Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/EF2EBh5onwTOIOx0sLUHYzlZ7n0.roa
File: EF2EBh5onwTOIOx0sLUHYzlZ7n0.roa (raw, json)
Hash identifier: sPqHrEpFIB4pLP4CnnwAudvTtduSTQq+hWUXb0qMfQg=
Subject key identifier: 10:5D:84:06:1E:68:9F:04:CE:20:EC:74:B0:B5:07:63:39:59:EE:7D
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0182F38C6D482F5A768CF72623233A7CC6E4
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/EF2EBh5onwTOIOx0sLUHYzlZ7n0.roa
Signing time: Wed 31 Aug 2022 10:57:22 +0000
ROA not before: Wed 31 Aug 2022 10:57:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210122
IP address blocks: 141.11.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f3:8c:6d:48:2f:5a:76:8c:f7:26:23:23:3a:7c:c6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Aug 31 10:57:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=105d84061e689f04ce20ec74b0b507633959ee7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2c:c1:92:84:29:b9:87:f6:d0:d8:d7:26:57:
f2:6c:16:cc:6f:0e:1f:cd:eb:d2:2e:a0:09:1b:8c:
b8:da:e8:61:8a:ab:22:33:41:6b:06:60:c2:d1:52:
95:03:32:63:f0:2b:22:df:34:06:31:d4:8e:23:cb:
0b:d4:53:82:f7:28:8e:f1:c9:e6:b4:53:09:b0:4f:
52:44:37:c1:e6:36:66:fd:62:f0:76:81:fb:3f:d8:
c3:e3:57:f8:a6:5d:bb:91:45:51:57:87:7d:d6:53:
66:06:c0:f6:91:46:7a:36:45:35:13:1f:0b:91:72:
99:2e:28:11:65:0b:f3:3a:52:bd:7a:51:80:50:00:
7b:14:26:1d:2c:d4:6e:11:b5:03:db:3a:5b:7d:f2:
a0:38:e5:8c:0c:b5:2b:ed:b1:19:be:3c:87:c2:0c:
38:f4:05:36:ef:d2:ff:24:8e:de:9c:46:7f:45:45:
4b:e4:e7:22:1a:91:83:c3:0f:31:86:23:33:1b:45:
a7:17:6f:0b:51:9c:03:b0:6f:22:e9:21:0d:7d:99:
fe:83:9a:ab:7b:2e:c9:9b:15:ad:ba:fc:17:00:32:
6b:bb:17:11:37:a0:1e:82:2f:5a:ff:2c:7a:e3:69:
cc:0f:eb:c1:92:73:47:e4:0a:c1:33:16:b1:59:7b:
5d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5D:84:06:1E:68:9F:04:CE:20:EC:74:B0:B5:07:63:39:59:EE:7D
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/EF2EBh5onwTOIOx0sLUHYzlZ7n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.124.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:0e:66:06:f5:19:eb:5b:9f:be:79:63:7c:4a:0f:b4:34:88:
12:28:6d:1c:39:0a:d0:b3:0a:52:d8:10:80:0b:c6:ca:06:23:
56:1f:8c:33:b5:26:f5:48:a4:cd:9d:3c:de:a0:06:64:5e:b8:
c9:50:4d:54:1e:21:a2:73:e9:41:08:f0:28:59:0b:5b:af:9e:
f3:cf:5f:06:38:a2:95:cc:6d:f6:09:45:4b:0f:63:83:bc:35:
1d:06:45:07:9d:bf:43:89:4a:2b:1f:4e:f4:59:ca:c0:53:36:
ce:e7:dd:d9:56:b0:dd:f4:a5:13:b1:3f:fa:49:4f:58:65:29:
02:8b:a6:f9:1f:9e:c4:ce:58:c1:bd:c4:a1:fd:54:ac:24:5c:
d2:4f:b5:f3:0a:57:23:11:40:38:cf:f6:21:c9:ec:1b:b0:62:
e3:b7:7d:6a:b4:90:63:d3:82:a3:0f:1e:bd:c5:97:b2:02:5e:
9a:e8:e4:94:27:27:ba:19:24:44:a2:51:57:0e:e3:13:de:44:
7c:67:82:8c:42:23:c7:e8:71:70:95:63:f8:13:03:1a:71:de:
5e:83:cb:cd:8d:49:84:4d:17:f0:c5:73:e4:d5:b6:75:77:1b:
7f:77:73:8f:13:b4:08:ad:63:a7:a9:2f:a2:eb:c3:b2:8b:6c:
91:98:c1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:58 2025 by rpki-client