Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/KbKqyhPL_UW9b9_UKW-2CMaPnwc.roa
File: KbKqyhPL_UW9b9_UKW-2CMaPnwc.roa (raw, json)
Hash identifier: wGxILcWLqXVKwf/6GmKZYnIp1GAxKRzNOOwuD57m5to=
Subject key identifier: 29:B2:AA:CA:13:CB:FD:45:BD:6F:DF:D4:29:6F:B6:08:C6:8F:9F:07
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04450FAE
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/KbKqyhPL_UW9b9_UKW-2CMaPnwc.roa
Signing time: Fri 29 Apr 2022 09:55:38 +0000
ROA not before: Fri 29 Apr 2022 09:55:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 141.11.123.0/24 maxlen: 24
141.11.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71634862 (0x4450fae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 29 09:55:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29b2aaca13cbfd45bd6fdfd4296fb608c68f9f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:70:2a:5d:37:bb:9b:f3:65:6f:b0:17:15:6e:
f8:08:79:e2:45:d4:ac:b0:ed:6b:30:d0:48:74:5f:
54:fb:5a:c7:2c:d2:ee:1b:64:c6:a3:b5:fd:5d:fd:
0f:67:bc:8f:71:e1:c9:e5:c3:99:a3:67:72:f6:2e:
a4:da:b6:b5:ca:0a:2e:cf:8d:71:8f:27:28:0e:86:
fd:3e:e1:29:dc:65:53:a2:91:81:ba:8a:12:b1:a2:
b4:b2:4b:23:4b:dc:99:f4:0a:7c:93:2f:7e:af:7f:
30:18:80:ae:2b:37:ce:5e:24:00:39:a8:f7:48:d4:
1c:14:37:7d:05:27:4b:ee:ff:9e:e0:88:ea:41:79:
53:1d:d2:a0:b1:4b:cc:d1:2e:ef:9c:1a:62:b2:98:
83:3a:14:eb:67:41:76:28:95:df:04:8b:8d:b6:4c:
a9:19:17:12:55:30:01:37:89:85:05:9a:2c:96:e4:
8c:22:01:63:09:20:39:3e:cc:05:ed:6c:d8:aa:fc:
2c:bc:dc:bf:11:21:61:bb:ba:45:a4:b8:26:67:90:
35:dc:7c:9e:f8:5d:ca:b5:ce:ba:4f:38:3b:b1:76:
86:ac:08:86:5e:7b:c5:0e:64:d7:44:0a:92:97:e8:
50:b6:fc:5e:bf:a7:ae:a3:1b:a0:b6:09:3e:10:3d:
87:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B2:AA:CA:13:CB:FD:45:BD:6F:DF:D4:29:6F:B6:08:C6:8F:9F:07
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/KbKqyhPL_UW9b9_UKW-2CMaPnwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.123.0-141.11.124.255
Signature Algorithm: sha256WithRSAEncryption
07:bd:26:0f:3b:9b:24:41:d6:1b:7b:90:23:06:c9:e7:34:ff:
23:d9:b5:36:fd:9e:54:8c:98:aa:a2:7a:11:68:96:6b:f3:cc:
b0:0c:b0:0a:64:42:1b:8f:33:8a:3f:8c:33:5f:ac:d1:2c:85:
47:a0:d3:c8:46:4e:7a:f0:d4:9d:ed:b5:42:da:86:71:b9:5c:
0f:86:fe:a2:40:f6:7c:b6:35:9b:ed:e0:63:9f:41:d3:07:70:
39:4b:e4:a2:30:b0:8d:f0:64:09:90:ee:f8:2d:8f:1f:b4:0d:
2f:0c:d1:9e:cd:6a:10:88:a2:c6:3b:36:09:12:5f:37:88:01:
7e:08:84:91:a2:29:18:17:16:c8:16:db:59:37:c1:1b:bc:e6:
19:cb:81:c0:ef:05:75:00:74:23:6f:d9:8d:03:1e:54:c5:31:
0a:8d:19:d3:c5:c2:d9:54:60:1a:97:3f:2d:30:db:28:4a:99:
15:71:fc:ce:d7:33:4e:ae:cb:fb:e5:84:67:49:01:aa:e7:bb:
2e:0c:a5:03:58:fa:43:95:17:19:0e:df:cf:68:db:8a:de:53:
58:02:35:b8:ed:ff:ce:92:9b:da:82:e0:4d:5d:cb:ed:41:4d:
78:3e:9f:4c:8e:73:38:3e:b1:ba:23:ef:02:6e:5a:55:99:34:
60:33:37:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:27 2025 by rpki-client