Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/A2fN8ddVtToRWLEJqYzUNXcBp6Q.roa
File: A2fN8ddVtToRWLEJqYzUNXcBp6Q.roa (raw, json)
Hash identifier: PFSF1Glupmk8loD/ADz3cJcIPIrmDL5UHcShdmgqxYM=
Subject key identifier: 03:67:CD:F1:D7:55:B5:3A:11:58:B1:09:A9:8C:D4:35:77:01:A7:A4
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 027A8656
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/A2fN8ddVtToRWLEJqYzUNXcBp6Q.roa
Signing time: Sat 01 Jan 2022 08:03:29 +0000
ROA not before: Sat 01 Jan 2022 08:03:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399746
IP address blocks: 141.11.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41584214 (0x27a8656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jan 1 08:03:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0367cdf1d755b53a1158b109a98cd4357701a7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:68:35:8c:af:31:9c:e7:3d:b5:22:75:f0:
24:df:42:59:90:7a:29:d3:95:4c:1e:96:ae:a2:62:
3c:63:a0:93:aa:5a:91:e5:b5:1d:ae:03:b5:4b:53:
cd:8a:19:cf:a3:1e:70:cc:01:fd:a6:1b:14:66:e4:
d2:3c:65:4f:bb:1f:0f:fc:62:47:61:26:63:12:7b:
fb:ad:ef:9c:33:60:cb:77:af:1b:45:38:04:42:fa:
a9:55:e7:b5:06:f1:d9:8c:09:30:5b:58:fc:4f:15:
6b:cf:db:1e:3e:22:8e:cc:bb:c6:b7:18:1d:44:f9:
17:9f:3e:41:07:9b:d2:5e:e3:d0:34:0e:3d:2e:50:
a2:0f:7c:1a:ff:12:6e:92:b0:d6:11:3b:46:d3:be:
1f:e8:62:28:8c:75:0c:cc:de:1d:00:56:bb:3d:6d:
33:94:87:83:90:9b:56:8b:c1:dc:df:34:7c:77:76:
c1:51:39:71:b2:ab:a7:b0:37:29:24:e4:1f:4d:ca:
4f:64:b4:a1:a0:d9:60:78:22:47:52:e0:d1:ee:32:
50:69:94:d2:fa:60:89:20:50:08:f4:b7:4f:65:5f:
06:16:74:17:7e:91:ef:3d:3f:4c:b9:0a:e7:78:cb:
af:de:6a:ef:15:33:cd:fb:44:cb:55:4e:f2:fc:d9:
50:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:67:CD:F1:D7:55:B5:3A:11:58:B1:09:A9:8C:D4:35:77:01:A7:A4
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/A2fN8ddVtToRWLEJqYzUNXcBp6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.6.0/24
Signature Algorithm: sha256WithRSAEncryption
70:7d:c6:a2:46:93:a4:62:76:83:07:57:9c:a8:59:ea:0a:f4:
85:28:88:b1:d4:c7:d1:b0:29:a1:27:13:b7:8a:4b:3d:ef:7d:
01:32:88:5d:82:83:a9:37:3b:61:24:7f:eb:85:55:ab:0c:ee:
3d:3e:df:fb:05:9b:2e:c3:8c:b8:98:eb:fe:bb:09:2c:da:aa:
23:42:d3:93:a3:8f:02:f8:68:c2:13:d6:8d:dd:b0:3c:66:a2:
b9:85:c1:cf:4b:66:c6:97:44:04:d6:66:30:b2:ee:1c:80:93:
95:54:00:d3:2b:3b:b6:90:90:27:30:5f:00:5c:a0:64:44:3d:
41:f9:c2:5a:bd:4e:31:f7:bf:03:97:61:93:7a:77:48:68:0b:
33:4a:75:6f:31:15:06:6e:18:f0:f7:da:92:37:4c:d2:ec:33:
98:5e:e3:43:47:44:bf:24:d8:65:fa:94:65:8e:45:c2:0e:91:
72:9a:ae:ea:87:c6:c9:35:83:87:79:e1:21:2f:d6:1c:74:74:
77:18:04:02:0c:ce:00:8c:8d:47:d1:a0:87:0b:89:a2:ce:fa:
16:03:f0:66:23:c9:d2:4a:ed:6e:d5:f9:c5:8e:d8:02:ab:da:
de:58:fb:cb:e7:5e:07:55:62:da:09:9d:53:c0:06:8b:99:a1:
44:0a:33:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:37 2025 by rpki-client