Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ICxTjdS3i1L84QXK16Tm467rSQ8.roa
File: ICxTjdS3i1L84QXK16Tm467rSQ8.roa (raw, json)
Hash identifier: 0yqKz5q9wbzRXm8I5KIsWW8CJhXF0A3TBvLhyT7JOeI=
Subject key identifier: 20:2C:53:8D:D4:B7:8B:52:FC:E1:05:CA:D7:A4:E6:E3:AE:EB:49:0F
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01822608C71E8776FF9B083CF3930DDD857C
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ICxTjdS3i1L84QXK16Tm467rSQ8.roa
Signing time: Fri 22 Jul 2022 13:11:25 +0000
ROA not before: Fri 22 Jul 2022 13:11:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204968
IP address blocks: 141.11.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:26:08:c7:1e:87:76:ff:9b:08:3c:f3:93:0d:dd:85:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 22 13:11:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=202c538dd4b78b52fce105cad7a4e6e3aeeb490f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:69:bd:77:dd:e7:a2:a4:dc:42:02:f9:10:75:
a4:8a:65:d8:16:dd:bc:fc:66:5d:36:e0:bb:06:ab:
ad:d5:a0:fd:2a:54:71:fe:23:76:17:9f:42:b3:56:
52:09:90:47:10:ea:f0:a1:1a:14:ec:d5:1b:af:00:
73:9b:9d:a4:10:48:b0:9b:b9:23:fb:00:6b:d8:72:
f1:cd:aa:cd:44:c3:fd:cb:75:26:54:5e:5d:05:8d:
90:f2:0a:4c:9c:b8:cf:21:d2:96:f4:0d:73:b4:d0:
80:8f:97:fb:0d:19:cd:0b:11:23:77:06:83:76:15:
fc:65:4b:fa:de:74:ed:cd:03:71:92:2a:15:49:99:
0c:a7:b6:5b:55:84:f0:09:0f:ec:63:b7:e8:be:a5:
4e:23:4c:c8:08:06:b4:21:f2:f7:da:70:20:82:b6:
da:44:5d:12:85:82:02:87:de:1b:92:58:f3:5b:96:
92:f0:32:b8:d4:1d:0b:0e:f7:a9:82:4b:90:13:06:
15:15:4e:81:67:5c:61:be:17:2b:c9:ae:0c:7a:1d:
f5:ad:a3:33:11:38:d9:a4:31:b0:6b:a9:88:07:02:
46:b1:83:f0:85:2e:64:93:68:ef:ea:d2:c1:52:22:
af:f0:4e:af:cf:07:92:4a:2c:d6:36:75:74:30:9f:
73:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2C:53:8D:D4:B7:8B:52:FC:E1:05:CA:D7:A4:E6:E3:AE:EB:49:0F
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ICxTjdS3i1L84QXK16Tm467rSQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.236.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:7e:8c:8b:4e:76:1c:0c:f5:56:e5:9b:48:bb:d1:0f:41:22:
2c:94:62:f1:f1:d4:11:11:51:98:81:fe:01:49:12:ff:2c:cd:
a5:63:8f:fc:c1:c2:52:ad:f8:ca:ae:f4:37:f2:26:b0:d5:cb:
5d:de:34:38:7b:cc:1b:ce:34:de:59:f4:0e:68:df:9b:99:1b:
22:f7:60:b0:03:27:23:bf:3f:45:04:74:34:c7:4a:36:18:73:
29:f2:20:68:e8:5c:6f:16:1c:e4:79:28:85:b3:ad:54:08:18:
b5:a9:f8:50:9d:31:11:9d:bd:ae:91:6e:df:fb:ec:2a:96:61:
bf:4b:5f:ab:b4:20:49:07:31:6d:17:8c:d8:05:35:d9:82:be:
e1:c9:f6:9b:0b:26:98:c3:13:70:b5:20:16:45:61:33:20:2a:
ad:49:c9:8e:37:1e:f5:af:78:9d:51:c8:d7:58:a6:3f:28:85:
74:86:04:3c:51:ad:52:1d:8d:6c:b6:c6:1c:e9:e1:fb:0f:56:
1d:15:58:84:98:13:d9:f2:d5:d6:b9:2c:9e:0b:1a:8a:5a:b5:
ee:5b:c7:cb:0f:51:1d:07:26:5f:2b:07:ad:ca:86:3b:45:86:
69:7a:59:09:4f:8d:c4:41:c4:20:f7:fc:27:07:ca:7e:f6:17:
f9:91:8f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:32 2025 by rpki-client