Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/1-B9mKPq2thZULiAPknn9k9L3AWE.roa
File: 1-B9mKPq2thZULiAPknn9k9L3AWE.roa (raw, json)
Hash identifier: nHQWHyHMbeqLF5DIhgMF7xlKLQanVvjJUuFwObWVhj4=
Subject key identifier: F8:1F:66:28:FA:B6:B6:16:54:2E:20:0F:92:79:FD:93:D2:F7:01:61
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01835B1CB14C861E9025D8CDEEBCA150C16A
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/1-B9mKPq2thZULiAPknn9k9L3AWE.roa
Signing time: Tue 20 Sep 2022 13:35:50 +0000
ROA not before: Tue 20 Sep 2022 13:35:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13335
IP address blocks: 141.11.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5b:1c:b1:4c:86:1e:90:25:d8:cd:ee:bc:a1:50:c1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 20 13:35:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f81f6628fab6b616542e200f9279fd93d2f70161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:1b:db:f7:3d:e1:b4:31:f9:5b:2f:07:be:
c4:15:6e:bc:7e:2f:d4:b4:30:1a:4f:e0:f7:c7:7f:
7f:99:7f:61:fe:98:9f:ff:2a:34:8d:2b:6d:89:7e:
eb:f6:74:8e:92:01:2d:85:9d:91:95:61:68:9c:89:
80:9d:49:79:f2:eb:e9:19:93:ba:94:bf:44:61:7d:
14:ad:7d:fc:ea:cc:90:eb:e0:43:83:43:a7:df:5d:
d1:05:07:1b:42:a9:4b:48:59:1a:d1:fe:7d:92:e2:
28:7e:77:24:a5:d4:dc:dd:3b:e6:d6:61:dd:c2:38:
5d:fd:c4:ad:f6:24:e9:e4:46:ad:46:08:85:64:91:
ce:ee:69:7e:97:fb:26:4a:75:28:81:f4:f6:8d:2c:
bd:35:4e:8d:d4:b8:db:4e:76:24:a4:ec:05:63:0e:
18:8e:d4:46:a0:e0:f5:ae:ab:e4:54:71:b8:18:c3:
28:09:8f:ae:3e:19:0d:3a:b6:9f:21:e7:a3:41:94:
05:62:a4:d9:3b:f7:00:3e:2e:44:0b:d7:13:b0:e2:
ff:ed:66:6c:4f:40:d5:a1:7f:54:46:3b:fc:e6:c5:
6b:e3:8e:67:04:65:fa:aa:6f:1e:d1:bf:1d:cd:7e:
95:a6:df:cd:b1:d9:9d:dd:7f:31:14:6c:cc:77:8e:
c6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1F:66:28:FA:B6:B6:16:54:2E:20:0F:92:79:FD:93:D2:F7:01:61
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/1-B9mKPq2thZULiAPknn9k9L3AWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.71.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:3c:3f:d1:02:10:30:e6:69:c8:50:60:a3:9e:ae:6f:9e:64:
49:20:1f:43:ed:86:8b:3a:c6:8a:99:93:02:28:6e:f7:10:63:
d2:c1:52:5b:fc:cd:cb:ac:13:be:05:0a:69:07:99:78:44:72:
00:16:9c:a6:98:a0:7e:f8:b4:bc:91:65:7b:3d:98:54:d5:bf:
2f:a6:42:68:c4:64:2e:10:ed:56:6d:72:98:8c:bb:45:4e:b0:
d2:69:98:c6:35:d4:96:10:6c:0a:c1:9b:d2:a4:5e:aa:b9:3f:
73:d5:86:cd:cf:e1:cf:2f:a4:3a:a5:a0:7f:26:db:74:9b:2b:
54:ca:08:bd:05:c1:f8:15:a9:a9:9b:7d:26:36:4d:f8:4a:cb:
1a:6e:3e:20:44:47:a2:99:8c:32:85:7a:3b:5f:a8:0d:af:3e:
8e:6d:63:4c:44:64:f6:b7:b3:5d:39:2e:15:ce:5e:db:7e:72:
74:69:c7:8e:97:f8:9f:ce:c3:c9:cd:96:84:1a:7c:11:82:3d:
bc:1d:e0:dc:6c:14:84:db:21:25:9d:a6:d6:d4:2b:00:3e:eb:
eb:ec:7c:42:2b:e0:a8:f1:fb:8d:2e:9d:3c:e1:47:35:2f:b0:
56:f7:8d:b9:16:f1:aa:f8:10:cb:99:f0:20:44:8a:04:8e:47:
de:b4:e3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:59 2025 by rpki-client