Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/PTmUkBZ96jk7UVqILxEnoCN_uMk.roa
File: PTmUkBZ96jk7UVqILxEnoCN_uMk.roa (raw, json)
Hash identifier: AxNdJZODW2rTc+ZpxZ3KBLHsm8EeiDqZVIBCeLoLMEg=
Subject key identifier: 3D:39:94:90:16:7D:EA:39:3B:51:5A:88:2F:11:27:A0:23:7F:B8:C9
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0183318085E28AD48572A0D338AEB684B762
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/PTmUkBZ96jk7UVqILxEnoCN_uMk.roa
Signing time: Mon 12 Sep 2022 11:40:49 +0000
ROA not before: Mon 12 Sep 2022 11:40:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 141.11.188.0/24 maxlen: 24
141.11.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:31:80:85:e2:8a:d4:85:72:a0:d3:38:ae:b6:84:b7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 12 11:40:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d399490167dea393b515a882f1127a0237fb8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:90:41:f1:0e:c7:70:26:3e:7b:1f:c7:e8:
67:5d:50:90:13:6c:7d:cd:85:87:7b:7e:3c:39:d4:
8d:4b:8f:7d:83:97:a7:8c:75:33:ce:87:9c:f6:69:
67:fa:1c:52:0b:20:dc:38:53:a9:5d:47:56:54:e6:
e3:7b:33:71:b7:c7:8c:87:d6:53:df:15:78:43:56:
8e:8b:a9:dc:dd:b1:83:f7:c4:42:79:2a:15:ac:c5:
b9:02:07:cf:7d:46:db:4f:85:85:3f:4a:fc:0e:00:
8e:0a:cf:ec:fe:7f:c2:8d:dc:26:e9:98:ef:7a:86:
d3:db:28:f0:8b:c6:d6:f4:47:82:93:bf:65:29:3f:
87:b2:b0:60:fc:c5:ab:5c:53:9b:7e:cf:2a:8f:20:
27:9a:ec:0f:6f:5b:2a:fe:73:5f:da:4d:8b:9f:9c:
b1:f0:3c:a9:87:99:6b:85:ac:bb:92:69:d5:fa:52:
62:ae:42:15:68:2e:8e:b5:a5:2a:63:ee:99:ec:6d:
b5:fc:13:5a:26:03:5b:f3:00:b2:f5:c5:6b:14:c3:
dc:9f:4c:c7:20:66:5c:d8:c0:a9:a3:51:73:f8:4d:
d1:6c:83:5c:19:6a:e3:25:bf:71:ff:c3:8b:06:5b:
4f:c7:25:15:5e:6d:a0:68:41:a5:82:2a:f2:37:7b:
1f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:39:94:90:16:7D:EA:39:3B:51:5A:88:2F:11:27:A0:23:7F:B8:C9
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/PTmUkBZ96jk7UVqILxEnoCN_uMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.123.0/24
141.11.188.0/24
Signature Algorithm: sha256WithRSAEncryption
66:bb:df:25:66:39:0b:bb:25:9d:5c:2b:6c:bc:b1:e9:f7:19:
04:94:2a:f0:84:9c:ad:da:89:09:56:38:8f:3a:e7:14:47:c9:
af:f5:04:a9:22:ce:97:bc:5d:39:76:66:1f:96:e1:da:f4:15:
35:96:4b:8c:a5:d5:b4:f4:02:8b:2a:8f:c3:2b:a6:cc:ad:1f:
e0:4d:90:7e:a4:bb:70:58:19:87:27:b9:1a:e0:44:0f:a3:4a:
5a:f4:a3:9e:d0:dc:a7:dd:d0:93:14:4f:de:0d:bf:7a:ef:15:
2e:c6:22:57:0f:3e:0a:56:fe:7a:4e:96:74:dc:33:35:5a:d9:
20:5b:dc:78:13:ef:f4:5e:fc:53:63:f9:6c:68:03:e3:81:aa:
d0:8a:2a:19:6a:f9:7e:20:56:72:08:ee:61:49:85:a3:a8:5e:
c7:e4:57:e2:91:f4:a1:4c:8c:3b:04:ec:06:63:21:4b:cd:f9:
fa:27:53:f6:e1:45:13:f0:13:dd:6a:02:3f:2f:08:b8:2a:88:
29:bf:6f:43:ad:ad:03:6e:12:de:5a:c3:16:aa:cb:31:dd:db:
09:41:99:03:5a:ca:49:3c:d2:2d:12:20:19:bf:d2:e1:6a:31:
de:42:35:b7:dc:c9:4e:e1:de:e4:1b:88:bf:9d:8d:ab:48:79:
dd:e0:41:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:32:06 2025 by rpki-client