Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/IzjXbDRvp_WpEjCJpd2Q0ySNeeE.roa
File: IzjXbDRvp_WpEjCJpd2Q0ySNeeE.roa (raw, json)
Hash identifier: 6VNIAEnjLgt9Q49++IJSpmUlqlv+JXezDcxSB1LrHYw=
Subject key identifier: 23:38:D7:6C:34:6F:A7:F5:A9:12:30:89:A5:DD:90:D3:24:8D:79:E1
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0182827994D7E2E8F9A7CA9667A71E3771F3
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/IzjXbDRvp_WpEjCJpd2Q0ySNeeE.roa
Signing time: Tue 09 Aug 2022 11:59:42 +0000
ROA not before: Tue 09 Aug 2022 11:59:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 141.11.200.0/21 maxlen: 24
141.11.98.0/24 maxlen: 24
141.11.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:82:79:94:d7:e2:e8:f9:a7:ca:96:67:a7:1e:37:71:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Aug 9 11:59:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2338d76c346fa7f5a9123089a5dd90d3248d79e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9e:f6:83:c1:8d:6a:1c:df:31:80:05:e3:28:
04:ca:74:f9:aa:68:94:47:1a:b0:38:29:a0:09:d6:
24:b8:5d:c2:5d:d9:27:79:cc:e9:58:1e:35:9e:38:
2b:b3:3c:e1:30:e2:43:c2:24:6e:18:3a:28:dd:27:
eb:7f:50:0f:f8:75:8c:45:29:3f:de:c3:bf:04:92:
48:f2:e9:f0:0f:69:31:0a:7f:4c:b1:24:86:8d:2f:
fe:70:87:2c:a3:dd:7c:0c:ab:ea:ba:70:e5:c4:91:
5b:07:45:61:39:41:ce:65:1b:f5:29:b3:03:7e:d2:
fe:6d:18:66:15:18:8d:9e:5e:0a:7e:8e:e8:9d:7b:
92:56:15:0c:73:88:6e:d7:11:c6:c6:39:1b:dd:dc:
64:e5:6c:d3:a5:f6:be:1e:cc:08:f6:45:f0:09:30:
6f:e0:3a:4f:8f:1d:65:f8:30:90:af:a6:c3:db:09:
f4:19:f7:52:7e:f4:80:a0:fc:42:26:09:90:32:3e:
be:2c:38:ee:32:b0:31:cb:d9:e3:b2:ac:df:3b:9e:
3f:d8:1d:27:b4:90:65:11:18:3c:d1:7d:4b:f6:70:
f5:30:c5:c1:5c:cd:b4:b8:83:3d:b1:ae:d6:52:3d:
a5:bb:d4:68:a6:3d:fc:d2:ba:3a:98:16:3c:ad:e9:
11:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:38:D7:6C:34:6F:A7:F5:A9:12:30:89:A5:DD:90:D3:24:8D:79:E1
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/IzjXbDRvp_WpEjCJpd2Q0ySNeeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.98.0/24
141.11.200.0-141.11.223.255
Signature Algorithm: sha256WithRSAEncryption
92:da:e0:a6:23:e5:2d:44:78:9e:45:7b:a8:7f:9c:6e:0f:30:
8e:03:c3:cb:f6:b8:10:ee:69:27:23:2e:19:49:4f:66:0c:87:
bc:83:0e:45:5b:7b:8b:09:3c:f0:9d:60:ec:34:fb:05:18:b7:
dc:c3:1d:ce:39:33:a0:60:4a:7d:c0:cd:6e:74:68:ef:0c:06:
67:e5:e5:a5:b7:23:20:75:90:7d:b3:6c:e1:b7:36:73:73:fd:
31:2c:36:52:5f:0e:ab:50:d5:04:79:15:7c:a5:7f:4f:9f:5e:
01:8d:84:a2:d4:54:ef:0e:8d:7e:11:d0:60:03:f7:e6:00:27:
44:2b:4d:4c:bf:60:b2:65:1b:73:ac:a3:d0:2b:12:aa:31:4a:
4e:27:b3:63:5d:e1:7d:f1:19:0d:50:9a:2b:0b:0d:91:c9:44:
09:d2:15:71:ac:49:f2:c2:6a:74:46:88:de:a5:ea:c2:d5:97:
8a:df:74:f5:53:e3:b4:27:5f:a1:20:bb:ae:3c:01:86:e8:a8:
9e:54:e1:02:30:73:2b:52:f8:56:33:df:14:62:f8:ce:7a:2f:
28:d4:e6:03:28:eb:6d:d2:a2:32:51:c7:06:92:3e:c2:f0:7c:
ae:2f:9b:10:8b:03:18:14:ea:69:d4:7f:b6:6f:7e:8b:9b:f7:
3c:a3:cf:58
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:11:46 2025 by rpki-client