Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/9ARJp91_Iycn-ALXaR9uUnW6SEQ.roa
File: 9ARJp91_Iycn-ALXaR9uUnW6SEQ.roa (raw, json)
Hash identifier: +Wz54ZWGPA2ASgvlcU5hk7JZsrUw2DPSMfG5wPwtgTk=
Subject key identifier: F4:04:49:A7:DD:7F:23:27:27:F8:02:D7:69:1F:6E:52:75:BA:48:44
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0182D5447156BB7C41CD135E94563771F36E
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/9ARJp91_Iycn-ALXaR9uUnW6SEQ.roa
Signing time: Thu 25 Aug 2022 13:50:08 +0000
ROA not before: Thu 25 Aug 2022 13:50:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209737
IP address blocks: 141.11.204.0/22 maxlen: 24
141.11.216.0/22 maxlen: 24
141.11.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d5:44:71:56:bb:7c:41:cd:13:5e:94:56:37:71:f3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Aug 25 13:50:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f40449a7dd7f232727f802d7691f6e5275ba4844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:94:a9:42:34:c2:54:19:96:a7:73:b2:51:8b:
54:f9:45:0d:dd:f5:a2:50:e9:97:ab:ca:b7:97:90:
f3:10:0c:55:dc:93:a9:4f:03:74:81:33:87:e0:7b:
c9:ca:ef:35:ae:06:4e:0c:00:4f:35:74:1f:5d:09:
cb:43:f0:8b:3e:02:7a:79:48:7f:a8:4d:e4:a6:3e:
b5:4c:c8:7b:cd:f8:95:a8:f2:13:f1:cf:6f:d9:3c:
22:0d:8c:27:75:e1:79:3b:e6:9e:b2:fc:7b:a2:66:
b4:72:22:12:2e:2c:3a:a2:ce:be:f9:01:84:25:b1:
3d:59:c4:af:c4:c4:66:d6:32:09:66:14:51:ce:b0:
33:bb:5c:89:34:29:6e:f7:69:3f:f9:91:ee:a3:7f:
d2:8a:19:51:e1:eb:72:cb:9e:b6:63:85:73:e7:d5:
6d:0f:17:47:fc:b4:14:33:cb:b9:57:7a:3c:c7:e9:
ed:ab:3d:74:a3:2a:39:32:fc:46:12:6c:84:c3:20:
11:4a:20:40:49:04:8f:62:47:33:60:bb:ea:a3:ee:
29:61:da:cc:d3:9b:5d:d5:58:12:f0:90:f0:63:5d:
54:7e:77:55:ee:0f:90:50:37:da:f5:f7:1a:84:a3:
67:81:db:b7:7c:72:1a:1a:41:6d:a2:42:da:03:0b:
16:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:04:49:A7:DD:7F:23:27:27:F8:02:D7:69:1F:6E:52:75:BA:48:44
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/9ARJp91_Iycn-ALXaR9uUnW6SEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.204.0/22
141.11.216.0/21
Signature Algorithm: sha256WithRSAEncryption
42:f9:17:34:44:30:c9:54:3e:7b:1d:08:f2:43:4f:58:a9:87:
8a:70:56:94:e7:cb:86:c2:61:e7:fb:a9:e6:da:d7:1d:14:51:
c3:84:71:02:f9:47:f8:d6:ac:c1:b8:df:5d:19:0b:1a:70:f3:
d0:67:30:80:77:68:92:b6:ca:95:1d:3b:78:1e:fc:ee:50:ab:
0f:90:60:17:43:aa:d2:bc:2c:c4:4a:bc:89:b8:09:18:5d:22:
2a:7c:5b:6d:d1:9f:37:55:0c:4b:32:c0:a2:bb:b3:90:c4:f6:
8d:a7:d0:20:3e:9b:e0:6d:b5:ce:81:76:4d:fd:60:ed:af:8d:
b0:de:48:0d:e6:99:96:1b:f1:36:ca:ac:a6:6b:37:07:fe:68:
06:fb:09:30:2b:62:da:d1:72:86:62:2c:ad:92:9a:2b:9f:be:
b3:43:6c:e3:3d:1c:bd:8d:15:ae:34:61:e8:dc:b4:c2:71:de:
11:b4:ab:d1:ab:fc:11:dd:d3:f3:c2:ad:64:76:6f:82:3d:7f:
a2:97:99:85:f4:09:1d:c6:63:87:b1:3d:c8:cd:b6:ec:a1:82:
80:fb:4b:13:4c:39:3a:f2:78:48:20:3f:d0:03:40:6f:df:0f:
fa:94:49:8b:4d:aa:8e:1b:cc:43:40:ed:75:81:24:69:71:c5:
0a:40:47:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:55 2025 by rpki-client