Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/K6Jthx30Cf0O9bYcGi9fc6pSsW0.roa
File: K6Jthx30Cf0O9bYcGi9fc6pSsW0.roa (raw, json)
Hash identifier: 05GMo3+/jdrw4b7NoGnFZesWrwBuHEHGRAkHKw0DcyY=
Subject key identifier: 2B:A2:6D:87:1D:F4:09:FD:0E:F5:B6:1C:1A:2F:5F:73:AA:52:B1:6D
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0367EDBF
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/K6Jthx30Cf0O9bYcGi9fc6pSsW0.roa
Signing time: Tue 08 Mar 2022 13:34:46 +0000
ROA not before: Tue 08 Mar 2022 13:34:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 141.11.192.0/19 maxlen: 24
141.11.187.0/24 maxlen: 24
141.11.104.0/22 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.6.0/24 maxlen: 24
141.11.122.0/24 maxlen: 24
141.11.127.0/24 maxlen: 24
141.11.128.0/19 maxlen: 24
141.11.20.0/24 maxlen: 24
141.11.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57142719 (0x367edbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Mar 8 13:34:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ba26d871df409fd0ef5b61c1a2f5f73aa52b16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:78:e0:52:83:be:d4:7c:f1:80:6f:6e:5c:
1e:cc:f8:dd:66:dd:83:ca:2e:f4:55:a4:75:a2:3e:
5b:30:c5:4c:6a:6b:d0:5f:0a:c0:75:b8:58:8c:a8:
0f:5b:2c:ce:3c:06:9d:9b:b9:b0:1b:c1:cd:36:97:
1f:2c:fe:9a:26:ee:85:b1:2d:56:43:84:7f:14:12:
38:e5:d4:59:52:92:28:76:c9:6f:a8:a3:62:60:dc:
ef:86:0b:19:6f:93:da:1a:eb:b6:9c:0d:27:5b:4c:
e1:70:a3:7c:e8:c9:2e:27:c9:01:33:45:34:d9:2a:
7a:ef:c6:07:a9:94:7b:5e:16:91:db:6a:50:f3:09:
6b:76:94:1e:43:75:01:88:2a:90:90:bc:b1:9e:ad:
a1:85:c8:15:0e:46:b1:ea:a3:58:10:9a:bb:85:0a:
61:c8:db:c8:ed:ef:49:e9:61:2e:d2:2d:35:11:32:
0e:30:f6:de:35:c6:96:2b:ad:dc:3d:63:b7:a2:7a:
31:d7:fc:e9:4a:09:a1:b4:b7:a9:23:76:fd:84:dd:
40:34:75:19:1b:86:4c:e4:d5:1e:e8:1b:37:2e:e5:
07:3c:3f:7c:c0:f5:95:83:7f:ef:83:f4:f6:7c:a3:
f3:6f:85:e9:fd:19:cd:74:7b:4f:c8:49:12:c3:5f:
32:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A2:6D:87:1D:F4:09:FD:0E:F5:B6:1C:1A:2F:5F:73:AA:52:B1:6D
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/K6Jthx30Cf0O9bYcGi9fc6pSsW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
141.11.6.0/24
141.11.19.0-141.11.20.255
141.11.104.0/22
141.11.122.0/24
141.11.127.0-141.11.159.255
141.11.187.0/24
141.11.192.0/19
Signature Algorithm: sha256WithRSAEncryption
0a:37:92:4a:07:c2:27:3c:1a:4e:9d:c8:b4:55:0c:e1:cc:8a:
39:59:b5:4a:c3:38:03:64:45:13:b8:82:db:2b:e2:3f:bd:be:
12:9e:ab:d1:90:5c:9f:ab:38:09:7c:91:1b:d8:86:62:15:5f:
c3:9f:a2:05:e0:bf:2e:1e:f9:2f:21:dd:c9:67:9d:83:32:99:
b6:7d:17:53:da:b3:23:13:e8:36:15:ff:e4:61:4d:b9:c9:ed:
da:45:33:64:36:dc:80:b4:79:fa:7b:83:60:d1:93:fe:f5:17:
ca:aa:7d:24:33:d1:e5:a4:c3:5e:4d:2a:e4:9c:c5:13:12:97:
7b:20:ee:95:29:23:55:ad:9b:8a:09:e4:1d:f0:19:e0:0d:dd:
67:43:fd:07:60:d9:10:49:a9:9c:5a:a9:a2:06:97:35:fb:11:
3e:a4:86:62:8a:a3:8b:98:fc:d4:59:79:65:2f:73:6b:e1:5a:
5f:b5:04:66:ac:26:5b:9d:71:5b:7a:3c:2b:99:5c:14:ad:30:
bd:0a:f8:38:d6:3f:a7:08:c1:fe:28:5d:f0:a0:4d:60:b3:e1:
69:26:19:5c:7b:30:79:fd:4d:8b:fb:e2:b8:ee:1f:93:cb:cf:
d5:c9:b4:b9:3d:66:61:91:f2:50:e2:c7:66:b9:3c:45:5a:ff:
e9:16:2c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:50 2025 by rpki-client