Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/u8fv0ohZLIe63q4oAwSF1bygsxw.roa
File: u8fv0ohZLIe63q4oAwSF1bygsxw.roa (raw, json)
Hash identifier: jkZR0/+4YS+JwULLJUCutyvzAu5YzUrO5Ah8thn2jTE=
Subject key identifier: BB:C7:EF:D2:88:59:2C:87:BA:DE:AE:28:03:04:85:D5:BC:A0:B3:1C
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01851AB089556862763F0BF503721AF18EBF
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/u8fv0ohZLIe63q4oAwSF1bygsxw.roa
Signing time: Fri 16 Dec 2022 11:27:35 +0000
ROA not before: Fri 16 Dec 2022 11:27:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 141.11.40.0/24 maxlen: 24
141.11.220.0/22 maxlen: 24
141.11.232.0/22 maxlen: 24
141.11.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1a:b0:89:55:68:62:76:3f:0b:f5:03:72:1a:f1:8e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Dec 16 11:27:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbc7efd288592c87badeae28030485d5bca0b31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6a:c8:81:c6:2d:6b:5d:58:13:60:5d:e8:e4:
c1:03:85:ff:73:90:b5:03:75:30:5b:f3:7a:ec:9c:
f1:83:d2:47:f2:54:00:ea:06:77:9c:b4:ba:8d:67:
9c:7b:71:56:82:c1:d4:60:9d:be:47:c7:d6:c6:d0:
69:8e:00:da:c2:45:17:c8:19:28:dd:44:25:93:ee:
ba:15:33:ca:85:fe:ab:42:ef:0a:c5:0f:97:68:e8:
c1:c6:99:0d:4a:93:26:4d:e3:49:e8:3e:6f:3c:5d:
50:e2:cb:95:48:96:bc:cd:d6:4a:59:f7:f2:2a:8c:
69:32:e5:d3:3d:ae:8e:fc:1f:1f:8b:85:2a:03:8a:
7a:79:cd:58:a5:bd:71:7d:ad:80:50:a6:1c:83:50:
ea:32:8a:d6:bf:70:33:b6:45:b4:9f:d9:1d:dc:b0:
d1:fa:b0:9f:55:48:d5:1f:e3:86:b2:0f:53:20:e3:
2d:65:ae:34:aa:e7:20:a8:5b:07:82:4a:06:ee:5c:
7a:2b:a3:c0:ec:6c:33:58:df:e7:7b:79:99:f4:84:
54:00:79:54:81:87:0e:65:b5:b0:46:50:55:a9:eb:
4b:26:56:0a:a4:c5:07:8f:3d:7e:12:61:1a:eb:e0:
a3:b6:5f:7c:7a:05:4e:4d:46:2e:bc:ad:9e:c9:84:
a5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C7:EF:D2:88:59:2C:87:BA:DE:AE:28:03:04:85:D5:BC:A0:B3:1C
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/u8fv0ohZLIe63q4oAwSF1bygsxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.40.0/24
141.11.144.0/22
141.11.220.0/22
141.11.232.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:fa:76:a8:e0:b1:5e:24:77:31:95:ac:f9:e6:63:29:76:90:
87:c0:73:72:cc:d5:83:86:0d:bd:60:0c:ab:92:d9:d9:8b:2b:
5a:a9:aa:02:13:09:78:65:5f:0a:2a:2b:d4:b0:c7:54:c9:a6:
b7:c2:c9:17:a0:b9:cd:31:c0:19:bc:03:c9:64:8a:29:dd:41:
56:1d:d7:5a:81:bb:00:ed:26:b8:f0:15:8c:ce:9a:20:2a:85:
4a:35:56:b5:63:b6:c3:c7:52:c2:44:4b:c6:4c:01:ee:e0:da:
a6:5c:45:3c:a5:5b:fa:b5:90:b6:f5:1c:1d:56:cb:92:03:df:
c2:34:ea:ef:a9:7a:34:64:ea:a0:a4:66:79:74:3c:36:91:39:
bc:f5:ce:7f:65:a0:41:16:d6:db:7c:6a:ae:5a:c3:7c:c6:98:
40:04:e4:c0:c8:32:59:fa:44:b3:72:18:ee:8f:5a:cf:1b:1e:
2c:78:b3:ba:26:6d:9c:34:e8:91:74:9c:cf:9c:86:5d:8f:f8:
81:e5:74:f2:62:84:2b:4d:7b:df:7d:17:d2:66:a6:27:16:4f:
46:b6:5e:ec:30:ee:43:62:bd:1b:0d:6b:c1:82:35:f6:09:a5:
b4:78:e0:d3:a8:81:ae:6c:c8:e3:27:b9:97:df:7c:80:d7:5b:
ba:ae:37:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:57 2023 by rpki-client on console.sobornost.net