Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Ag_8K88Xh9ESDLdFroj7JEemmSk.roa
File: Ag_8K88Xh9ESDLdFroj7JEemmSk.roa (raw, json)
Hash identifier: oHLOjQk1Iyfa7dH3Pg6Fb+NewUbr5qiDFRzGq5kmou4=
Subject key identifier: 02:0F:FC:2B:CF:17:87:D1:12:0C:B7:45:AE:88:FB:24:47:A6:99:29
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0356AD20
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Ag_8K88Xh9ESDLdFroj7JEemmSk.roa
Signing time: Fri 04 Mar 2022 11:29:55 +0000
ROA not before: Fri 04 Mar 2022 11:29:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 141.11.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56012064 (0x356ad20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Mar 4 11:29:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=020ffc2bcf1787d1120cb745ae88fb2447a69929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:65:d1:77:c2:06:e6:e0:cd:e3:c9:0d:b5:6e:
d4:b2:a9:0b:39:a9:74:ff:d7:3d:31:5c:cb:38:87:
8b:ad:83:0f:e9:f8:20:0f:bc:25:06:61:0e:8b:d5:
b2:d7:78:0e:c8:69:fe:86:80:af:a0:a7:a9:d4:f8:
91:76:8d:98:0e:25:60:b3:64:1a:fe:5a:a7:83:4f:
d5:cc:34:d6:4d:c0:1e:56:17:81:e9:c8:09:69:21:
f7:11:29:45:fa:7c:bf:e8:24:52:83:3e:e9:6e:bd:
86:c6:66:f6:43:ec:dd:c8:33:d4:10:42:4f:6d:cd:
8a:c3:90:f5:ca:16:98:39:4f:65:ce:48:d4:50:1f:
d3:73:6f:93:48:77:3a:22:e1:c7:d6:21:66:dc:fa:
4b:03:3a:99:90:f6:cc:bf:d0:78:99:c2:99:5c:7d:
1a:45:3c:d8:ad:d2:da:9c:67:11:6c:80:c7:6a:fe:
9f:f1:53:fc:4e:6a:e2:5a:35:8d:2f:ba:1e:4b:b9:
1b:5a:3f:79:36:45:53:98:1b:15:80:2e:db:b9:50:
5a:67:48:0b:46:72:b9:45:e0:b9:6e:c8:a5:af:fb:
e8:05:75:f8:c2:f5:91:c2:73:74:99:2f:c2:7f:76:
5e:b9:4e:52:45:7b:9a:9b:5f:66:bf:ea:95:4e:e2:
39:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0F:FC:2B:CF:17:87:D1:12:0C:B7:45:AE:88:FB:24:47:A6:99:29
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Ag_8K88Xh9ESDLdFroj7JEemmSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.70.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:37:af:4e:01:c6:8b:54:b6:8e:08:46:c0:68:ae:d5:bd:26:
57:28:8b:1f:cc:77:14:5a:0b:fd:d3:3f:e5:27:48:93:2f:f0:
00:c0:a7:4d:ca:3f:8e:56:5b:94:a9:05:e0:79:6e:a4:47:30:
72:4f:dd:2f:9e:66:65:7f:65:08:ab:78:44:39:16:d2:2a:8c:
68:b7:09:c5:71:e3:34:b7:4e:7b:ee:53:dd:ff:99:2a:75:03:
ab:84:6b:40:1b:79:d6:f3:f8:ab:e2:27:28:10:10:9b:a6:56:
79:90:39:1a:3c:de:10:a4:6e:fb:04:76:15:db:aa:a3:eb:75:
14:36:0f:94:25:6d:6c:f4:8d:27:c4:3b:79:04:c0:e2:38:08:
02:db:66:79:f9:ad:e5:f3:67:27:5a:6c:86:b6:d6:15:1f:a2:
28:06:41:e1:59:ef:cf:e8:aa:21:ff:58:32:c3:83:c5:3f:97:
3f:af:0e:6e:6a:5b:03:0e:d7:75:80:9e:07:62:76:7a:3c:9f:
15:b6:8f:74:d7:5e:ab:02:db:d0:73:89:01:cd:8e:20:54:9f:
97:46:2b:b5:18:3f:46:22:72:73:a6:9a:14:45:ce:b8:8d:a3:
5a:e2:4f:26:e7:17:e8:0c:0d:f2:2d:2d:ea:48:f1:d2:36:76:
74:62:23:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:24:13 2025 by rpki-client