Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/arNGOPJ8tro-3KMsHJrf2Mhs5Rk.roa
File: arNGOPJ8tro-3KMsHJrf2Mhs5Rk.roa (raw, json)
Hash identifier: 4yaDoej2dmddbnAXEl28DIqV1cYP5OeqvCdWpriIPBs=
Subject key identifier: 6A:B3:46:38:F2:7C:B6:BA:3E:DC:A3:2C:1C:9A:DF:D8:C8:6C:E5:19
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 035AC8BB
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/arNGOPJ8tro-3KMsHJrf2Mhs5Rk.roa
Signing time: Fri 04 Mar 2022 19:01:21 +0000
ROA not before: Fri 04 Mar 2022 19:01:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57416
IP address blocks: 141.11.161.0/24 maxlen: 24
141.11.178.0/24 maxlen: 24
141.11.177.0/24 maxlen: 24
141.11.4.0/24 maxlen: 24
141.11.5.0/24 maxlen: 24
141.11.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56281275 (0x35ac8bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Mar 4 19:01:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ab34638f27cb6ba3edca32c1c9adfd8c86ce519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:16:65:d7:80:2e:b7:71:a8:01:7b:14:da:ff:
ac:28:8c:06:96:bc:2a:ed:80:3f:04:f1:ff:fd:d5:
00:ce:9c:11:f6:94:f4:75:9a:12:eb:7e:4b:35:51:
11:88:15:39:65:e0:fb:fc:4f:41:91:c0:e9:80:4c:
ef:ee:fd:aa:30:f0:2f:35:af:5f:86:73:c7:78:e2:
eb:c2:6a:f5:fa:37:47:ac:76:49:9d:82:a1:76:31:
13:f3:a2:db:68:a1:3f:78:82:a1:20:da:b5:01:44:
d7:3b:72:16:4c:68:d3:c6:2c:a5:12:fc:95:25:6e:
89:61:f4:bc:06:a2:90:b7:35:32:57:c1:ef:60:5e:
45:84:36:58:2a:02:52:f2:2d:0b:c8:f8:c0:dd:b6:
8f:91:1e:9e:51:24:87:6f:d5:25:c9:23:cb:84:a5:
fa:8a:5b:95:bd:43:0f:8a:22:03:92:e0:de:39:9b:
3b:aa:bf:a0:3f:55:ac:54:da:e6:1f:aa:f3:7f:33:
58:01:b9:ea:11:e3:88:0e:94:ac:a9:06:10:31:0c:
e3:f4:71:a5:f8:60:52:0d:31:11:82:cf:69:df:2c:
9d:64:e8:d0:4a:d5:80:8b:06:69:1a:13:b3:f6:21:
ae:4f:c3:d4:21:f9:e3:b1:06:e5:43:d0:59:09:32:
14:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B3:46:38:F2:7C:B6:BA:3E:DC:A3:2C:1C:9A:DF:D8:C8:6C:E5:19
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/arNGOPJ8tro-3KMsHJrf2Mhs5Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.4.0/23
141.11.30.0/24
141.11.161.0/24
141.11.177.0-141.11.178.255
Signature Algorithm: sha256WithRSAEncryption
1b:f6:e4:d4:05:df:87:2f:67:8b:58:dd:81:65:67:d4:a2:7e:
3f:ab:e9:93:90:e9:ad:1b:18:a6:22:7d:65:c3:90:08:5d:6a:
43:d5:df:61:8f:54:cd:a5:02:37:b1:ca:da:e1:90:96:32:e4:
fa:5e:41:e3:48:d9:63:72:ff:f0:26:39:b6:1d:2d:88:d2:43:
7c:65:e5:4c:ba:ce:46:50:33:41:40:18:9d:72:44:e8:2a:6f:
54:0a:85:0c:c3:95:c8:d3:e7:cd:ea:e9:dd:1c:1f:b2:3f:04:
98:1c:1a:37:ac:20:43:66:16:76:01:53:cd:13:85:32:57:b3:
73:7a:14:bf:a1:eb:3d:c3:3b:45:d6:00:fe:df:88:46:11:5a:
82:d6:e1:e5:ed:9d:28:7e:a4:34:b2:3f:8c:e8:74:3d:fd:30:
c1:22:63:6a:74:19:6a:75:6c:3e:eb:83:58:de:b6:77:ed:a6:
8e:6a:4c:94:fa:29:99:00:92:98:86:46:a6:c9:c6:c6:56:79:
46:fd:59:4c:c6:4b:7f:dd:0e:c0:e6:9b:4d:22:bc:0a:c2:5e:
9b:a5:2a:23:e9:0b:55:aa:20:d9:52:5e:0c:f2:96:33:aa:3d:
1a:e9:4b:70:05:7c:04:f8:76:35:86:66:5e:ec:0a:10:fc:96:
2c:4e:07:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:56 2023 by rpki-client on console.sobornost.net