228.0/23 maxlen: 24
141.11.230.0/23 maxlen: 24
141.11.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72982745 (0x459a0d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 3 11:06:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f511acfa0f85768a2d8c67e758e14f561ddb4ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e6:83:84:56:6f:b8:54:80:47:61:de:52:e7:
1d:49:38:74:fa:f8:8e:42:af:2e:61:94:f5:23:81:
ed:b7:ec:a8:31:d0:fa:3c:27:6d:83:73:4e:cf:a7:
39:dc:b1:34:74:89:bd:c8:4e:22:3c:b6:6f:ec:61:
6f:07:39:1d:51:50:dc:7c:f8:ca:58:8d:0a:52:35:
cb:74:d9:2e:fb:92:4d:f4:36:4d:5c:f6:0b:6b:81:
0e:84:1b:35:63:32:60:01:cd:b6:3a:37:8e:95:ea:
73:c7:50:54:87:2c:c1:df:94:b9:57:0b:af:3d:73:
3f:3e:99:93:30:fb:f3:d4:ed:e0:b5:9f:79:be:74:
85:25:86:e3:19:69:c9:82:1b:3f:b8:3f:41:4d:64:
07:3a:95:5f:75:f5:38:c1:ab:9e:e8:7f:4f:30:79:
d8:41:e3:05:27:59:eb:ef:77:5f:cf:51:b4:81:10:
40:b5:7a:78:b3:a0:13:4e:ea:70:68:4c:c9:84:76:
a5:51:ad:d5:cf:11:cb:74:6c:49:de:5c:ed:0b:85:
1c:c5:ff:7e:26:92:6d:85:18:85:8f:a7:54:ec:78:
00:ef:18:cf:f4:06:c6:b3:ac:4a:b0:45:f5:ac:18:
66:6e:05:4b:40:28:ba:b4:4f:4a:cf:d9:8d:99:fc:
b3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:11:AC:FA:0F:85:76:8A:2D:8C:67:E7:58:E1:4F:56:1D:DB:4B:A6
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/9RGs-g-FdootjGfnWOFPVh3bS6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.224.0/20
Signature Algorithm: sha256WithRSAEncryption
13:2b:fb:45:17:61:e7:a5:bf:cc:43:8d:19:c1:a5:80:8b:70:
d1:11:2c:30:af:6c:cd:8c:cd:60:7e:59:35:01:2b:b4:26:4f:
dd:52:d5:fc:a3:78:2f:93:f2:23:c7:69:d1:af:df:af:40:df:
8f:bc:92:03:89:98:da:4d:aa:a9:72:28:41:07:1a:89:04:26:
4b:c3:7e:cb:94:c5:63:ea:2a:a2:93:92:d2:5d:8d:d7:b4:98:
cf:26:b5:76:96:d0:19:cb:57:83:12:93:7e:4a:d7:bd:9e:84:
69:bf:14:4c:bf:0d:fe:cb:ce:4b:f4:7c:ac:3c:d5:ee:44:a2:
c4:9f:85:65:5a:0e:3a:7b:75:4d:8c:12:3e:77:01:7b:cc:69:
07:5f:cb:9f:9b:d2:15:68:46:5b:bb:6e:5f:b1:0c:bf:01:0f:
8b:f4:08:db:ef:f6:9f:78:e0:b7:ec:a1:61:57:f1:f7:04:3a:
2e:a5:fd:29:96:72:0e:05:f2:47:56:32:79:5a:96:b3:d2:c3:
44:ad:10:85:df:b6:d8:12:de:2a:4d:7a:82:f0:72:23:48:59:
15:95:83:0b:da:ed:d8:bb:bd:db:fe:5d:13:f1:15:8d:f8:7d:
6a:6e:d2:92:3e:07:45:88:36:4c:75:ed:29:dc:ef:7f:3a:61:
53:7c:b2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:56 2023 by rpki-client on console.sobornost.net