Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ckkwZtY-K6lbBwL23nCE3NVBKIA.roa
File: ckkwZtY-K6lbBwL23nCE3NVBKIA.roa (raw, json)
Hash identifier: 4OJiQD7aReZTId6eememGV3M36RjTg7FXtd11vmQRn8=
Subject key identifier: 72:49:30:66:D6:3E:2B:A9:5B:07:02:F6:DE:70:84:DC:D5:41:28:80
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 03955F36
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ckkwZtY-K6lbBwL23nCE3NVBKIA.roa
Signing time: Tue 22 Mar 2022 10:13:30 +0000
ROA not before: Tue 22 Mar 2022 10:13:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 141.11.192.0/19 maxlen: 24
141.11.187.0/24 maxlen: 24
141.11.104.0/22 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.6.0/24 maxlen: 24
141.11.122.0/24 maxlen: 24
141.11.127.0/24 maxlen: 24
141.11.128.0/19 maxlen: 24
141.11.20.0/24 maxlen: 24
141.11.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60120886 (0x3955f36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Mar 22 10:13:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72493066d63e2ba95b0702f6de7084dcd5412880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:5c:84:23:14:9d:41:af:3b:27:5f:f2:3d:
bb:fb:96:fe:a0:cf:2c:97:96:db:6a:e4:85:f4:98:
8e:09:f1:0f:0e:d6:9c:e1:8f:9c:73:e7:74:b7:63:
88:13:d2:c9:b0:48:a8:1a:f4:17:32:f6:d8:f0:1e:
0a:ac:c6:30:a7:ee:9f:6d:de:af:23:1e:b6:6d:d1:
3e:eb:1e:1e:1a:5b:c5:7c:69:95:08:8d:35:35:70:
81:9d:01:32:88:8b:ed:23:52:47:a0:fb:e2:b7:08:
87:14:8c:0d:d3:ed:c4:4e:59:8e:87:48:5b:2d:d3:
c3:e7:75:da:2f:db:c4:e1:07:3a:ef:c1:ef:b6:c3:
98:de:cc:e3:4b:d0:b5:9d:ce:af:41:e5:50:2d:11:
43:b0:2e:00:4d:69:2a:14:5c:d5:54:85:9e:1b:2e:
84:37:86:3c:53:6e:eb:bc:45:9c:1c:a2:fd:0a:bb:
fb:74:9f:d3:96:69:58:70:12:6b:70:18:9f:c0:ea:
86:66:1c:b3:3e:15:e4:14:1c:28:ef:61:5b:bb:6b:
a0:a0:33:08:d5:10:14:28:f6:f5:17:02:71:b7:96:
d2:62:2f:58:70:18:f3:75:b9:17:73:82:3c:1f:b8:
d0:59:12:ab:18:0d:6d:ac:79:4b:a5:a7:3e:a5:e1:
94:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:49:30:66:D6:3E:2B:A9:5B:07:02:F6:DE:70:84:DC:D5:41:28:80
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ckkwZtY-K6lbBwL23nCE3NVBKIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
141.11.6.0/24
141.11.19.0-141.11.20.255
141.11.104.0/22
141.11.122.0/24
141.11.127.0-141.11.159.255
141.11.187.0/24
141.11.192.0/19
Signature Algorithm: sha256WithRSAEncryption
78:43:d7:dc:c5:4e:26:94:35:01:93:8c:db:dc:6f:cd:bc:d1:
19:81:5a:da:8e:41:cf:38:db:a5:c9:0f:01:b1:99:71:ee:00:
65:30:3a:48:94:46:4c:27:fc:51:34:e0:03:d8:35:cc:b8:e1:
95:9d:15:bb:dd:f7:4b:d9:53:84:81:ff:77:70:c7:99:bc:69:
dd:b5:c7:17:84:55:50:61:42:e6:53:9b:ee:18:c7:2d:dc:57:
80:10:eb:3e:5b:97:8e:68:8d:ff:58:61:df:5a:a6:00:0d:ad:
5f:fb:8f:25:2c:43:e7:72:49:bd:eb:60:4d:6e:0f:34:04:d4:
57:ea:e3:93:04:01:98:03:3c:04:37:66:3e:08:4a:b0:49:08:
55:a1:97:8e:2d:28:bf:2a:21:63:d2:32:fd:94:bc:41:a3:a2:
d5:d5:5d:67:35:02:61:8c:31:3d:bc:2b:83:54:8e:76:b3:7b:
6d:e2:1e:52:2a:98:e8:a1:d1:95:a1:ce:66:30:de:b1:79:8a:
15:2b:0f:20:d9:61:e2:30:c5:67:ad:72:8f:25:73:85:36:62:
30:57:63:2f:e9:52:f5:a8:94:8a:83:7c:b0:da:17:d1:12:c9:
b1:99:c2:17:ad:7d:da:ef:8c:2d:f9:2d:97:44:a1:0a:56:bf:
25:a4:d3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:56 2023 by rpki-client on console.sobornost.net