Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/DnzntsfNgoEXdHCr4wdrVIWu9SE.roa
File: DnzntsfNgoEXdHCr4wdrVIWu9SE.roa (raw, json)
Hash identifier: ImbGpekRl6sqHxWHyiumbSgi9Lh21hKjWdEjL7van9w=
Subject key identifier: 0E:7C:E7:B6:C7:CD:82:81:17:74:70:AB:E3:07:6B:54:85:AE:F5:21
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 03AB32E7
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/DnzntsfNgoEXdHCr4wdrVIWu9SE.roa
Signing time: Wed 30 Mar 2022 16:36:11 +0000
ROA not before: Wed 30 Mar 2022 16:36:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57416
IP address blocks: 141.11.161.0/24 maxlen: 24
141.11.178.0/24 maxlen: 24
141.11.177.0/24 maxlen: 24
141.11.5.0/24 maxlen: 24
141.11.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61551335 (0x3ab32e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Mar 30 16:36:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e7ce7b6c7cd8281177470abe3076b5485aef521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a6:6c:a6:84:3d:80:54:24:06:1d:65:2a:93:
2c:67:28:c0:b6:bb:cb:80:38:f9:b6:44:2f:b0:63:
be:8d:db:ca:ef:04:af:bf:dc:8e:37:7d:25:1c:eb:
e5:83:b7:9f:af:4d:67:0c:b0:a3:be:75:9a:ce:ab:
0c:81:41:0e:85:d4:c6:ab:e0:39:cf:8c:b7:68:96:
ce:75:59:46:fe:d9:51:47:16:d6:6e:d1:fe:46:56:
3a:d9:7e:cc:72:ab:2f:41:6a:3b:52:61:3a:3d:99:
d4:2d:f1:2e:a6:fb:a5:87:4d:c0:d1:ae:a3:ef:4f:
67:6a:9b:07:1f:ed:ba:6c:91:e8:67:e5:ce:45:f3:
f1:bd:5a:ae:82:34:be:0e:30:c0:ef:48:c8:95:05:
34:e7:65:0d:e0:0d:49:58:1d:bc:b2:6f:52:63:b4:
19:ec:f1:a5:c4:38:1a:66:0b:0e:0e:74:ad:c3:04:
c2:df:e0:6c:04:24:89:bb:90:d4:cc:19:ad:6f:b5:
80:d5:55:e7:be:cd:d7:d5:e0:01:4c:ec:6e:a3:34:
fe:21:56:33:cc:d8:02:c9:e5:6d:88:8d:d1:58:b1:
d4:b6:ab:70:c5:33:56:22:24:03:8b:2a:88:81:5c:
46:cc:4f:8c:7b:3b:13:f2:8d:c9:73:f3:49:33:43:
45:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7C:E7:B6:C7:CD:82:81:17:74:70:AB:E3:07:6B:54:85:AE:F5:21
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/DnzntsfNgoEXdHCr4wdrVIWu9SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
141.11.30.0/24
141.11.161.0/24
141.11.177.0-141.11.178.255
Signature Algorithm: sha256WithRSAEncryption
80:38:4b:fd:df:1b:be:cc:1c:a9:a1:2e:8a:fa:eb:0f:b0:f7:
46:f7:21:65:0b:ab:a0:2e:9f:4d:20:bb:83:a5:ae:d1:40:72:
d0:6a:f6:ae:19:74:de:e0:9e:0b:a0:a7:fc:82:8d:93:80:e6:
30:cc:11:b0:86:8e:2d:84:ac:4a:e8:58:5e:10:d8:d0:7f:02:
b4:0b:97:2d:f6:8e:2d:74:f7:a4:ec:dd:5e:40:e2:a5:e1:94:
c8:38:6e:ca:e5:db:e3:09:59:c7:42:b9:ba:66:0b:50:74:b1:
af:c2:6e:e0:45:5d:fd:3e:48:76:e5:07:f2:0a:34:dd:dd:31:
05:63:1d:d6:ff:c9:e3:95:ff:ca:91:76:b1:1b:f7:a0:9e:f9:
f9:a1:c5:c8:2b:1d:49:c0:73:5f:16:47:07:a2:04:4f:7b:eb:
0c:e4:1e:ef:0b:a6:84:f2:a5:00:cc:52:92:b3:35:6b:96:a1:
2f:66:73:95:de:5e:68:fd:be:93:0d:11:e9:9b:fb:bf:55:45:
9a:cd:20:69:64:2f:91:da:3d:e1:90:8f:58:a2:6a:8c:96:87:
62:ff:00:ab:79:34:7d:f1:ed:1f:1c:e3:51:5f:ed:cf:6e:56:
cb:a1:1a:d8:90:61:09:35:a7:6d:b8:94:6d:99:58:4a:19:2d:
c6:66:72:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:56 2023 by rpki-client on console.sobornost.net