Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Br0IIG_IGHaH0JcD4AGwYrzE3GA.roa
File: Br0IIG_IGHaH0JcD4AGwYrzE3GA.roa (raw, json)
Hash identifier: /7Ql0ni1gkG2DfP6VXVwlI+yXDW5zjI6XGqD8uAjH34=
Subject key identifier: 06:BD:08:20:6F:C8:18:76:87:D0:97:03:E0:01:B0:62:BC:C4:DC:60
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0181F2A8FE10F6B7A606D3FBE57F5CD8BA1E
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Br0IIG_IGHaH0JcD4AGwYrzE3GA.roa
Signing time: Tue 12 Jul 2022 13:46:10 +0000
ROA not before: Tue 12 Jul 2022 13:46:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.11.44.0/22 maxlen: 24
141.11.40.0/22 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.42.0/24 maxlen: 24
141.11.41.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.0.0/24 maxlen: 24
141.11.10.0/23 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.22.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.37.0/24 maxlen: 24
141.11.33.0/24 maxlen: 24
141.11.35.0/24 maxlen: 24
141.11.32.0/24 maxlen: 24
141.11.152.0/22 maxlen: 24
141.11.160.0/24 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.92.0/22 maxlen: 24
141.11.99.0/24 maxlen: 24
141.11.232.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f2:a8:fe:10:f6:b7:a6:06:d3:fb:e5:7f:5c:d8:ba:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 12 13:46:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06bd08206fc8187687d09703e001b062bcc4dc60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:ae:f1:dc:f8:80:60:b4:b4:16:af:62:49:
59:38:49:fa:29:94:f0:02:d1:db:c8:d4:ad:ec:03:
48:f3:05:d2:6b:96:3d:e8:df:a6:98:c0:b7:d6:32:
1e:0f:07:57:7f:8d:65:4e:3b:a9:6b:c0:ac:6e:be:
7d:48:aa:60:ab:cc:6c:07:5e:b1:1e:e1:67:9e:85:
44:9e:29:8d:91:ea:36:96:a0:c0:47:1f:6b:b8:ac:
7a:5b:63:b9:12:e2:02:9a:ff:ed:83:2f:55:9d:95:
2c:4c:2a:04:dc:7d:ff:b5:e2:fa:bd:37:66:17:d2:
76:58:bb:9c:c5:d7:e7:af:5c:07:65:1b:ac:3b:ec:
d7:b4:b9:34:8e:dc:70:e9:91:e2:7a:55:38:24:c5:
23:6f:0b:45:3e:f9:24:20:d2:32:c5:36:1f:b3:74:
33:c1:9d:19:58:d3:d8:36:10:67:44:2f:46:bc:49:
1a:d0:2d:e7:b1:8f:48:00:9a:4a:11:26:dd:4d:ff:
f1:1a:50:2c:e5:99:5d:f2:4e:da:08:f5:db:ae:ff:
29:2c:6a:06:e6:93:22:ae:0e:3c:bf:6c:f2:8b:70:
2b:b5:ff:0d:5f:b7:b2:6b:3a:e9:36:66:4e:a7:8b:
cd:22:ec:d2:45:11:ca:65:73:60:71:ff:88:81:b0:
92:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BD:08:20:6F:C8:18:76:87:D0:97:03:E0:01:B0:62:BC:C4:DC:60
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Br0IIG_IGHaH0JcD4AGwYrzE3GA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0-141.11.2.255
141.11.10.0/23
141.11.17.0-141.11.18.255
141.11.21.0-141.11.22.255
141.11.25.0/24
141.11.28.0/24
141.11.31.0-141.11.33.255
141.11.35.0/24
141.11.37.0/24
141.11.39.0-141.11.47.255
141.11.92.0/22
141.11.99.0/24
141.11.152.0/22
141.11.160.0/24
141.11.176.0/24
141.11.182.0/23
141.11.232.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:b1:01:cb:01:18:b3:b7:d2:fb:06:77:d8:50:b9:41:d7:e0:
38:53:59:0b:08:8d:09:25:82:2e:a8:10:c4:ee:77:d2:65:32:
ca:87:98:e1:e7:cb:45:75:9a:98:cd:1c:d5:5d:77:ef:dd:08:
e0:26:79:bb:ac:1e:78:1b:18:d3:84:de:16:99:17:4c:a2:e4:
d7:cf:98:3c:d5:be:da:62:6d:30:ca:8c:be:c6:7f:15:f5:78:
04:57:09:7b:c5:93:31:de:ea:f2:6f:d5:c6:58:37:e0:8a:b0:
97:e1:be:17:6b:d0:d1:97:1d:ef:e1:8a:76:2f:5c:4d:58:68:
e6:3d:95:66:91:8a:63:07:d8:5a:a9:c4:7d:7f:77:c5:b1:37:
bb:51:23:d8:1e:9c:6c:62:2c:ab:af:8a:db:98:63:4a:cf:2e:
44:0e:e8:69:3a:47:a3:73:8d:1e:c7:13:44:f7:60:6d:ec:39:
50:ef:99:08:b0:eb:99:65:59:3c:f3:2b:f8:23:a9:30:0f:94:
25:ba:1d:d5:a0:3f:a5:39:b0:7b:19:63:06:af:5c:1c:ad:91:
ee:ce:61:e8:a2:d8:d2:66:b2:8c:c3:cc:cc:aa:a2:04:00:ab:
6d:ad:32:f8:f8:05:67:59:ce:44:e1:f8:04:35:ba:8d:f4:f9:
bd:23:08:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:24 2025 by rpki-client