Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/3Ex9Bx4Xd6x3Fcx_Mja063Jh3Bk.roa
File: 3Ex9Bx4Xd6x3Fcx_Mja063Jh3Bk.roa (raw, json)
Hash identifier: 7SIMrLmY5w9UskpiJuUo9e759cxBDupKKW1PMuUQsEg=
Subject key identifier: DC:4C:7D:07:1E:17:77:AC:77:15:CC:7F:32:36:B4:EB:72:61:DC:19
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0183ACA5D983D817DBCE0421CA0372620F85
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/3Ex9Bx4Xd6x3Fcx_Mja063Jh3Bk.roa
Signing time: Thu 06 Oct 2022 09:34:53 +0000
ROA not before: Thu 06 Oct 2022 09:34:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138687
IP address blocks: 141.11.185.0/24 maxlen: 24
141.11.190.0/24 maxlen: 24
141.11.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ac:a5:d9:83:d8:17:db:ce:04:21:ca:03:72:62:0f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Oct 6 09:34:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc4c7d071e1777ac7715cc7f3236b4eb7261dc19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:41:a6:d0:8c:68:dd:ac:39:2a:28:52:b8:18:
d5:c7:80:c2:3d:97:46:1a:01:b9:f8:97:e2:ad:dc:
3a:f5:1f:2c:9e:7b:df:f7:be:05:aa:3b:63:4c:00:
c2:c2:35:49:05:9d:bb:a1:1a:9a:77:9e:93:19:46:
22:d9:48:f4:ea:83:1e:0e:9f:83:b9:50:02:a7:45:
89:f2:3d:31:78:f1:43:bc:4e:d2:3b:03:fa:a9:38:
8e:8a:93:77:de:83:9f:e6:04:36:48:21:02:27:87:
7f:5a:f2:67:83:ef:9e:73:2e:20:42:a7:2b:3f:03:
f2:06:c5:c3:90:7d:15:2f:21:f8:eb:ef:8a:75:dc:
85:63:f3:fb:72:4c:e5:d1:27:5f:ea:8b:37:d9:3e:
48:ba:80:91:7b:12:66:fb:0a:5e:fb:50:e3:8b:fd:
3f:77:4f:3d:0e:dc:13:21:37:e8:5c:68:ac:a2:71:
ec:4b:8f:6c:b1:24:8e:0a:3f:90:be:4a:59:db:ab:
c4:e7:a6:75:38:c1:fa:86:92:a3:c8:75:60:01:00:
ee:03:6a:e4:d9:b6:6a:cc:f0:a5:cb:06:33:66:11:
0d:90:8b:fa:09:b9:fa:65:c1:07:2c:8a:26:4e:b3:
6b:82:0c:f7:23:eb:dd:90:7a:2d:c5:7b:b0:8d:db:
0f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4C:7D:07:1E:17:77:AC:77:15:CC:7F:32:36:B4:EB:72:61:DC:19
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/3Ex9Bx4Xd6x3Fcx_Mja063Jh3Bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.100.0/24
141.11.185.0/24
141.11.190.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:07:e3:55:bf:f1:1f:b5:01:ee:e7:39:48:c7:68:11:0e:e6:
38:ca:65:3d:80:50:70:f8:3c:5c:56:90:e2:ea:ed:88:2d:67:
e9:50:2a:cf:6c:2c:f7:4e:a8:d4:aa:4b:39:3b:06:b8:38:60:
7a:09:35:d1:81:fe:b4:d9:df:e4:5d:a9:23:2a:c8:40:de:3f:
51:26:17:d2:b5:4d:bc:63:73:20:7a:24:d8:76:4d:87:96:f3:
72:fa:06:b5:1a:33:7d:70:98:32:ea:5c:55:b0:04:cf:15:b8:
02:00:48:90:e3:f4:b0:d9:93:0d:71:e7:0a:16:62:5e:6f:cd:
b7:2a:65:b1:2f:1b:7d:6b:4f:61:69:c5:f2:1a:8c:cb:dd:b1:
57:8f:72:ce:6b:10:9d:b1:7d:6a:34:e1:eb:f6:cd:cc:3a:9c:
7c:29:4b:15:0e:9f:d7:8a:e9:f7:6d:d3:92:c1:84:e1:43:b9:
92:8c:e3:05:5c:a2:a9:22:a4:37:05:ef:88:8c:4b:cf:78:86:
54:27:39:8d:50:cc:0c:07:bf:31:64:3f:85:90:04:85:c7:90:
96:cd:32:58:9a:55:c6:cb:25:26:3e:fa:43:81:cf:fb:97:d6:
05:54:34:7a:53:99:46:a3:b1:cd:07:18:d0:84:d6:ad:d5:f2:
aa:60:f5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:52 2025 by rpki-client