Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ESU7DgX1bG0I7C1WKb8MpDEZciU.roa
File: ESU7DgX1bG0I7C1WKb8MpDEZciU.roa (raw, json)
Hash identifier: 3I0LfbHkOfk0PldnpvAOBz8eM1wDyn9lsa6GZwSoao0=
Subject key identifier: 11:25:3B:0E:05:F5:6C:6D:08:EC:2D:56:29:BF:0C:A4:31:19:72:25
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01831934544F88FC23E07431927309702AF2
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ESU7DgX1bG0I7C1WKb8MpDEZciU.roa
Signing time: Wed 07 Sep 2022 18:26:43 +0000
ROA not before: Wed 07 Sep 2022 18:26:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 141.11.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:19:34:54:4f:88:fc:23:e0:74:31:92:73:09:70:2a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 7 18:26:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11253b0e05f56c6d08ec2d5629bf0ca431197225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e2:25:56:46:d3:46:52:ed:c1:30:b7:17:51:
85:b3:d0:10:82:1a:e8:a5:fc:16:f4:2d:d5:ae:94:
7a:50:78:74:98:a2:c3:ce:d1:f0:62:42:f7:24:8d:
b2:04:d3:57:dd:e8:f9:a9:06:56:1b:6d:40:d8:6e:
fa:75:42:7c:f0:49:f6:de:c9:00:0e:86:c3:9d:89:
5c:2a:20:60:33:f9:47:8a:36:53:de:b8:b5:57:c1:
0b:aa:41:66:fd:9a:7a:39:b3:8d:a5:80:07:a5:0c:
7a:32:1a:4c:33:69:7d:97:fc:b2:dc:e2:04:57:c1:
85:85:36:de:bb:70:e2:57:4c:35:8c:4b:ee:24:55:
70:06:c1:15:37:aa:94:40:77:63:a9:bd:0b:84:27:
0b:b9:60:c1:bb:8d:dd:ce:38:1b:4d:d6:62:21:6e:
ff:cc:37:a3:98:05:02:6b:7d:69:ac:5d:12:ae:4f:
a3:d7:0d:9b:e7:0c:cb:dc:67:74:ea:ac:8b:fa:42:
6a:0d:78:da:db:28:fb:a4:04:74:b0:a1:0d:af:4e:
f7:b1:c2:08:cd:9d:cb:d0:e2:47:52:d3:ca:f8:87:
70:0a:34:bd:ce:d1:41:48:fb:65:cb:c2:73:26:12:
f3:53:62:c6:6d:4a:59:3f:af:23:bb:6f:df:24:09:
78:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:25:3B:0E:05:F5:6C:6D:08:EC:2D:56:29:BF:0C:A4:31:19:72:25
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ESU7DgX1bG0I7C1WKb8MpDEZciU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.178.0/24
Signature Algorithm: sha256WithRSAEncryption
35:2b:81:1f:f3:bd:d7:be:5e:7d:16:33:c1:62:15:5d:f4:20:
86:20:e0:57:f9:65:f8:98:97:a0:9d:d3:a3:96:48:e1:8a:2c:
cb:eb:5e:3c:15:15:e2:11:6b:87:89:5c:de:81:e5:04:c1:e2:
83:9b:ba:d7:83:e9:89:5e:af:88:9c:1d:71:25:4f:c4:b8:12:
b0:df:03:f5:8e:8b:da:69:80:66:de:05:b4:27:d9:60:04:dc:
fd:c8:c1:9a:d2:c2:e8:1c:6c:71:58:f9:55:0a:57:c6:7f:b9:
b2:30:f4:2e:71:ca:5b:85:0f:f9:59:70:3a:e9:7e:a3:c9:ea:
75:68:e1:ce:e9:6b:6c:f1:49:fa:e2:f9:78:8e:5a:f8:e5:c6:
c8:44:42:6b:49:8c:61:ca:3c:f8:dd:e7:40:78:ea:a8:77:f1:
47:3f:95:d4:fe:68:2f:cd:81:e8:22:94:d5:54:99:09:10:3f:
15:c9:53:71:57:e2:4d:cb:2d:70:6f:02:81:47:f2:06:05:e8:
6e:4d:27:43:65:26:0c:6a:52:ff:8f:26:d8:bf:a7:63:1b:92:
d7:83:fd:8d:0f:78:c2:6e:19:d2:e8:c3:88:96:ba:30:d7:a2:
17:17:6a:ea:84:1d:13:27:41:fc:aa:45:e1:bc:ca:af:bb:6c:
32:bb:a8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:02 2025 by rpki-client