Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Bf8vaiGp6W_zVEGwiHSPjlhCXeU.roa
File: Bf8vaiGp6W_zVEGwiHSPjlhCXeU.roa (raw, json)
Hash identifier: 9WG4nL8GuRDoJA4+M+4y6SLEkqm8yBzNRX9zln+EcDs=
Subject key identifier: 05:FF:2F:6A:21:A9:E9:6F:F3:54:41:B0:88:74:8F:8E:58:42:5D:E5
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 045DD12D
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Bf8vaiGp6W_zVEGwiHSPjlhCXeU.roa
Signing time: Wed 04 May 2022 12:15:30 +0000
ROA not before: Wed 04 May 2022 12:15:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 141.11.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73257261 (0x45dd12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 4 12:15:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05ff2f6a21a9e96ff35441b088748f8e58425de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:18:15:91:6c:6c:63:d2:a7:c1:0d:9a:ef:64:
a3:7b:21:51:4f:9d:1e:e4:95:5e:e1:cf:9c:ae:af:
1c:f6:d3:6e:a2:32:7d:6d:0d:36:4f:b8:39:55:b3:
1d:69:af:24:f4:27:29:05:b6:12:5a:c8:4c:e9:c3:
01:0b:03:df:2a:62:f8:ab:cc:a0:c9:01:0f:04:64:
ab:e4:4e:a4:a1:3a:45:50:5b:4a:8e:9d:f6:c0:c8:
66:d6:33:94:96:94:dd:32:f4:88:c2:fa:0c:d2:46:
dc:41:6f:c8:f5:8e:65:b1:d1:11:cf:ae:16:d3:31:
73:52:5f:eb:1b:64:24:27:e6:4c:a0:22:d6:5d:c7:
b3:65:78:2c:94:09:b5:6c:68:b9:f8:83:09:42:5f:
5f:96:e8:36:90:6d:56:59:a1:ec:d6:17:6d:97:f8:
30:79:97:b6:b5:f8:14:fb:2e:09:26:dd:bb:b4:61:
23:1f:ea:75:cc:88:53:bb:ef:f3:59:40:e4:59:48:
15:1d:dc:13:67:93:ea:4c:ad:1a:9b:34:0f:0e:03:
ca:7e:28:ce:e0:70:ea:14:97:d2:2f:ee:6e:76:fb:
ce:c1:d2:e8:ec:d3:c4:92:9e:4b:a4:0d:f8:e9:37:
4c:46:22:da:f4:ea:11:34:59:7a:07:ed:40:3c:01:
f4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FF:2F:6A:21:A9:E9:6F:F3:54:41:B0:88:74:8F:8E:58:42:5D:E5
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Bf8vaiGp6W_zVEGwiHSPjlhCXeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.32.0/22
Signature Algorithm: sha256WithRSAEncryption
95:06:e5:29:88:47:99:98:67:53:b1:30:0f:03:30:fe:50:7f:
40:93:26:ec:16:b0:77:6f:94:bb:87:7a:33:00:87:59:b1:b2:
3f:a3:25:73:5f:86:fd:71:cb:f5:4a:a2:a2:1d:43:88:54:8e:
6d:7c:43:57:da:ab:0b:4f:ce:58:08:99:0c:9d:7a:4e:2f:1e:
84:9f:af:ac:90:5d:43:aa:b6:2d:4a:e3:28:e2:11:83:b4:b7:
e8:13:54:c2:55:4d:32:13:d2:b6:95:54:57:5f:dd:3f:07:db:
ae:d8:13:72:68:94:a3:2b:e0:4d:5a:f0:17:0e:cd:aa:22:a8:
2a:f3:ea:3a:c7:4a:13:d2:ff:71:6f:6e:0d:9f:b7:e9:e7:15:
51:ee:88:94:d9:51:ac:1e:fa:b0:77:89:c0:54:59:f1:06:29:
90:98:bc:43:44:a0:60:07:6b:03:d9:27:98:63:ee:1a:76:18:
3e:03:a5:f8:f7:52:4b:52:aa:f8:63:bc:a4:06:88:6d:92:c3:
be:03:01:05:34:8e:79:a4:32:03:40:85:94:b6:4f:cf:71:d2:
8b:d3:d2:45:55:07:ee:60:63:55:35:3d:06:19:32:16:8d:b8:
9d:fc:f7:9b:4f:51:02:23:c5:e7:3c:03:b7:b8:a1:b5:cb:52:
29:f0:c7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:00 2025 by rpki-client