Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/FmnFj2jG3HX-t1VY8CsvXDoLKw0.roa
File: FmnFj2jG3HX-t1VY8CsvXDoLKw0.roa (raw, json)
Hash identifier: NmksBkCep8n8V6fuAIGdohACFY1hVEo5BDRCcWOp3Vw=
Subject key identifier: 16:69:C5:8F:68:C6:DC:75:FE:B7:55:58:F0:2B:2F:5C:3A:0B:2B:0D
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0184517D32C9309C133CC570D6D99AF085C4
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/FmnFj2jG3HX-t1VY8CsvXDoLKw0.roa
Signing time: Mon 07 Nov 2022 09:47:50 +0000
ROA not before: Mon 07 Nov 2022 09:47:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 141.11.178.0/24 maxlen: 24
141.11.196.0/22 maxlen: 24
141.11.200.0/22 maxlen: 24
141.11.208.0/22 maxlen: 24
141.11.236.0/22 maxlen: 24
141.11.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:51:7d:32:c9:30:9c:13:3c:c5:70:d6:d9:9a:f0:85:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 7 09:47:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1669c58f68c6dc75feb75558f02b2f5c3a0b2b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bd:51:a3:39:27:ed:f2:19:c8:7a:be:62:59:
df:72:4c:9c:9a:2c:ac:c8:03:c7:64:aa:11:07:df:
19:8d:65:5a:34:d7:a4:14:bc:46:6a:62:d4:78:07:
88:47:06:54:82:9e:2a:77:b0:19:1c:e3:ef:a7:6a:
dc:be:d5:aa:ab:18:53:6d:c8:74:b3:22:a1:e9:46:
13:48:90:c0:a0:88:51:00:db:8e:69:ef:34:33:2f:
4e:95:9c:78:82:55:9f:ad:57:ad:ba:ea:de:72:5e:
d2:24:6b:97:50:05:74:09:3a:c5:81:44:ba:74:15:
e8:46:66:9d:85:d5:fa:5d:33:e9:f7:65:4f:ef:90:
1e:b5:6c:09:96:18:66:20:fa:f7:9f:16:ea:93:bc:
2c:d5:29:3e:ed:fc:00:f4:7b:f8:e7:e7:55:ee:d3:
ba:3e:9c:da:6d:cd:d8:71:20:de:0e:f0:4d:d7:99:
a7:c1:a0:d6:58:6f:f6:39:cd:11:5a:3d:a8:10:38:
88:d4:5b:d4:2e:a7:ca:be:dc:25:70:8a:30:d0:d3:
08:4a:86:26:c2:22:ab:fd:42:88:c4:cb:08:d6:54:
d3:f0:bc:32:a4:25:92:b5:76:04:51:02:c5:0b:67:
0e:2f:0c:4e:a9:e3:24:5e:7f:93:b9:d7:b2:8c:d3:
a1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:69:C5:8F:68:C6:DC:75:FE:B7:55:58:F0:2B:2F:5C:3A:0B:2B:0D
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/FmnFj2jG3HX-t1VY8CsvXDoLKw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.140.0/22
141.11.178.0/24
141.11.196.0-141.11.203.255
141.11.208.0/22
141.11.236.0/22
Signature Algorithm: sha256WithRSAEncryption
73:3c:a9:13:c5:9d:7a:5f:5d:c4:24:38:8e:ba:bd:3d:d2:a9:
08:67:d9:0e:d8:b7:08:b6:93:bb:e9:6e:69:6b:a6:fa:41:ff:
d4:95:e0:e7:17:88:71:f5:fd:db:2e:ee:e2:44:95:23:e3:0c:
2e:03:e3:84:6c:59:d0:f9:48:5d:8b:ac:b6:91:b2:77:1a:80:
b5:eb:43:69:94:21:5e:0f:86:26:c6:3d:2a:f4:7b:5d:b9:b2:
b6:fd:25:28:47:97:b1:eb:dd:3e:2b:56:b0:4f:4e:7d:ef:6d:
59:52:a3:79:1b:03:59:ce:8c:8d:7e:94:3c:25:8b:f8:e3:be:
45:76:7f:29:7c:25:89:38:26:88:1d:33:db:30:d4:e6:bb:d5:
58:f5:85:60:41:16:82:1d:32:04:ee:54:bf:07:f7:12:58:db:
11:1c:23:35:eb:3c:4d:fe:bc:71:ba:6a:88:f5:17:f5:a3:4a:
7a:9b:62:20:c4:4b:1e:2a:f4:1c:a8:63:ac:2a:ab:f6:7b:ec:
7a:9d:45:c6:c6:0e:4f:3d:eb:a8:a9:8d:97:74:b1:07:30:ec:
45:d6:0e:79:a5:b1:82:0e:54:5b:fb:3a:82:b4:38:02:6c:3c:
23:67:0e:62:1b:bc:a8:cd:16:dc:1a:96:4a:b9:ee:b0:3b:e6:
d2:39:37:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:04 2025 by rpki-client