Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Kv8dXJoWgkHWDMHsoxCyA9Eek3I.roa
File: Kv8dXJoWgkHWDMHsoxCyA9Eek3I.roa (raw, json)
Hash identifier: h7k/yEKMGzuPKaV83t+Z8lCdNyXGGDvhWXV5IYZhRaw=
Subject key identifier: 2A:FF:1D:5C:9A:16:82:41:D6:0C:C1:EC:A3:10:B2:03:D1:1E:93:72
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0528CAA4
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Kv8dXJoWgkHWDMHsoxCyA9Eek3I.roa
Signing time: Mon 20 Jun 2022 10:42:44 +0000
ROA not before: Mon 20 Jun 2022 10:42:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399587
IP address blocks: 141.11.156.0/22 maxlen: 24
141.11.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86559396 (0x528caa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jun 20 10:42:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2aff1d5c9a168241d60cc1eca310b203d11e9372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c5:be:b5:80:e1:6d:dc:8a:a3:59:bf:06:f7:
47:a0:62:6e:f6:69:20:eb:9c:2b:2b:ae:c9:ba:97:
25:03:f2:a0:69:c5:e7:f6:01:01:bb:10:e7:00:41:
e3:7a:d2:84:f2:97:1a:bc:97:2f:28:46:a8:f3:90:
5a:41:0a:0d:be:14:4c:9c:8a:48:28:55:34:0e:d6:
2f:b2:fd:2f:7f:98:dc:2a:d4:93:32:7c:4f:0e:53:
17:f2:10:01:99:65:15:2b:7b:31:50:56:10:77:5d:
7f:bc:2a:16:44:e0:26:29:8a:5f:22:eb:f4:3b:62:
fb:11:8c:89:f5:28:6e:f9:a6:09:fd:b9:38:e9:7d:
c5:93:e6:3f:4b:cc:e4:d6:8e:d2:a6:76:f3:04:82:
89:ff:ce:f7:67:c1:b6:6a:81:73:25:38:c4:46:96:
05:0a:aa:c6:22:17:5f:c4:6a:14:82:10:e4:0c:2c:
4d:60:29:9e:fc:4c:26:b3:05:92:f5:c8:3f:5f:d9:
00:74:04:e1:36:03:6d:5e:45:fb:1c:f5:72:a6:62:
ab:54:7e:fa:e7:c3:32:9b:bf:11:45:53:ba:dd:f6:
da:b3:5d:08:91:98:dc:90:32:55:ad:53:63:19:db:
b6:d9:38:cc:5d:1d:65:07:eb:a2:bb:4b:9d:9a:ad:
31:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FF:1D:5C:9A:16:82:41:D6:0C:C1:EC:A3:10:B2:03:D1:1E:93:72
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Kv8dXJoWgkHWDMHsoxCyA9Eek3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.140.0/22
141.11.156.0/22
Signature Algorithm: sha256WithRSAEncryption
67:91:5e:0e:93:ae:31:c8:63:33:84:59:4f:b3:fb:bc:8d:ce:
38:8c:55:f4:ef:39:c0:16:2f:47:f2:9c:9b:8c:48:1b:b6:35:
ce:4a:e4:62:22:7b:ce:02:c7:2b:7a:4f:3f:33:be:97:cf:89:
48:c0:7a:f4:d6:bc:64:e2:fa:9c:d6:3b:0e:95:44:e9:b4:35:
1f:ff:be:2d:27:0c:96:d3:da:33:9e:03:32:2a:cf:d8:8b:3f:
a1:a3:5e:52:e2:bc:a9:7b:76:98:28:84:02:e4:1a:ae:5c:9d:
47:3c:b0:b3:db:77:de:1f:73:4f:ea:b0:73:36:b0:0f:55:60:
cb:f4:fd:1f:b5:73:a2:76:56:bb:f3:94:c4:9f:c9:20:06:fc:
b6:41:5e:6c:e6:38:cd:eb:04:7d:c6:3a:92:c5:a3:83:dd:41:
8c:51:ee:92:af:ac:dd:74:65:80:0f:ec:45:9f:22:69:ff:9a:
f4:46:c5:60:c8:d5:41:4d:5c:3f:45:4d:fe:c1:43:57:ec:9c:
e7:63:a7:05:bb:47:06:ba:91:47:b1:97:39:7a:73:03:c5:4f:
e8:5c:be:e4:c3:d8:90:ec:30:36:7b:c2:c8:a2:7f:4f:cc:fd:
ef:87:3d:f7:17:0f:81:16:5f:db:d6:be:33:10:d8:ec:5f:e6:
35:f8:0c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:49:29 2025 by rpki-client