Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/PXcuxZKSdHifwCFA9n9jF3fFvRo.roa
File: PXcuxZKSdHifwCFA9n9jF3fFvRo.roa (raw, json)
Hash identifier: 5ose+/FatTm9D3ZJqeOFLP/5O3DQsep1EZKER9qQr2c=
Subject key identifier: 3D:77:2E:C5:92:92:74:78:9F:C0:21:40:F6:7F:63:17:77:C5:BD:1A
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01851AB088AC31416E6527B7D1F2E460AB07
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/PXcuxZKSdHifwCFA9n9jF3fFvRo.roa
Signing time: Fri 16 Dec 2022 11:27:34 +0000
ROA not before: Fri 16 Dec 2022 11:27:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 141.11.186.0/24 maxlen: 24
141.11.90.0/23 maxlen: 24
141.11.102.0/24 maxlen: 24
141.11.106.0/24 maxlen: 24
141.11.5.0/24 maxlen: 24
141.11.228.0/23 maxlen: 24
141.11.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1a:b0:88:ac:31:41:6e:65:27:b7:d1:f2:e4:60:ab:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Dec 16 11:27:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d772ec5929274789fc02140f67f631777c5bd1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:e8:1d:62:c3:8f:52:88:1b:12:3d:fd:0a:
8e:c6:08:f5:7e:18:89:1a:a2:47:b9:1e:6e:f6:7f:
b2:9e:0e:7d:71:1f:d1:01:b3:4b:3f:06:6f:4f:7b:
72:75:65:08:06:18:4d:03:f7:e9:14:46:43:e0:17:
5f:a2:2e:e3:61:6f:d0:39:18:71:9d:d7:5a:a8:5c:
03:a9:95:96:15:79:29:f0:68:67:88:c7:e1:a0:fd:
75:b9:2f:89:3e:1c:c1:f5:87:8c:51:6e:e1:cc:6e:
75:3a:e3:a8:0b:92:d5:9b:7b:1d:7f:4e:dc:73:c2:
ec:09:59:24:fb:af:a6:48:5d:10:d2:93:f9:22:ae:
8b:0c:c9:9c:7a:48:eb:94:27:71:54:3c:29:58:5f:
be:50:8a:42:98:a2:0a:ab:85:96:71:59:cb:1e:3a:
1d:4e:df:6c:6b:ee:ec:03:20:69:db:07:c9:a0:6b:
31:20:da:4d:0c:8a:70:d2:cb:58:5b:41:58:29:fc:
0b:f6:dc:f5:e0:44:e7:d7:28:d2:f6:00:23:d1:49:
f7:92:68:19:74:08:4f:1e:1b:ee:98:1b:8a:69:38:
81:b2:71:d0:af:47:85:bc:35:7c:6a:e1:2d:0d:f1:
49:22:6a:28:2a:e3:db:a2:fd:d0:07:6a:51:1f:c2:
39:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:77:2E:C5:92:92:74:78:9F:C0:21:40:F6:7F:63:17:77:C5:BD:1A
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/PXcuxZKSdHifwCFA9n9jF3fFvRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
141.11.26.0/24
141.11.90.0/23
141.11.102.0/24
141.11.106.0/24
141.11.186.0/24
141.11.228.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:0c:d6:f3:bf:01:d8:dc:f2:da:b5:e3:c9:c7:cc:a6:68:e2:
2c:21:12:f2:bd:8a:78:4e:dd:4f:cf:55:e3:71:22:32:f6:c1:
81:77:95:a0:67:37:86:e5:78:7e:e5:78:a8:52:c9:9f:2b:e2:
c3:1a:e9:51:fb:0b:49:f7:32:13:34:5c:85:57:56:ca:d5:d9:
33:48:34:06:50:52:ba:9f:be:b8:ce:31:49:0a:d4:cc:3b:c0:
b9:a6:51:dc:3f:03:8b:dd:10:cd:85:7e:47:70:5b:bb:05:22:
fa:d0:b6:ba:f2:50:12:c0:98:05:da:76:f2:8a:80:cb:f9:47:
b2:0b:4e:16:db:d5:c9:3e:ac:1c:cf:67:ad:e3:db:bd:12:26:
f0:5b:7a:a4:bb:af:2e:2b:87:db:7b:75:65:cd:d7:56:5e:d8:
f7:48:6b:a6:ed:94:e8:5f:af:fc:7e:c0:06:6e:53:3f:8f:3c:
df:be:7b:6c:f6:74:e8:c9:a3:3e:70:af:4d:ff:e2:30:89:18:
a9:5e:4c:43:de:41:02:da:8e:ba:17:47:3c:b3:94:3d:12:62:
59:42:0c:d4:d1:6f:2c:00:2a:69:97:6a:42:d1:f3:96:ec:58:
4b:7d:dd:71:59:3a:aa:00:08:b4:15:35:94:77:fd:ef:67:35:
1b:7d:88:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:03:40 2025 by rpki-client