Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/87nWcpxq_gsEViAguBJAh13sRZQ.roa
File: 87nWcpxq_gsEViAguBJAh13sRZQ.roa (raw, json)
Hash identifier: 8XkEKxHDBksLNu5eP65ueWW72MmzPq2IRyH/2gy9Rlk=
Subject key identifier: F3:B9:D6:72:9C:6A:FE:0B:04:56:20:20:B8:12:40:87:5D:EC:45:94
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0280B67A
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/87nWcpxq_gsEViAguBJAh13sRZQ.roa
Signing time: Mon 03 Jan 2022 14:20:43 +0000
ROA not before: Mon 03 Jan 2022 14:20:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46573
IP address blocks: 141.11.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41989754 (0x280b67a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jan 3 14:20:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3b9d6729c6afe0b04562020b81240875dec4594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b7:63:c1:17:9e:57:c0:98:53:cd:48:f5:ab:
2a:74:9f:a9:d5:05:42:4d:a2:58:5c:e4:74:7d:b3:
11:ee:37:c0:2f:e2:92:6e:4a:04:bd:84:24:96:16:
1f:bd:34:11:87:16:b8:9f:9e:7f:16:24:3f:21:f1:
6b:d9:5b:b5:9e:8e:6e:97:dc:4c:24:af:33:29:c9:
a4:2b:41:1c:ca:a4:35:8b:fa:d6:9e:ef:7a:51:79:
e0:27:cd:22:32:56:80:f1:92:aa:8a:b4:84:00:29:
b7:b3:ee:20:76:cc:8d:54:ee:68:20:b0:e9:36:41:
7d:8f:2e:6a:29:5b:97:d6:49:da:0c:16:05:e6:9e:
4b:60:f8:72:7f:ea:2a:e8:32:a9:4b:4f:f9:b8:73:
8f:ad:de:33:d3:69:d1:c2:c5:82:e6:aa:a4:25:88:
ab:77:30:ab:29:dd:8d:45:57:43:c3:de:91:61:6f:
e7:b4:5b:42:8f:5c:2c:b3:5d:24:59:d0:64:ac:02:
87:58:a9:a1:97:c3:1b:39:f9:f5:9f:01:cd:0e:9b:
7b:3c:c9:a5:60:fb:dc:40:a7:e1:93:a3:7d:11:33:
01:30:d7:2b:e1:59:e4:e9:57:78:b3:ea:94:5d:8f:
a8:28:cf:30:57:9d:e7:64:a8:43:7d:34:23:64:9a:
78:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B9:D6:72:9C:6A:FE:0B:04:56:20:20:B8:12:40:87:5D:EC:45:94
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/87nWcpxq_gsEViAguBJAh13sRZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.29.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c4:3e:72:5b:6a:2c:c2:06:92:6d:a2:f2:06:f7:a9:84:dc:
a9:55:42:c0:89:fd:9f:c4:76:e0:13:52:77:97:db:01:64:b9:
d5:0f:a1:c3:53:a2:ba:1d:34:4f:f0:05:ca:9d:62:16:ca:a4:
c0:c1:fe:6a:26:14:31:2e:39:12:28:ee:02:bf:8f:d5:99:01:
09:55:68:14:2c:7e:b2:92:16:e4:ad:49:49:53:c4:c2:3f:1e:
25:92:47:e2:85:2b:09:6f:f7:04:e2:ae:56:21:36:96:e6:c8:
8c:4c:c1:15:a8:c4:4a:49:00:dd:69:90:0c:cb:b2:78:28:8e:
67:63:61:a1:80:08:91:c9:ba:25:57:14:c2:8e:22:7f:40:7c:
22:1b:5d:90:bc:22:d0:1b:c7:f7:70:64:46:16:4b:72:21:b6:
e9:2b:9e:a9:dc:fb:89:85:c1:96:0f:c9:17:26:7d:2a:be:ed:
76:23:1b:61:74:3d:62:d4:1c:73:2f:c1:24:16:64:b6:dd:29:
58:ed:08:b4:33:63:d1:9c:ae:fc:81:7f:56:2b:80:93:b9:79:
8d:bd:42:1f:e7:8c:fd:97:7b:df:3b:f8:50:14:ff:84:bc:5c:
1b:b3:9b:8e:b4:b3:bb:4e:91:81:02:97:12:9b:ec:52:5d:90:
4b:e8:1d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:44 2025 by rpki-client