Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/6uVMye6NnEHwzdQFPls6aUu6ADY.roa
File: 6uVMye6NnEHwzdQFPls6aUu6ADY.roa (raw, json)
Hash identifier: ObFOoaA2LH1tjGao84yubM7teH9Gn3s2bSvfbh0djlQ=
Subject key identifier: EA:E5:4C:C9:EE:8D:9C:41:F0:CD:D4:05:3E:5B:3A:69:4B:BA:00:36
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0184517FF0B7ED230D2D021E19BB18D9DE71
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/6uVMye6NnEHwzdQFPls6aUu6ADY.roa
Signing time: Mon 07 Nov 2022 09:50:49 +0000
ROA not before: Mon 07 Nov 2022 09:50:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 141.11.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:51:7f:f0:b7:ed:23:0d:2d:02:1e:19:bb:18:d9:de:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 7 09:50:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eae54cc9ee8d9c41f0cdd4053e5b3a694bba0036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f3:a4:46:22:f9:81:6c:3f:10:1c:bd:db:5d:
82:2c:63:3c:46:63:37:06:e5:32:83:fd:72:96:53:
dd:d3:0a:15:7e:b8:0b:30:59:76:d2:83:d4:cc:e3:
0a:ab:5d:39:91:10:13:50:a1:73:9c:e5:0d:3a:e0:
a5:9e:54:93:a1:f5:9e:aa:e2:4a:07:08:a1:e6:5b:
63:a4:4c:6a:b6:e9:0b:88:a4:4e:03:97:74:2d:4d:
c3:5c:a0:59:0f:cc:26:17:ac:c8:91:37:10:b7:51:
4e:a3:b5:87:ec:50:7e:83:a3:7b:37:1a:76:1c:08:
92:2e:af:3a:e1:36:84:2e:08:02:e1:69:5d:c6:ba:
04:b5:9a:32:35:b3:f8:6d:f7:1b:fe:8b:35:24:be:
d2:f8:79:b4:3a:41:b3:fc:1a:6b:00:14:ec:a3:61:
3c:13:bb:2a:63:8c:17:8e:14:19:1b:e2:53:dd:e3:
8b:76:c9:69:e8:c8:38:4e:2c:f1:3d:0e:ed:98:46:
79:ca:e6:0b:87:cf:b1:cd:4e:34:aa:31:3d:fb:3f:
0f:e4:89:86:69:6a:ba:29:77:4f:11:1d:e4:ca:d4:
ca:9e:7d:fc:cf:9c:d6:ff:eb:70:65:44:bd:f0:83:
93:61:8c:34:8d:03:39:33:c1:e8:96:74:37:03:d4:
c8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E5:4C:C9:EE:8D:9C:41:F0:CD:D4:05:3E:5B:3A:69:4B:BA:00:36
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/6uVMye6NnEHwzdQFPls6aUu6ADY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.70.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d9:86:03:f0:04:c5:d7:a8:d2:f1:fb:48:80:df:ca:fb:36:
0a:1f:c2:e1:99:c0:f7:f9:f8:10:21:2a:60:30:b9:8f:3e:0b:
ee:c1:dd:00:fa:92:29:69:79:c1:14:f2:4f:f0:18:4f:d8:14:
0d:0d:e0:92:eb:e1:6a:ea:a4:64:f8:fa:07:c3:84:50:11:dc:
ba:db:44:66:9a:24:7b:86:01:7c:6a:ac:5b:8a:4a:bd:c4:94:
46:52:20:82:64:ff:fc:a5:f7:2e:b2:b4:fa:63:de:b8:ff:c0:
a0:cc:ab:d3:95:69:24:e4:f6:f6:f7:1b:ad:0d:34:ab:77:7a:
10:d0:5a:3c:3a:43:69:64:ae:ba:b7:6b:18:c3:55:a4:34:be:
67:b9:cd:e9:db:a0:ae:1c:df:29:67:a2:38:81:c1:03:3e:3b:
76:79:5c:dc:31:67:cf:1c:8a:40:65:d2:bf:47:c6:9a:ed:46:
7a:72:1d:61:15:b5:df:28:f6:4b:5b:2d:bf:ba:c1:72:32:00:
4e:7d:73:91:6d:ca:7c:32:9f:78:b8:ee:a2:70:b2:5d:0a:23:
66:6a:c6:4c:8b:d0:60:60:ec:be:20:3e:f3:84:99:aa:16:7b:
bc:ae:d5:69:98:ff:db:df:7d:28:5d:18:37:e9:ea:71:b1:81:
15:ad:32:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:31 2025 by rpki-client