Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/3J84ObsAMoa-ox7NVmw7F8atwGc.roa
File: 3J84ObsAMoa-ox7NVmw7F8atwGc.roa (raw, json)
Hash identifier: cexs6n653lt9Jbm+b4NJIVcTlCUM1JMGgnb/WlNj4Wo=
Subject key identifier: DC:9F:38:39:BB:00:32:86:BE:A3:1E:CD:56:6C:3B:17:C6:AD:C0:67
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0181FBDB1F5DED687A421E8B6B5EE3A7F65D
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/3J84ObsAMoa-ox7NVmw7F8atwGc.roa
Signing time: Thu 14 Jul 2022 08:37:30 +0000
ROA not before: Thu 14 Jul 2022 08:37:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33384
IP address blocks: 141.11.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fb:db:1f:5d:ed:68:7a:42:1e:8b:6b:5e:e3:a7:f6:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 14 08:37:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc9f3839bb003286bea31ecd566c3b17c6adc067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:08:58:93:ac:71:ad:c5:7d:52:89:88:83:d8:
cf:c5:4b:2b:9b:c6:50:3b:e5:f1:5b:23:ca:0b:56:
af:f9:ce:63:66:87:18:10:47:cc:7a:73:07:a9:be:
98:5b:4c:03:4a:b7:10:57:7a:e4:84:c1:38:84:70:
78:1a:30:3a:8f:97:40:60:62:71:f7:30:78:99:a5:
3d:1e:e1:56:75:3f:4f:e3:09:2f:0f:67:e0:c4:b2:
4b:b5:a8:1a:a1:61:f4:c9:12:ee:8c:5f:34:b5:c4:
bf:ff:f4:7f:46:a8:2d:c4:19:40:7b:ae:e1:ac:11:
de:bd:f6:19:46:9d:87:e0:4b:ca:7e:06:19:da:e8:
ae:5f:25:c1:4e:7e:f9:67:26:4e:07:14:f8:37:f8:
2f:72:6c:d2:75:0a:cd:40:11:c0:4c:c6:3b:ed:51:
a1:8f:36:9e:6b:28:0d:94:50:f1:ff:76:84:8c:bb:
93:67:b1:36:ce:61:36:ce:ed:6f:9d:8c:39:bc:a3:
03:01:7e:3f:5b:91:cf:64:56:a0:dc:7e:3d:3e:15:
23:dc:e6:d6:f0:68:04:2e:d1:e7:6c:f8:fa:1e:a7:
c3:06:fc:36:6c:af:17:dd:bd:42:71:5e:fc:51:4d:
c4:92:43:6a:d1:6b:d6:65:03:0e:92:2b:c4:2c:79:
8b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9F:38:39:BB:00:32:86:BE:A3:1E:CD:56:6C:3B:17:C6:AD:C0:67
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/3J84ObsAMoa-ox7NVmw7F8atwGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.30.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c3:a8:04:3a:de:a3:78:8a:39:3b:76:48:13:5d:ec:e6:89:
c3:d4:d8:e7:6b:d9:6c:c4:bd:87:74:96:4d:6c:03:c9:2b:72:
71:6e:80:73:0e:80:6a:c5:c1:6a:33:40:9c:d3:ff:4f:89:32:
12:1b:54:ac:df:92:d8:fe:66:29:dc:8d:5c:1f:8c:49:c3:6a:
1f:0d:77:8f:03:95:27:c9:18:69:f0:22:bb:af:f6:48:ff:12:
b0:2a:09:33:3e:3e:75:ee:99:76:e4:df:86:fa:78:c1:08:d2:
b9:c2:da:c5:e1:b0:f5:b2:e4:ab:6c:44:77:8b:29:4d:95:c3:
57:4e:d6:97:79:29:01:7c:fe:95:1c:d9:c0:29:aa:1f:99:92:
93:c0:46:f0:20:c2:8a:54:cc:ef:90:16:68:b8:b5:30:cd:09:
9c:40:be:ac:3f:03:67:52:93:73:a9:5b:5c:3a:d7:79:fe:4d:
66:77:79:0e:79:23:31:34:60:00:c6:c0:99:ec:dd:78:a0:17:
05:25:a2:19:cc:f0:3c:27:90:86:95:fc:e8:8e:c1:65:af:ea:
47:b3:5e:06:83:f0:6f:49:ad:16:07:d5:33:2c:ac:94:d7:b8:
0e:b7:49:8c:20:63:9f:5d:7e:a9:94:38:69:57:7d:75:cd:9b:
31:b7:38:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:49 2025 by rpki-client