Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/CGOC3v7yJ3GT8wHt2XgyVxh3qoI.roa
File: CGOC3v7yJ3GT8wHt2XgyVxh3qoI.roa (raw, json)
Hash identifier: MuTQW92yJRHsTdfzmkjQjubN9i4FMsixEpTTP0PN9Ss=
Subject key identifier: 08:63:82:DE:FE:F2:27:71:93:F3:01:ED:D9:78:32:57:18:77:AA:82
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0181D8F29844C93E58F85C5ABF55A4B229FD
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/CGOC3v7yJ3GT8wHt2XgyVxh3qoI.roa
Signing time: Thu 07 Jul 2022 13:56:26 +0000
ROA not before: Thu 07 Jul 2022 13:56:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59432
IP address blocks: 141.11.224.0/22 maxlen: 24
141.11.230.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:f2:98:44:c9:3e:58:f8:5c:5a:bf:55:a4:b2:29:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 7 13:56:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=086382defef2277193f301edd97832571877aa82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1c:bc:2e:3d:14:98:40:e5:c1:20:a4:b1:cc:
ee:0d:97:8b:92:fd:65:42:d6:fe:e8:b2:75:92:25:
94:6e:22:c0:a2:b8:92:23:2d:dc:fd:fb:71:17:7d:
e9:b0:63:4c:29:3e:c6:c0:48:10:68:7f:24:c6:58:
0a:21:32:6d:9d:6f:11:84:6f:7b:e1:66:0b:e8:45:
dd:c5:4d:12:78:43:ef:e4:5a:6c:07:6c:a1:19:da:
08:91:31:ea:65:72:d0:57:05:98:4d:f1:6b:b8:3d:
0c:01:cb:46:4b:af:35:ad:ef:ef:36:d1:00:57:5e:
a3:fb:70:a6:03:56:0e:c7:85:83:8a:0a:14:96:9a:
89:a5:bc:be:1b:98:61:ca:7d:32:0d:a6:f6:39:2a:
19:30:f4:e7:c5:41:8d:aa:b7:9e:19:b5:81:2e:53:
c0:d8:01:c5:f4:7a:be:45:10:18:73:f4:0b:7a:5a:
47:28:0b:84:a6:a3:7f:34:7c:34:af:5e:d5:f1:6c:
9a:59:ea:6a:1c:cd:17:71:df:58:db:3d:99:14:d9:
de:c0:72:b1:69:7c:0e:30:55:e1:93:77:40:b4:e5:
ff:da:f3:49:0a:58:a4:ba:d8:1f:3d:18:df:fb:77:
13:24:a3:3f:bc:c6:72:66:c1:97:c6:7c:e0:c2:07:
4d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:63:82:DE:FE:F2:27:71:93:F3:01:ED:D9:78:32:57:18:77:AA:82
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/CGOC3v7yJ3GT8wHt2XgyVxh3qoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.224.0/22
141.11.230.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:a5:3b:44:60:14:15:30:05:1f:4a:21:f9:99:f6:89:4d:82:
9c:6c:a7:a4:20:0e:ab:86:69:a2:68:f5:12:f7:59:8d:d0:06:
58:09:15:29:0b:40:04:aa:05:e0:22:e7:e8:a1:1d:6c:28:e2:
a1:a0:77:a3:6e:56:ca:9e:c6:c1:0a:48:fe:38:03:42:87:c1:
4c:05:2d:9d:3e:c1:9e:6c:e9:b1:6d:68:1a:f4:b2:6e:60:7e:
04:ef:0e:dc:a5:5d:0e:83:b8:aa:b1:94:ae:ae:51:2f:2e:42:
5f:75:37:d1:3d:db:88:30:3e:ea:b0:f4:40:7c:ff:c5:b7:04:
5b:f9:ea:fe:77:fa:e2:c3:ca:87:8d:78:13:f4:b6:b6:c0:02:
72:2d:d4:43:4f:05:32:7b:dc:7b:c5:94:70:c6:cd:bb:7a:e3:
06:c0:75:b7:02:de:2a:12:e1:13:cb:a7:5c:fc:6e:9d:82:67:
54:55:e7:db:e3:4e:53:40:6a:a4:1c:16:93:57:af:4b:68:68:
19:21:6b:08:dd:8d:a2:51:17:3b:6e:26:60:b5:4d:7f:bd:a0:
8b:e6:bd:c7:8c:e4:05:af:95:37:37:55:c2:41:f4:41:a5:d3:
c0:99:82:23:98:f1:72:62:fa:24:3c:ea:e0:4c:38:a4:c4:ad:
27:69:eb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:11 2025 by rpki-client