Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/wCZ80Q8fcVgjTbWc-eDyk3DkcLg.roa
File: wCZ80Q8fcVgjTbWc-eDyk3DkcLg.roa (raw, json)
Hash identifier: lJi1mrbf51nmpoVaEuZ/m7szGPuo/1SULCcbBysRFaw=
Subject key identifier: C0:26:7C:D1:0F:1F:71:58:23:4D:B5:9C:F9:E0:F2:93:70:E4:70:B8
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0183C73F48556CAF34C664993ABDDE2D80C4
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/wCZ80Q8fcVgjTbWc-eDyk3DkcLg.roa
Signing time: Tue 11 Oct 2022 13:32:36 +0000
ROA not before: Tue 11 Oct 2022 13:32:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43350
IP address blocks: 141.11.182.0/24 maxlen: 24
141.11.184.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.246.0/24 maxlen: 24
141.11.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c7:3f:48:55:6c:af:34:c6:64:99:3a:bd:de:2d:80:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Oct 11 13:32:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0267cd10f1f7158234db59cf9e0f29370e470b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:62:54:d1:d5:d7:11:4c:70:17:78:5c:ef:f4:
5f:6d:b4:8e:bc:d7:a4:fb:b8:32:7e:3a:48:21:a6:
dc:94:18:02:07:05:9b:ca:c3:ab:5d:87:79:0e:55:
90:22:6d:bf:82:c6:07:96:2d:3f:24:82:19:8b:8a:
33:76:03:f8:28:12:bd:06:b9:dd:ee:4c:d3:39:58:
91:22:f4:12:9f:c7:6b:21:42:ba:c8:6e:7b:30:cf:
3b:93:41:aa:51:a4:cd:ed:6a:64:c5:63:69:e7:2b:
dc:e7:78:e1:ea:8c:14:dc:24:47:28:6d:2f:45:3b:
37:ed:49:fd:59:60:75:61:e4:53:83:52:a1:1b:6c:
b6:a6:aa:62:f5:89:c1:45:11:c1:74:67:be:2c:ec:
92:3c:23:fa:89:6c:ac:95:bc:1c:15:9e:9b:36:dc:
8c:71:4c:84:79:b4:ac:4f:51:20:25:d3:6b:7c:c0:
67:eb:ef:5e:3e:5a:60:21:8e:91:1b:7c:c2:46:e8:
4f:01:3e:9c:ab:d6:0a:cc:c9:3f:1e:3e:37:80:52:
6d:47:fc:31:ca:85:a1:f5:0a:5e:ee:2d:c4:66:f4:
34:c8:fb:40:b8:d2:df:86:66:71:ae:96:32:37:db:
37:41:fc:95:1e:2f:b5:b4:5b:f0:65:da:86:ed:ca:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:26:7C:D1:0F:1F:71:58:23:4D:B5:9C:F9:E0:F2:93:70:E4:70:B8
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/wCZ80Q8fcVgjTbWc-eDyk3DkcLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.21.0/24
141.11.182.0/24
141.11.184.0/24
141.11.246.0/24
141.11.250.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:4a:dc:57:9d:7c:5a:bb:c3:05:89:c8:00:ae:f6:86:d5:12:
26:b8:31:e2:64:d6:b3:53:c9:cd:0e:23:a1:17:90:1a:6f:c2:
54:39:9b:3f:38:72:47:8e:a8:98:5f:e1:2b:6d:3c:d9:4e:d3:
87:26:b8:f9:11:c6:4c:4d:91:d2:f0:49:df:d8:3e:ea:00:1e:
1c:87:45:fe:50:d0:49:47:0c:1f:62:2f:2b:d9:21:00:78:56:
a3:c6:54:ff:25:d4:ff:5b:e6:f9:87:d5:85:23:44:f4:13:b2:
e3:de:aa:9e:20:c0:5a:34:a5:ae:43:4e:79:64:50:04:b7:23:
02:e6:24:1b:0b:b1:fb:b7:f8:d1:cc:42:56:ff:23:ff:ba:42:
b7:c4:f8:4e:0d:5a:f9:18:40:2c:68:d6:dc:01:3a:cd:38:4a:
d5:f5:28:95:ab:f9:bb:4b:53:99:ef:89:16:00:11:9f:e9:6d:
c6:19:60:b3:7e:01:3c:9b:7b:6d:22:97:0c:7f:a9:d3:c6:85:
34:52:e1:c6:82:c6:ad:e1:d9:02:90:fa:9b:55:6f:aa:b8:ae:
a7:fc:a8:4f:c7:63:f8:99:5d:e5:fb:ae:a6:34:d6:ef:10:6e:
7e:70:3d:a3:5b:3a:c3:ca:96:4d:09:89:cd:8d:73:62:35:d6:
48:03:ba:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:57 2023 by rpki-client on console.sobornost.net