Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/7jXTlna1QB_P8N53pko3kCJAL2c.roa
File: 7jXTlna1QB_P8N53pko3kCJAL2c.roa (raw, json)
Hash identifier: J0xWiI9M65MG2T/EB8wiSSUhNxh2FfSdnpH7AC63U2I=
Subject key identifier: EE:35:D3:96:76:B5:40:1F:CF:F0:DE:77:A6:4A:37:90:22:40:2F:67
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 042BEFFA
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/7jXTlna1QB_P8N53pko3kCJAL2c.roa
Signing time: Tue 26 Apr 2022 11:48:57 +0000
ROA not before: Tue 26 Apr 2022 11:48:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 141.11.168.0/23 maxlen: 24
141.11.178.0/24 maxlen: 24
141.11.5.0/24 maxlen: 24
141.11.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69988346 (0x42beffa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 26 11:48:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee35d39676b5401fcff0de77a64a379022402f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:81:4d:95:1c:00:91:56:b5:89:a0:04:9e:9b:
71:0e:67:cc:13:3d:1e:e4:47:e5:2e:c2:ac:37:e1:
f4:70:c8:3e:33:e2:c9:65:31:11:33:62:9c:85:51:
9d:fe:d3:3b:52:29:7c:5f:8d:f8:4a:af:90:c2:bc:
1f:a5:44:e9:96:c3:2d:14:ce:46:98:57:a8:14:a5:
74:3c:7b:26:7a:d4:22:1a:55:ff:08:74:8c:37:65:
61:3b:eb:f2:a5:33:9c:4c:b7:32:6a:4c:0c:4e:bd:
1c:50:6f:49:da:63:c7:16:56:a1:81:a4:23:42:f6:
a5:35:da:f6:58:db:c6:db:0a:60:88:97:12:53:83:
1e:bb:94:14:92:44:91:a2:ae:cd:5e:0c:4a:36:3a:
34:6b:9f:10:0a:cf:e8:f7:6a:08:69:d1:63:fc:84:
b0:81:51:17:b1:8a:af:7b:68:30:26:f9:e5:1d:33:
98:2c:80:8d:c7:7a:eb:e5:af:ee:40:95:c7:bd:74:
34:20:3f:65:0c:51:be:ce:52:f1:50:29:0b:a2:30:
3e:5b:96:e4:9b:5c:8d:56:d8:72:eb:bb:a5:ce:87:
ad:af:59:f7:cb:38:f5:64:c7:2d:e2:74:f7:e4:9e:
92:33:e3:0a:ee:d2:98:2c:e2:8f:7a:2e:62:6d:1b:
27:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:35:D3:96:76:B5:40:1F:CF:F0:DE:77:A6:4A:37:90:22:40:2F:67
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/7jXTlna1QB_P8N53pko3kCJAL2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
141.11.26.0/24
141.11.168.0/23
141.11.178.0/24
Signature Algorithm: sha256WithRSAEncryption
29:64:7b:60:3c:95:16:95:6b:44:e6:fb:cb:8f:fc:8d:fd:d6:
03:d5:4a:98:46:27:4d:a7:89:bb:75:97:28:cc:ef:42:04:f0:
d0:3f:78:1c:3a:99:42:61:51:34:77:3b:aa:83:4a:d1:12:bf:
31:f4:d3:3e:6f:47:1c:ba:38:dc:50:3c:3e:bc:b3:29:ac:6d:
22:9e:0a:5b:35:e3:7e:3d:fa:df:9c:30:b0:33:77:b9:8e:45:
e1:db:91:96:d6:41:54:84:d5:04:40:6f:29:5d:f7:7d:ff:1f:
64:0e:e1:bc:41:92:29:64:c7:82:12:f6:69:c6:42:6e:f8:f0:
11:65:51:ad:9e:84:99:92:3b:41:a5:98:d5:a4:18:1d:50:93:
44:d1:2b:e0:1f:e5:22:0b:57:1a:ab:6b:3e:1f:ef:70:22:48:
66:19:9c:37:e0:5f:29:6d:b6:6a:b4:7f:8a:f9:bf:65:11:de:
fa:c1:8a:c8:a4:ab:34:59:6b:67:0b:33:e1:dd:c2:b2:65:f0:
82:31:f3:6b:a4:d3:0e:94:66:84:90:fb:03:f9:6d:df:a3:62:
ad:12:7b:e8:5e:6f:dd:ca:c4:e2:7b:bd:26:ef:f9:e0:f6:1c:
fb:13:ad:52:08:0a:29:7c:f8:17:77:1c:4a:4a:a1:dd:c2:da:
78:4d:0d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:32 2025 by rpki-client