Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/9qkE3_sLx80x_VUg4pB5pA1PoKM.roa
File: 9qkE3_sLx80x_VUg4pB5pA1PoKM.roa (raw, json)
Hash identifier: trVW3w+LzRU8G3dyJdrj7NgZqaQJc0wrPNDOIYTTGHA=
Subject key identifier: F6:A9:04:DF:FB:0B:C7:CD:31:FD:55:20:E2:90:79:A4:0D:4F:A0:A3
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 043878B4
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/9qkE3_sLx80x_VUg4pB5pA1PoKM.roa
Signing time: Wed 27 Apr 2022 15:09:44 +0000
ROA not before: Wed 27 Apr 2022 15:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 141.11.168.0/23 maxlen: 24
141.11.178.0/24 maxlen: 24
141.11.5.0/24 maxlen: 24
141.11.121.0/24 maxlen: 24
141.11.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70809780 (0x43878b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 27 15:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6a904dffb0bc7cd31fd5520e29079a40d4fa0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:0d:5b:b0:05:10:69:8b:0a:b4:f5:7c:5d:
c8:2d:06:84:cf:8d:17:9b:c6:e1:06:63:f4:83:85:
e5:5e:96:15:94:31:85:97:18:15:8c:02:5d:77:e7:
8c:e1:f2:ba:62:dc:43:40:16:dd:de:44:c3:96:67:
6b:9e:9e:95:f7:6a:b4:3b:e5:a7:4b:1c:84:9a:c9:
12:75:95:03:28:ca:56:1d:62:f0:4b:b0:31:cb:1c:
d4:e3:5b:a1:69:02:17:60:15:e9:29:c9:fc:7f:00:
c7:48:e6:7d:2a:3a:1e:bc:8e:96:ea:8b:24:57:dc:
1b:0b:ae:bb:e5:fc:3e:c9:0a:f2:f2:6a:6b:bb:c1:
39:8c:f0:4d:65:4b:1a:ec:18:8d:12:19:92:88:b1:
f1:06:73:71:ac:24:e9:26:fd:c6:90:f5:e6:c8:ad:
60:6a:59:29:7c:a7:43:2a:4c:75:9f:d2:df:45:f9:
e0:09:c8:a7:67:20:8e:1f:34:8b:92:45:19:56:aa:
4d:30:97:63:a3:8d:8f:6c:e5:06:c9:91:ff:06:ab:
8d:33:6d:47:2e:fb:58:52:d3:26:1e:eb:a2:20:9f:
f2:f0:17:d5:2c:2f:56:7e:0c:86:c3:87:2e:51:00:
ba:54:33:8d:ee:ef:48:63:c0:79:ab:5d:89:47:18:
ab:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A9:04:DF:FB:0B:C7:CD:31:FD:55:20:E2:90:79:A4:0D:4F:A0:A3
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/9qkE3_sLx80x_VUg4pB5pA1PoKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
141.11.26.0/24
141.11.121.0/24
141.11.168.0/23
141.11.178.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:d5:b2:48:67:a4:34:c7:36:3b:3d:c3:4d:b2:69:66:66:bc:
82:5e:8c:3e:f7:0d:02:57:18:20:7e:98:f7:d9:a8:f8:a9:a6:
3b:25:b1:13:59:ec:b6:fa:ed:38:6d:e7:22:b8:88:1b:b4:37:
55:ea:f8:68:a8:e3:b4:d0:3c:7d:f9:04:31:b1:e6:42:74:ea:
37:79:05:d7:f5:3e:61:11:71:7d:eb:37:8e:4d:b1:63:79:72:
74:b4:3f:00:6e:ef:87:c8:f4:aa:00:ea:6a:da:90:22:32:ee:
4e:22:1f:ed:ce:66:a5:5d:cc:f9:3a:c9:8b:53:21:d0:bc:31:
ee:1b:4a:ab:bd:d3:f6:0a:7f:55:da:6a:0d:6a:09:f5:1a:0b:
80:ea:20:24:ed:e8:9a:9b:ee:59:07:5e:f3:f8:88:e8:fc:51:
f7:f2:4c:d1:1a:a4:7f:59:c8:92:da:88:0c:e6:f7:ac:26:5e:
e5:32:a7:7f:89:4b:b4:44:05:f1:b3:7c:0c:57:53:9a:db:61:
df:31:df:08:1a:ba:79:1e:9e:39:f8:c0:53:86:59:55:c1:b6:
ef:6f:54:c5:50:53:2f:65:6a:66:39:55:90:38:1c:a1:7f:b4:
4e:94:64:32:c6:76:e8:e1:a9:07:e7:5b:18:58:10:ea:99:17:
ea:eb:82:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:36:05 2025 by rpki-client