Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/8TZ7bb0kYUqHNgQV9f8_0Dbbes0.roa
File: 8TZ7bb0kYUqHNgQV9f8_0Dbbes0.roa (raw, json)
Hash identifier: DTT9+bsftRGsf3fLXSIMT8oGiWIvKY/Dl0b4kFUToXo=
Subject key identifier: F1:36:7B:6D:BD:24:61:4A:87:36:04:15:F5:FF:3F:D0:36:DB:7A:CD
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04B588A8
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/8TZ7bb0kYUqHNgQV9f8_0Dbbes0.roa
Signing time: Tue 17 May 2022 13:56:29 +0000
ROA not before: Tue 17 May 2022 13:56:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 141.11.168.0/23 maxlen: 24
141.11.178.0/24 maxlen: 24
141.11.186.0/24 maxlen: 24
141.11.88.0/23 maxlen: 24
141.11.102.0/24 maxlen: 24
141.11.5.0/24 maxlen: 24
141.11.121.0/24 maxlen: 24
141.11.228.0/23 maxlen: 24
141.11.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79005864 (0x4b588a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 17 13:56:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1367b6dbd24614a87360415f5ff3fd036db7acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:49:02:3a:de:35:38:bf:a4:63:32:ff:83:
29:e9:d7:be:48:8f:4e:7b:09:e3:2d:21:52:7f:69:
20:5f:c4:e9:93:af:38:65:09:5f:57:b7:49:c2:89:
ad:bc:c4:21:c2:01:67:a9:6f:dc:12:a4:38:52:a9:
3c:53:6d:db:3d:e7:05:14:7b:73:81:48:e0:15:8a:
9b:3e:ed:71:41:4b:1f:65:bf:53:c9:94:be:83:1c:
0b:d7:f5:9d:60:17:d6:0c:ce:8e:21:3b:ea:fc:88:
d3:51:5f:e7:f2:4d:ba:b6:b8:56:5b:64:d7:7b:65:
8a:82:b7:9e:5b:6f:02:8a:1b:84:d6:a5:61:28:75:
31:4e:20:b7:d6:6d:f6:eb:46:4c:e6:61:26:bb:e0:
a1:f0:08:c3:89:33:87:4f:79:c6:c4:44:31:41:c5:
01:c2:b2:07:d5:a9:6a:33:9b:51:65:9e:4f:91:ac:
da:3f:2d:91:57:00:61:ec:9a:85:3e:11:fa:99:c5:
73:8f:95:ae:37:2c:9f:ca:3a:ba:e7:df:26:c5:97:
d7:4c:10:c6:ef:6a:d9:10:70:d4:cf:92:79:26:6c:
1b:4f:18:12:85:78:9a:e3:d9:8e:a2:21:ec:9a:f0:
9e:69:e0:c4:66:62:85:c4:aa:a6:f6:cd:fc:12:fb:
7f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:36:7B:6D:BD:24:61:4A:87:36:04:15:F5:FF:3F:D0:36:DB:7A:CD
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/8TZ7bb0kYUqHNgQV9f8_0Dbbes0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
141.11.26.0/24
141.11.88.0/23
141.11.102.0/24
141.11.121.0/24
141.11.168.0/23
141.11.178.0/24
141.11.186.0/24
141.11.228.0/23
Signature Algorithm: sha256WithRSAEncryption
74:a7:0d:dd:15:ed:d3:ef:6e:9c:01:70:89:b9:0c:b3:19:ee:
fb:68:e4:94:e5:1a:ea:b5:bb:1e:41:28:37:e8:e4:3c:6f:d1:
30:10:ca:6a:ef:08:16:39:ef:92:41:70:a4:f3:e1:24:66:fb:
3e:f8:d4:ed:b6:11:1e:4d:32:9a:ac:48:e1:2e:7b:26:fe:63:
87:08:63:e4:47:a7:fd:9d:34:19:b2:ac:91:99:b5:1c:d1:6c:
69:4a:1d:66:3a:73:a2:c6:7b:2e:fb:0d:f8:31:09:f6:77:b5:
f7:5a:ec:18:f2:97:9c:34:e5:8f:ef:1a:f7:76:15:fb:77:45:
94:b7:7a:8f:2d:87:f4:3d:98:de:c8:0c:3a:4b:28:97:95:e9:
e5:0b:7a:80:64:22:cf:69:42:ac:d4:76:f7:52:35:83:9c:06:
45:77:2f:b0:44:c0:17:4a:78:34:3d:77:f8:68:2f:f0:87:df:
20:3f:52:b9:20:b7:7a:5e:23:20:85:f2:d0:bb:a1:e2:ee:f7:
9e:e6:d3:bc:7d:7d:11:0a:e0:af:03:96:70:64:83:08:bb:ae:
00:c0:3b:e6:08:50:31:86:ca:0e:3b:dc:60:b4:9b:45:54:1d:
c9:c5:f4:e4:4c:a9:5b:5f:a4:0a:19:8f:2f:7e:40:d6:34:f0:
e0:87:a2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:03 2025 by rpki-client