Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/FSgyJSnKRMbJIj05aFi2gFpxxKU.roa
File: FSgyJSnKRMbJIj05aFi2gFpxxKU.roa (raw, json)
Hash identifier: YVQFR+YHa8rm6x9ZpzyFdwG8mQHcJqr7zsNvEwz0QJE=
Subject key identifier: 15:28:32:25:29:CA:44:C6:C9:22:3D:39:68:58:B6:80:5A:71:C4:A5
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0184D25203F61032146088D0E6382F9BBB89
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/FSgyJSnKRMbJIj05aFi2gFpxxKU.roa
Signing time: Fri 02 Dec 2022 10:11:41 +0000
ROA not before: Fri 02 Dec 2022 10:11:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211112
IP address blocks: 141.11.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:52:03:f6:10:32:14:60:88:d0:e6:38:2f:9b:bb:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Dec 2 10:11:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1528322529ca44c6c9223d396858b6805a71c4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b5:c0:4d:d8:b4:5c:94:74:1c:6f:09:ef:ac:
ce:ef:0a:ed:08:e1:7d:25:34:77:f0:76:fd:ea:17:
fd:42:24:ff:40:e3:fb:ea:ec:8d:4c:0e:67:85:06:
c9:b9:77:98:36:6c:fb:03:a9:0f:5f:b4:94:94:14:
44:fa:65:e4:ad:bf:5d:ad:e5:e4:0f:4f:9e:6a:09:
f7:f5:e9:e5:80:0b:76:2e:4a:19:59:da:41:81:3d:
43:9a:4b:ae:83:b0:77:55:72:cd:48:30:a1:22:b2:
99:c6:8b:bc:bf:03:ca:72:74:f6:cb:24:f6:48:d1:
f1:2a:2f:0e:f2:28:e5:0f:67:88:d6:a0:69:89:97:
a0:ff:18:4d:59:3b:5d:f0:0e:d4:31:b8:43:ed:23:
af:11:2b:26:c5:f2:9c:ad:e6:dc:69:43:c6:60:fd:
40:06:ca:2b:5f:29:b4:3d:2f:a3:52:09:2f:9c:f9:
96:72:7a:10:54:5d:94:96:47:45:bc:ff:d8:28:af:
f8:b3:93:ea:b2:92:77:a8:5a:ea:59:ee:18:45:56:
52:5a:44:e9:07:19:c4:ba:07:4e:95:f6:28:f1:01:
78:e1:84:7b:79:1e:70:62:75:58:a1:4f:32:7f:51:
15:d1:f6:03:dd:b8:e4:d8:f2:f9:bf:0b:a0:66:e4:
5f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:28:32:25:29:CA:44:C6:C9:22:3D:39:68:58:B6:80:5A:71:C4:A5
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/FSgyJSnKRMbJIj05aFi2gFpxxKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.103.0/24
Signature Algorithm: sha256WithRSAEncryption
32:95:50:bb:49:76:fd:20:56:9b:2a:f5:7c:da:3e:f6:6e:10:
1a:f7:22:a9:6a:e6:38:f1:e8:2d:69:2c:88:ce:d2:53:6f:34:
42:7e:8e:5a:8c:93:e9:b0:92:17:65:9d:27:b5:97:f7:86:db:
32:31:9b:a3:79:42:8a:55:32:82:7f:74:16:d8:f8:9b:b7:a6:
70:66:a8:6c:93:b8:75:a4:58:30:47:29:a3:53:75:31:87:ed:
e3:4d:35:b3:3d:aa:16:d9:57:2f:b0:43:9b:f8:c3:21:b4:f9:
12:20:00:e8:7c:01:85:a1:86:8b:d9:f9:0c:79:ee:c2:2b:9f:
26:46:ff:de:fb:7d:20:f5:2d:8a:30:7c:17:b8:57:23:52:40:
77:21:08:28:75:66:59:03:9e:35:a1:8d:fa:20:ec:b6:cc:a2:
a1:b3:d7:a4:a9:fb:a5:8f:df:01:79:91:71:fe:ee:dd:a8:ca:
b6:75:3a:a7:88:c9:c8:03:ac:5e:04:27:81:28:27:54:8e:d7:
da:23:4b:00:12:36:0f:ce:c4:06:a2:e3:2e:fb:f6:4d:bb:e1:
1c:fb:24:b4:49:9d:fe:d1:8a:02:63:05:95:a5:5d:aa:f6:bc:
a1:b4:6c:c2:83:1c:f5:88:3b:2f:2e:52:57:e1:64:4b:42:8c:
3a:5e:71:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:34:07 2025 by rpki-client