Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/7XCjNBeEfkGMxS93wAEtwzvBpkQ.roa
File: 7XCjNBeEfkGMxS93wAEtwzvBpkQ.roa (raw, json)
Hash identifier: kyrsQryzCRbCGv0O0ibXZjpFVFTipyLdH+YQHq0TY3Y=
Subject key identifier: ED:70:A3:34:17:84:7E:41:8C:C5:2F:77:C0:01:2D:C3:3B:C1:A6:44
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0292DD7F
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/7XCjNBeEfkGMxS93wAEtwzvBpkQ.roa
Signing time: Sat 08 Jan 2022 18:40:34 +0000
ROA not before: Sat 08 Jan 2022 18:40:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 141.11.80.0/20 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.6.0/24 maxlen: 24
141.11.12.0/22 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.20.0/24 maxlen: 24
141.11.19.0/24 maxlen: 24
141.11.192.0/19 maxlen: 24
141.11.98.0/23 maxlen: 24
141.11.104.0/22 maxlen: 24
141.11.112.0/20 maxlen: 24
141.11.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43179391 (0x292dd7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jan 8 18:40:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed70a33417847e418cc52f77c0012dc33bc1a644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:49:35:0d:2c:4a:6c:7e:f2:ca:97:41:05:74:
60:f5:66:7e:26:0a:61:06:30:8c:7a:36:6c:16:e2:
21:6d:16:62:64:d5:09:1e:b6:76:2c:54:df:25:e5:
38:0f:63:61:d8:db:f0:20:82:b7:dc:62:db:2b:6b:
ae:66:40:32:05:a0:a4:4b:66:4e:28:34:fe:b8:4d:
04:15:20:f6:62:39:16:39:f3:bf:3f:95:17:56:84:
22:fb:d8:de:9b:1f:c4:54:97:8d:51:84:ce:da:2a:
f9:01:56:9e:99:dc:86:c9:e0:cc:d1:48:d6:aa:75:
b9:5b:aa:c2:67:f9:ba:76:83:56:27:87:14:76:ac:
5f:48:e7:fa:e0:d3:53:5b:aa:1d:3f:2e:07:57:de:
be:e2:d2:dd:f6:97:01:7f:38:69:09:e4:2c:e2:2d:
58:66:fd:25:db:8e:f1:28:69:1f:9d:fb:75:2b:d4:
8c:63:73:17:e5:a8:fd:bb:7d:99:f2:32:4d:2f:bf:
33:15:ec:54:42:43:72:69:28:fd:df:3b:7f:17:a2:
c3:2b:df:06:cf:f4:b9:29:5d:13:33:5e:52:45:8d:
db:4f:93:7c:09:e2:98:ea:08:d6:ed:63:20:18:db:
d5:74:b8:c3:5e:96:b1:2e:ce:e8:dc:34:8f:1d:f0:
d2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:70:A3:34:17:84:7E:41:8C:C5:2F:77:C0:01:2D:C3:3B:C1:A6:44
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/7XCjNBeEfkGMxS93wAEtwzvBpkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
141.11.6.0/24
141.11.12.0/22
141.11.17.0-141.11.20.255
141.11.80.0/20
141.11.98.0/23
141.11.104.0/22
141.11.112.0-141.11.159.255
141.11.192.0/19
Signature Algorithm: sha256WithRSAEncryption
5b:56:91:dc:45:d5:b9:8b:aa:77:d5:f8:23:0f:14:f9:e6:61:
8d:0b:34:19:9e:60:67:3c:6a:aa:8a:81:6a:32:13:d0:82:04:
27:95:d0:0b:72:f4:4e:41:29:73:47:b8:cd:26:5f:55:8a:47:
d3:d6:84:c4:c3:8b:cb:5b:8f:f6:69:a2:fc:dd:d4:ce:ca:ce:
42:68:8e:4d:d3:d3:c8:c9:26:7b:1f:16:a8:10:c0:ba:47:d6:
f1:2c:fe:20:ea:93:bd:17:97:15:e6:df:eb:c1:81:88:c9:35:
4d:49:31:97:a8:05:c8:fc:8e:92:b5:e3:c9:66:85:96:51:2b:
ad:b6:51:8d:e6:82:b1:52:de:56:ac:fa:c2:0f:eb:41:d7:41:
a6:4b:77:15:f8:d7:cf:21:53:24:6b:f5:2b:82:13:d5:92:a2:
27:2e:35:b7:86:6f:11:9c:32:85:0b:29:5f:6b:87:6e:b4:3b:
67:8a:28:8d:29:88:ae:e3:6a:21:1f:b4:fe:86:e7:3e:f0:3b:
16:39:58:0f:1a:cd:83:c9:04:b4:95:35:70:3f:a9:5e:e5:25:
ef:65:a1:ec:4f:88:78:da:26:10:c3:ac:0a:e7:1e:f9:66:52:
b9:68:e2:53:d8:2f:35:0c:a0:0c:65:3a:0e:6a:ae:aa:d8:8a:
0a:17:b7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:15:40 2025 by rpki-client