Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/QvZlgZISztzTUepOh1daTQxOLM0.roa
File: QvZlgZISztzTUepOh1daTQxOLM0.roa (raw, json)
Hash identifier: 2j48iJ6fPb5h8CEJz8zMby5dER4QFitMEQqJc18GTC0=
Subject key identifier: 42:F6:65:81:92:12:CE:DC:D3:51:EA:4E:87:57:5A:4D:0C:4E:2C:CD
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0183409F78A4220DADFEB7798C94C3CC2E36
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/QvZlgZISztzTUepOh1daTQxOLM0.roa
Signing time: Thu 15 Sep 2022 10:08:56 +0000
ROA not before: Thu 15 Sep 2022 10:08:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 141.11.74.0/23 maxlen: 24
141.11.94.0/23 maxlen: 24
141.11.4.0/24 maxlen: 24
141.11.234.0/23 maxlen: 24
141.11.144.0/21 maxlen: 24
141.11.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:40:9f:78:a4:22:0d:ad:fe:b7:79:8c:94:c3:cc:2e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 15 10:08:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42f665819212cedcd351ea4e87575a4d0c4e2ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:55:15:e7:8f:ff:2e:ca:4e:5b:6c:e8:09:e9:
e2:97:f2:2b:d9:1d:c3:b8:7c:11:4e:89:56:cf:bc:
c6:7f:b5:e8:c0:21:bc:d1:68:db:85:d3:1c:2a:86:
2e:a0:f4:9d:64:da:9a:58:b7:30:c7:95:95:29:1d:
44:b6:cb:df:72:0e:b8:44:58:e9:a8:13:b8:3d:77:
43:84:53:a5:aa:46:5d:e0:bc:70:13:58:5a:ff:d0:
fc:ff:b7:ae:e0:4d:01:19:f3:83:d2:95:26:e2:18:
ba:5e:85:5b:88:ba:88:65:e6:8b:04:b7:fb:63:e1:
8f:cb:0b:fe:b1:d5:c9:63:fe:52:33:7d:4b:8a:68:
2d:0f:33:cf:bf:b7:f6:bc:ca:1f:21:b7:8b:5f:b0:
e0:d7:08:fc:f6:e4:d0:63:c6:b3:f3:64:3b:1e:1d:
17:a0:08:4d:53:6c:71:14:3f:1f:01:b0:b8:54:50:
ad:26:7b:39:0c:27:8f:ba:02:6c:fb:2f:70:d8:6d:
4c:79:21:93:49:b6:e5:d2:79:fe:e4:a2:0e:8a:6b:
f5:a2:95:d8:c6:52:8a:11:5c:ea:ff:11:f6:cf:ec:
a9:69:fc:fe:44:11:56:00:59:f6:49:67:69:32:19:
67:f8:bf:dd:34:cf:cb:04:96:0b:5a:a1:f9:f7:c2:
56:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F6:65:81:92:12:CE:DC:D3:51:EA:4E:87:57:5A:4D:0C:4E:2C:CD
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/QvZlgZISztzTUepOh1daTQxOLM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.4.0/24
141.11.34.0/24
141.11.74.0/23
141.11.94.0/23
141.11.144.0/21
141.11.234.0/23
Signature Algorithm: sha256WithRSAEncryption
96:9c:2b:90:28:64:77:91:ad:ec:32:92:8f:94:e6:76:ad:70:
29:6a:74:e2:01:2c:3f:8c:d1:f9:49:99:fa:1b:18:6a:f0:83:
33:c3:85:31:c1:13:2f:82:a8:b2:4c:de:49:10:02:17:17:22:
56:02:9a:48:f8:d9:a1:58:f0:ed:27:10:cc:ae:5e:de:e3:b1:
85:1b:62:2a:91:70:bd:d0:1b:6e:8e:d7:c7:eb:dd:90:c7:aa:
94:58:3c:f2:c4:6c:d3:26:eb:c8:0c:35:0b:57:50:ba:67:48:
2d:ba:da:8b:81:18:18:9f:6c:0c:98:a7:84:9d:32:d8:b7:7e:
10:ae:c7:2c:5d:8f:81:91:46:82:5b:3b:2d:40:7b:f4:d9:fd:
8c:6e:8f:86:c3:83:5f:34:75:ed:18:45:df:3b:ab:6c:eb:e7:
d8:31:6d:41:0c:ef:a9:9b:47:04:8d:cd:2f:b3:95:0c:26:5b:
bd:52:3d:3d:58:18:d3:b6:27:a7:50:98:dd:36:ab:95:bd:a9:
31:19:78:58:32:65:0c:0e:c9:67:72:aa:f2:bf:7f:80:88:de:
2d:43:16:ec:3b:fb:91:71:d1:c2:60:0d:e5:0f:ee:24:25:29:
2d:a1:fc:9e:03:28:36:97:df:46:ec:d1:5b:6a:0e:78:60:25:
35:60:cd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:08 2025 by rpki-client