Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/3olu8Q_i8CFQVQXIr17uGkLLcHg.roa
File: 3olu8Q_i8CFQVQXIr17uGkLLcHg.roa (raw, json)
Hash identifier: +ycWtUTxOYvnNEpDBMh8JCmK7M4xIPZfohX4e3tTw/c=
Subject key identifier: DE:89:6E:F1:0F:E2:F0:21:50:55:05:C8:AF:5E:EE:1A:42:CB:70:78
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 052F955B
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/3olu8Q_i8CFQVQXIr17uGkLLcHg.roa
Signing time: Tue 21 Jun 2022 08:55:44 +0000
ROA not before: Tue 21 Jun 2022 08:55:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3257
IP address blocks: 141.11.156.0/22 maxlen: 24
141.11.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87004507 (0x52f955b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jun 21 08:55:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de896ef10fe2f021505505c8af5eee1a42cb7078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:14:08:09:b5:83:59:6e:ed:c7:02:59:45:1a:
5e:cd:e4:f5:5d:ce:f0:1a:07:12:cb:38:a0:8d:b9:
59:29:cf:9e:c0:39:1f:e0:c2:20:c7:f3:5a:7f:ff:
69:ed:6a:2a:5f:7a:0a:e5:8e:79:10:b1:56:ad:4e:
f5:97:f5:69:08:83:7f:3b:03:32:df:5a:7f:42:dd:
bf:ca:c5:15:e8:87:4d:9b:74:25:2a:c8:fb:a2:2f:
e1:bc:8e:71:12:f3:64:fe:d3:55:08:22:2f:24:fe:
be:07:b5:42:8c:c9:ef:9a:4f:95:9f:6a:7d:68:10:
22:61:e7:72:f1:56:8d:aa:a8:15:3d:bb:0b:ec:fe:
0c:93:12:0e:e8:dc:0a:28:88:52:22:d6:ed:06:4f:
f2:d5:9d:41:8d:87:1e:d3:a2:7c:b9:b9:c7:a2:18:
a4:c7:c6:ac:10:4e:8c:92:0a:19:58:2e:af:29:27:
e1:e0:6d:bc:53:ad:75:e9:c8:73:00:34:7d:dd:3b:
85:1c:90:f7:74:37:74:db:22:30:69:55:d5:b3:93:
12:2b:43:39:9f:32:d4:17:08:ea:a7:a4:41:27:b5:
d6:c8:53:bc:c4:ef:f6:2e:25:62:e5:45:10:e0:75:
25:14:26:1a:bd:54:38:d5:00:9e:c5:52:b9:79:9d:
80:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:89:6E:F1:0F:E2:F0:21:50:55:05:C8:AF:5E:EE:1A:42:CB:70:78
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/3olu8Q_i8CFQVQXIr17uGkLLcHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.140.0/22
141.11.156.0/22
Signature Algorithm: sha256WithRSAEncryption
18:b5:de:4c:a5:9e:9f:9e:27:8a:72:5d:84:a8:fd:d3:a9:80:
68:3e:ea:83:db:77:ff:35:61:f2:0e:7e:94:93:da:c4:6a:86:
2e:b5:ee:e2:42:ae:9b:db:e8:2e:65:a2:ee:1d:fd:3c:f9:76:
82:99:f3:e3:55:69:5e:f2:e3:ae:2b:99:c1:5d:c6:14:8d:11:
65:4c:99:0a:c0:75:45:31:de:a5:54:be:13:f0:af:85:dc:3f:
7f:d2:4a:b2:7f:f3:0a:90:0e:d5:c0:fc:07:45:93:bb:44:55:
ba:45:15:9d:6a:39:a0:d6:c9:c2:00:0c:c1:19:8c:b0:97:40:
f5:c9:6f:72:78:67:16:f6:74:86:65:a4:b7:cd:59:8e:1a:1c:
80:b3:1d:04:b0:76:76:2e:16:de:74:ba:ae:42:9c:f1:88:cf:
b1:10:8e:92:62:b1:cb:e6:86:90:34:f1:cd:ad:6c:8d:65:01:
30:cd:29:24:98:03:80:1c:cd:a4:f3:df:3d:1a:a8:76:28:86:
fc:53:82:08:64:df:8b:33:36:14:e5:80:bb:61:83:82:cb:30:
f4:41:fd:e2:c0:e2:6d:6b:a7:b5:6e:d7:37:76:74:9b:ae:10:
24:ef:d4:05:8a:2e:f7:d7:4a:42:83:91:4b:f4:c9:8b:b6:9d:
8f:c9:00:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:33 2025 by rpki-client