Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bGHb3J7_uDrVmzKwQqH1lKzFyY0.roa
File: bGHb3J7_uDrVmzKwQqH1lKzFyY0.roa (raw, json)
Hash identifier: WD670vYKYo5p1pt+pu0ssAKMuJCFPh2gTeTy6yXPOsc=
Subject key identifier: 6C:61:DB:DC:9E:FF:B8:3A:D5:9B:32:B0:42:A1:F5:94:AC:C5:C9:8D
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0182A132CAFD658D60FD4153C8268137A590
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bGHb3J7_uDrVmzKwQqH1lKzFyY0.roa
Signing time: Mon 15 Aug 2022 11:10:36 +0000
ROA not before: Mon 15 Aug 2022 11:10:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 141.11.188.0/24 maxlen: 24
141.11.123.0/24 maxlen: 24
141.11.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a1:32:ca:fd:65:8d:60:fd:41:53:c8:26:81:37:a5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Aug 15 11:10:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c61dbdc9effb83ad59b32b042a1f594acc5c98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:a8:fb:67:85:02:4d:58:b7:74:1a:35:62:
54:cf:d6:85:0c:c3:b7:9a:ca:24:12:46:87:2c:16:
09:49:91:9a:19:a6:a0:88:64:59:33:d3:14:cd:42:
10:6a:b3:76:a6:68:f5:fc:3c:07:1c:de:c6:78:27:
7f:c6:27:e7:b8:4e:bc:eb:0e:66:81:0f:df:6d:8e:
5c:f8:83:9a:98:53:27:30:5d:9e:e8:e7:31:28:f2:
36:62:7f:28:a5:91:39:a5:8e:d4:a0:d9:f2:4b:16:
d4:cf:bc:0d:fc:8c:24:77:35:7b:c1:d4:59:53:3a:
99:ae:fa:17:67:07:7a:c9:99:9e:b6:d5:8c:cd:d2:
fa:30:51:57:b8:9c:ee:99:ad:d0:20:1d:d1:31:59:
b0:84:60:f5:53:88:5f:27:98:b0:8b:ae:57:bd:d2:
1c:e8:6d:6c:44:68:c2:fc:a6:8a:4a:3e:bd:ff:75:
b4:25:d2:0c:5f:72:38:b0:97:3d:c5:48:1f:bc:8c:
47:f2:ba:f3:d0:b6:37:7b:a9:3b:5c:b4:3e:44:41:
2e:8a:11:32:a8:d6:99:c5:63:c8:b3:88:96:4c:c6:
e8:d2:86:a5:86:83:3b:76:ac:1d:a0:56:af:6a:11:
d6:a7:96:45:c0:aa:97:39:0f:07:bf:02:91:a8:6e:
c0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:61:DB:DC:9E:FF:B8:3A:D5:9B:32:B0:42:A1:F5:94:AC:C5:C9:8D
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bGHb3J7_uDrVmzKwQqH1lKzFyY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.123.0/24
141.11.125.0/24
141.11.188.0/24
Signature Algorithm: sha256WithRSAEncryption
95:b9:1e:01:f9:03:bd:2c:69:50:74:56:7c:9b:2b:d2:92:11:
9d:c5:1a:40:56:b4:f6:2c:f2:7e:36:85:cd:c9:03:8d:50:51:
46:ee:9e:92:5a:52:96:c9:64:b3:9c:76:f8:f4:d5:f0:59:de:
bd:cd:82:9c:65:88:8e:7f:35:ce:ca:98:76:5f:43:18:d0:49:
fa:ac:0e:25:9f:b3:74:b7:6a:40:2a:4b:82:ee:1f:48:74:fb:
e6:b3:2f:5a:01:8b:27:de:ac:13:ea:51:36:70:12:59:0b:9f:
ef:f5:57:ef:dd:5c:43:13:a7:7a:a7:df:a0:5a:bc:b4:d3:c7:
5e:d6:da:0a:34:5d:b6:c3:7d:79:83:15:71:d6:94:60:6b:5c:
70:af:b8:00:c5:b4:96:64:76:be:0e:0f:18:80:4d:46:44:82:
de:f6:f6:88:f1:94:45:e8:75:62:fa:6c:c1:6f:ee:e6:ea:74:
36:b6:87:61:75:f0:a0:82:dd:11:4f:eb:13:e0:a1:13:a4:59:
64:07:de:00:c7:49:e2:a1:2c:71:22:01:0c:bc:bf:b5:f1:a6:
04:6a:d1:7c:56:6f:ef:d1:10:64:04:a5:4b:65:9f:d3:69:8e:
d0:00:69:27:7d:39:03:29:b3:ce:52:32:ba:2a:94:e2:71:eb:
c5:6f:42:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:56 2023 by rpki-client on console.sobornost.net