Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/12DD2aCYvziGW8lVsGZ2vKiLBC0.roa
File: 12DD2aCYvziGW8lVsGZ2vKiLBC0.roa (raw, json)
Hash identifier: Ii7ExRVqK7pcmlW/+KlDzAXDHNkTNKGqWd+7FkH2wWQ=
Subject key identifier: D7:60:C3:D9:A0:98:BF:38:86:5B:C9:55:B0:66:76:BC:A8:8B:04:2D
Certificate issuer: /CN=6ff362c0765afb7b9804b6d819470007b01f262e
Certificate serial: 01942068069705BC974CE7714E15C666601B
Authority key identifier: 6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/12DD2aCYvziGW8lVsGZ2vKiLBC0.roa
Signing time: Wed 01 Jan 2025 05:47:55 +0000
ROA not before: Wed 01 Jan 2025 05:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32611
IP address blocks: 141.113.144.0/21 maxlen: 21
141.113.152.0/21 maxlen: 21
141.113.158.0/23 maxlen: 23
141.113.160.0/21 maxlen: 21
141.113.168.0/21 maxlen: 21
141.113.168.0/23 maxlen: 23
141.113.171.0/24 maxlen: 24
141.113.176.0/21 maxlen: 21
141.113.184.0/21 maxlen: 21
2a03:9e41::/32 maxlen: 32
2a03:9e41:e101::/48 maxlen: 48
2a03:9e41:e300::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:06:97:05:bc:97:4c:e7:71:4e:15:c6:66:60:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff362c0765afb7b9804b6d819470007b01f262e
Validity
Not Before: Jan 1 05:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d760c3d9a098bf38865bc955b06676bca88b042d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:54:d9:1e:67:79:d0:c0:6c:7b:db:4d:1c:8d:
0b:36:22:6c:b3:82:12:59:a6:63:bc:7d:8f:0c:0b:
80:cf:29:7d:3d:bb:ac:a9:96:6e:38:96:f9:f7:6d:
5a:f1:80:23:99:ed:74:94:91:7d:f9:1c:66:b1:aa:
87:f9:82:ed:df:f3:4e:3b:85:a7:3e:5d:fd:16:92:
91:54:25:9d:c3:3f:4b:c0:cc:99:f6:b1:0f:86:0e:
b6:5b:85:33:57:b8:ac:c4:a0:02:b7:53:36:d2:c5:
a0:6b:01:7a:c9:74:df:2a:88:1c:80:fb:63:07:89:
63:96:ba:ef:7c:16:de:5b:2e:8d:c2:78:46:12:64:
fe:73:ba:cb:5a:86:79:ee:69:0b:3c:44:af:4c:dd:
1c:63:21:0a:a9:ad:08:c7:a5:b8:80:d1:6b:81:c8:
c2:7b:c2:05:e6:cc:2a:5a:5d:cc:5c:60:8a:1b:bd:
88:ad:96:a4:de:33:45:a1:41:ec:73:b6:a8:72:97:
4f:db:59:58:69:54:fc:75:fb:42:83:dd:d5:48:61:
df:c4:96:f0:3e:db:bc:e4:2f:4e:26:46:1b:62:46:
2a:5c:e8:75:4b:94:0f:09:50:1f:80:49:cb:3b:25:
78:ab:7c:e2:f7:39:08:fa:57:8a:f6:74:d3:50:d0:
da:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:60:C3:D9:A0:98:BF:38:86:5B:C9:55:B0:66:76:BC:A8:8B:04:2D
X509v3 Authority Key Identifier:
keyid:6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/12DD2aCYvziGW8lVsGZ2vKiLBC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.113.144.0-141.113.191.255
IPv6:
2a03:9e41::/32
Signature Algorithm: sha256WithRSAEncryption
59:ed:1f:57:83:49:97:28:d9:08:b6:0b:f6:71:7a:a5:2a:96:
05:d6:cb:0c:0e:b7:67:80:3d:86:4f:a4:1e:20:0c:c2:24:e4:
8e:35:04:da:73:0e:4c:c7:9d:6c:b8:f1:d4:7b:76:60:27:71:
80:6f:19:70:05:e4:90:71:a8:e0:5f:45:1e:97:a5:81:85:7b:
22:0d:78:9a:fb:2d:9e:84:73:6e:16:40:e5:b7:f6:df:70:f4:
f0:61:c9:89:f3:62:29:ef:ec:16:7e:67:26:56:77:4b:d8:d2:
14:ad:76:41:21:6b:4d:87:a8:c6:d4:6f:96:bd:53:8f:22:b5:
41:60:7d:3d:d3:82:fd:f6:36:9b:64:fb:6c:28:bc:04:76:1d:
da:5d:61:09:72:ec:56:21:ae:c1:00:ab:6f:cb:b0:1c:85:10:
25:ad:68:2a:b1:19:cb:44:8c:b6:62:ef:de:9e:0d:41:92:23:
3b:c2:12:8f:49:63:75:15:19:50:03:9b:e6:83:a5:b2:36:9e:
bd:1e:30:f9:90:6b:d0:ca:d2:fd:ab:2d:b5:9e:93:f8:81:3a:
99:39:83:dc:7c:f5:05:e7:a0:02:25:33:be:45:43:dc:38:25:
6f:f3:0c:e2:bc:c4:42:54:27:52:fc:25:dc:f5:be:20:14:d2:
38:a6:74:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:24:14 2025 by rpki-client