Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/AQ_fF2REiDjfdcz6B1eHcGb6gLI.roa
File: AQ_fF2REiDjfdcz6B1eHcGb6gLI.roa (raw, json)
Hash identifier: qW26brnVLZIFZ1BXxvaFwKEJMLESo4e0q8kQ8evntMs=
Subject key identifier: 01:0F:DF:17:64:44:88:38:DF:75:CC:FA:07:57:87:70:66:FA:80:B2
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0182A130062AD07FDAB5576A9CC9501EE2E7
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/AQ_fF2REiDjfdcz6B1eHcGb6gLI.roa
Signing time: Mon 15 Aug 2022 11:07:35 +0000
ROA not before: Mon 15 Aug 2022 11:07:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.11.44.0/22 maxlen: 24
141.11.40.0/22 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.42.0/24 maxlen: 24
141.11.41.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.0.0/24 maxlen: 24
141.11.10.0/23 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.22.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.37.0/24 maxlen: 24
141.11.33.0/24 maxlen: 24
141.11.35.0/24 maxlen: 24
141.11.32.0/24 maxlen: 24
141.11.160.0/24 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a1:30:06:2a:d0:7f:da:b5:57:6a:9c:c9:50:1e:e2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Aug 15 11:07:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=010fdf1764448838df75ccfa0757877066fa80b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ee:8f:8d:e6:f1:71:e8:9b:59:89:8d:23:7a:
4b:86:d8:c6:5e:13:0f:74:77:e5:51:90:52:f5:7b:
da:bb:2d:b9:24:9d:65:16:dd:69:51:9a:3c:8c:c4:
8e:3c:b9:ac:1c:ec:37:51:d1:59:70:83:1a:8b:69:
43:13:0e:2a:e3:71:47:29:a2:8b:97:d8:9e:c4:18:
4c:1c:5e:26:1d:e2:ca:c1:3a:74:69:97:5e:7a:84:
71:6a:20:5c:0d:93:6f:02:d6:d0:bd:b2:9b:db:57:
12:98:b2:0a:20:86:a1:89:53:5a:79:62:57:48:50:
c0:32:f9:fb:72:fc:49:5e:3f:b5:e7:d7:8e:67:66:
e9:31:ac:8c:79:9d:9b:8b:63:58:fd:47:d4:0c:bf:
f8:ac:4c:75:32:f7:a7:cb:8d:94:8d:99:d9:3e:44:
4f:4e:56:58:3d:79:a5:8a:3b:b0:e4:16:6c:0d:7a:
36:ea:6e:09:ce:61:ec:7e:f9:1c:9a:c0:c4:56:15:
ed:97:c4:6f:03:d3:b7:d3:2e:57:e3:dc:7f:15:11:
a4:f3:38:b2:c4:e1:44:6f:6b:d0:2e:f8:71:40:86:
f8:1f:12:8b:f9:7d:23:79:ca:42:e3:52:ab:35:89:
e2:c3:ca:03:92:58:2d:28:e1:62:28:71:36:b5:5f:
52:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0F:DF:17:64:44:88:38:DF:75:CC:FA:07:57:87:70:66:FA:80:B2
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/AQ_fF2REiDjfdcz6B1eHcGb6gLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0-141.11.2.255
141.11.10.0/23
141.11.17.0-141.11.18.255
141.11.21.0-141.11.22.255
141.11.25.0/24
141.11.28.0/24
141.11.31.0-141.11.33.255
141.11.35.0/24
141.11.37.0/24
141.11.39.0-141.11.47.255
141.11.99.0/24
141.11.160.0/24
141.11.176.0/24
141.11.182.0/23
Signature Algorithm: sha256WithRSAEncryption
76:bf:b0:24:68:5b:9b:6d:66:07:61:63:56:2e:c7:4b:70:57:
8b:7e:ed:fe:0b:98:d3:b9:24:35:ac:59:44:5e:fc:f8:af:0c:
30:c8:2e:52:ca:82:e6:08:e9:69:21:5e:c6:17:24:da:ab:b5:
f5:c7:1c:44:c9:82:82:65:25:58:95:36:b5:07:91:3d:9c:f2:
08:99:86:98:5c:00:20:9a:7d:21:3d:19:76:2f:d6:8c:a6:70:
7a:a9:49:c1:75:33:f5:5d:d1:72:a5:69:55:42:ed:f2:24:2e:
a4:94:fa:c8:43:c4:ce:83:72:23:26:12:92:12:2c:c8:f2:c9:
fa:29:a7:09:69:e8:67:62:6e:5f:bb:05:a5:51:7d:3b:b9:f9:
10:25:28:81:50:45:76:20:33:66:2d:3c:97:55:9c:30:9b:48:
eb:05:79:6d:5b:d3:ca:9b:38:77:fc:36:cc:27:d6:91:d2:10:
05:43:5e:11:48:64:e3:54:35:56:40:b6:5a:6f:b2:af:93:4f:
82:e0:76:3d:ab:12:79:20:eb:c8:a3:40:72:4f:5e:44:b6:b2:
43:86:1f:b2:b0:5a:68:38:f2:91:60:bb:71:62:4e:73:83:e8:
cc:1b:44:2a:72:17:87:ad:b8:de:2c:51:08:fe:fa:e3:f9:a4:
60:f3:84:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:22 2025 by rpki-client