Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Db0Goyy2T0IW-j1S5y75JB82C6I.roa
File: Db0Goyy2T0IW-j1S5y75JB82C6I.roa (raw, json)
Hash identifier: o7RiTT8OndGvzE+XWS6sAYwxm7aG3nE9qk3x/CbaTXw=
Subject key identifier: 0D:BD:06:A3:2C:B6:4F:42:16:FA:3D:52:E7:2E:F9:24:1F:36:0B:A2
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0182EF06493DDABC7CC090521F8DB1C8F4CA
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Db0Goyy2T0IW-j1S5y75JB82C6I.roa
Signing time: Tue 30 Aug 2022 13:52:22 +0000
ROA not before: Tue 30 Aug 2022 13:52:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 141.11.168.0/23 maxlen: 24
141.11.88.0/23 maxlen: 24
141.11.96.0/24 maxlen: 24
141.11.102.0/24 maxlen: 24
141.11.5.0/24 maxlen: 24
141.11.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ef:06:49:3d:da:bc:7c:c0:90:52:1f:8d:b1:c8:f4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Aug 30 13:52:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0dbd06a32cb64f4216fa3d52e72ef9241f360ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3a:f1:08:b9:e4:2b:b1:77:23:7f:28:71:c1:
3c:aa:17:0e:ce:7c:d4:0b:e6:94:59:68:c3:c7:0e:
c5:9f:34:c9:62:dc:f5:de:c0:f7:d3:61:04:c6:71:
1b:47:78:64:74:9b:11:1d:18:06:3b:b8:19:72:d8:
aa:a3:0f:b1:c1:cf:03:b3:92:e4:2f:6a:eb:b1:34:
8d:43:d5:83:f7:30:ce:36:70:a4:42:6c:2f:b8:b9:
64:3d:f5:d3:54:7d:5e:d2:d0:f9:4b:ec:87:a8:7e:
c6:40:d1:bf:e4:95:38:47:71:06:10:93:75:30:de:
2b:fd:ca:f4:76:95:00:b0:bc:76:d9:1b:df:36:5b:
71:68:cb:03:26:5a:52:bf:81:b4:e2:79:43:bb:c1:
8c:8d:66:d7:ac:49:86:c3:78:26:94:46:23:8f:30:
37:87:60:0a:5d:76:89:e4:c4:2f:61:7e:7e:c3:9d:
fb:1d:b2:cf:ab:f5:63:03:95:ab:24:8f:25:ca:12:
db:ff:88:aa:1e:6f:88:22:21:bf:64:a0:24:11:22:
c6:a9:29:0f:2a:5a:8a:1a:ef:73:bf:b5:31:bf:28:
db:99:a6:a4:99:d1:a2:25:97:b0:97:36:5e:14:c9:
cc:fb:94:79:39:8b:99:3a:f1:12:f1:9e:cf:8e:16:
25:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BD:06:A3:2C:B6:4F:42:16:FA:3D:52:E7:2E:F9:24:1F:36:0B:A2
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Db0Goyy2T0IW-j1S5y75JB82C6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
141.11.26.0/24
141.11.88.0/23
141.11.96.0/24
141.11.102.0/24
141.11.168.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:93:a0:50:c1:36:b6:fe:4f:3b:6f:b7:55:b4:c3:eb:2f:77:
b4:ed:bd:98:06:4a:75:b6:d8:93:75:ae:28:40:be:d5:5c:f9:
d6:17:6d:10:d8:5c:0a:3b:8f:c2:fa:a4:9d:a7:4f:9e:3f:6f:
85:15:38:99:6c:ff:1d:fa:d5:dd:7e:11:2c:a6:45:16:32:0c:
8a:83:76:6a:55:34:02:c2:3f:f3:80:dd:a9:dc:ee:76:5d:dc:
01:c1:91:7b:a1:fc:a7:33:0d:2c:60:07:d4:50:d1:08:40:6f:
db:db:11:d7:37:a3:d3:5a:b7:e0:a9:0b:d7:a9:53:d9:4e:b2:
9e:0d:82:19:19:56:d3:eb:3c:fc:26:ce:15:fc:80:a9:a0:82:
fa:21:32:61:d3:51:b8:97:08:de:91:92:c1:80:29:b9:64:b8:
02:86:d8:37:92:61:12:b2:57:d2:af:d3:22:e1:44:fa:de:a1:
b6:14:55:fd:e6:6d:28:54:9a:3e:5e:63:b1:24:66:7d:93:ed:
3a:36:18:72:c3:60:fc:2a:bd:7a:6c:5f:22:c9:67:20:8d:b6:
a4:79:da:ec:fa:f7:b6:fc:eb:ba:23:40:b2:59:91:af:da:38:
f5:5c:8e:19:a4:67:18:76:72:10:81:2e:44:e1:5d:49:e9:43:
f6:02:b5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:47:24 2025 by rpki-client