Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/3bMkk_DmSxDCCFbr-KXySVZk1XM.roa
File: 3bMkk_DmSxDCCFbr-KXySVZk1XM.roa (raw, json)
Hash identifier: Z8Y/jY07j9iIypdqBOZKqrATCqXkiWi40gs4kyD0QxI=
Subject key identifier: DD:B3:24:93:F0:E6:4B:10:C2:08:56:EB:F8:A5:F2:49:56:64:D5:73
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01843E3BFF73F0AC3442CB8BB30CA2AD34C7
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/3bMkk_DmSxDCCFbr-KXySVZk1XM.roa
Signing time: Thu 03 Nov 2022 16:03:50 +0000
ROA not before: Thu 03 Nov 2022 16:03:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211440
IP address blocks: 141.11.192.0/23 maxlen: 24
141.11.190.0/24 maxlen: 24
141.11.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3e:3b:ff:73:f0:ac:34:42:cb:8b:b3:0c:a2:ad:34:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 3 16:03:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddb32493f0e64b10c20856ebf8a5f2495664d573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6f:38:c0:ca:e0:79:71:9f:dd:41:dc:b3:c5:
1f:2d:02:11:c0:2d:42:67:90:90:80:8d:66:6e:51:
8c:0c:70:e2:02:ae:f6:51:b6:74:fa:4d:98:b3:64:
df:cb:6e:ae:23:47:17:fb:2e:7c:15:9f:cd:a1:71:
f8:b9:99:22:5a:70:d8:b6:0f:af:3b:1f:9e:5d:37:
68:58:63:a6:04:82:70:02:3c:49:9f:cb:9c:31:ec:
a1:29:3e:38:7f:02:28:ec:41:da:3b:2e:c9:04:3f:
40:95:68:d9:38:32:6a:fa:86:08:70:05:c3:cc:18:
ba:72:9c:d9:d6:9b:40:3f:8c:5d:e2:ca:a4:58:19:
6d:4f:08:c4:3c:56:34:f3:b9:d7:e1:c0:55:c3:b1:
4a:f7:02:4f:44:c0:58:37:c0:d9:cb:73:57:8c:a8:
fe:79:49:e8:38:b9:93:81:3c:ae:71:84:fe:7c:07:
5d:00:84:14:ff:1a:6d:ad:db:a6:86:34:6d:60:cf:
c2:2a:3b:60:fc:e7:12:fd:3a:99:1c:62:45:cc:f2:
be:89:1d:98:f8:4e:31:35:10:95:7c:c1:22:cd:d5:
e8:aa:45:8b:db:13:6e:b8:5e:8a:b3:5c:b0:b2:ac:
76:4e:e2:6b:3a:bc:5c:fb:ff:84:01:fe:72:d7:49:
09:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B3:24:93:F0:E6:4B:10:C2:08:56:EB:F8:A5:F2:49:56:64:D5:73
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/3bMkk_DmSxDCCFbr-KXySVZk1XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.99.0/24
141.11.190.0/24
141.11.192.0/23
Signature Algorithm: sha256WithRSAEncryption
17:a0:95:a9:7b:9c:97:07:20:8a:2c:c0:d5:8c:2d:db:34:fd:
c6:14:49:49:4a:58:8f:f2:66:9a:20:5b:c1:d9:08:60:59:05:
24:a4:56:61:44:80:db:93:e3:4b:16:28:cc:f6:45:34:bd:b7:
01:0d:98:14:b8:d6:35:18:dd:d9:3d:f1:a9:d6:9b:73:ac:6f:
8d:3f:d0:14:2a:97:9b:6e:b1:60:9e:30:14:3b:e2:58:e2:f6:
73:3f:6e:63:c1:89:f0:e3:31:93:b3:d8:88:38:22:80:ee:0b:
0f:6e:81:70:a1:dc:3c:a8:1c:d1:d3:c9:da:94:b7:4a:12:a4:
a0:5a:62:24:f1:02:35:91:a0:81:dc:e3:b0:35:a6:bf:3e:22:
b9:4a:17:85:00:a7:36:73:38:2c:cf:a4:95:91:31:c3:29:b0:
ff:00:67:32:3c:1a:94:14:dd:96:1b:32:c7:38:42:8e:60:8c:
b4:43:cb:0f:a9:5e:e7:02:bc:b2:8b:bc:bf:30:8e:3d:12:cc:
0a:44:a9:9a:72:12:5e:3f:63:e0:da:24:2f:ac:7e:49:4a:2e:
05:04:ff:2d:12:c9:5f:b2:fe:54:af:69:cf:01:07:56:f1:7b:
72:73:db:77:78:13:e6:28:a0:32:74:2f:c9:bf:3c:9a:94:55:
3f:7b:79:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:49 2025 by rpki-client