Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/R7YAp9l7GHINSqXztVTbPvXAa3Y.roa
File: R7YAp9l7GHINSqXztVTbPvXAa3Y.roa (raw, json)
Hash identifier: G4qJ6HpgWf+cSa9cg00nzqUwnEKuUk9aIDqoEsE8TAI=
Subject key identifier: 47:B6:00:A7:D9:7B:18:72:0D:4A:A5:F3:B5:54:DB:3E:F5:C0:6B:76
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0327A1FE
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/R7YAp9l7GHINSqXztVTbPvXAa3Y.roa
Signing time: Mon 21 Feb 2022 10:32:03 +0000
ROA not before: Mon 21 Feb 2022 10:32:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 141.11.192.0/19 maxlen: 24
141.11.104.0/22 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.112.0/20 maxlen: 24
141.11.6.0/24 maxlen: 24
141.11.128.0/19 maxlen: 24
141.11.20.0/24 maxlen: 24
141.11.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52929022 (0x327a1fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Feb 21 10:32:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47b600a7d97b18720d4aa5f3b554db3ef5c06b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e1:2d:b1:2f:d5:87:16:43:a4:26:26:f6:3b:
a8:1f:b1:c6:97:93:a3:2e:07:3c:7b:fd:7e:0c:59:
da:eb:43:e7:a7:ae:29:06:e0:a5:40:5a:22:06:e5:
4a:5a:44:5e:19:ae:9b:bc:d9:51:36:ce:4b:d3:47:
49:33:c6:b9:7c:cc:a8:06:81:9d:85:dd:ec:a3:d2:
a4:17:85:bb:fa:22:c3:d8:dd:a7:44:f3:81:44:92:
64:40:e8:d8:f7:ad:c9:63:24:3f:c4:13:31:cc:a1:
41:d1:e9:47:28:84:09:62:78:d0:4a:ac:c3:b4:48:
8e:f2:51:b8:4b:02:98:90:c9:ff:8e:c9:14:06:6c:
c4:66:05:db:cf:ce:3e:e2:46:69:ef:bb:e1:cb:75:
19:2f:78:7c:dc:1c:44:e2:2a:93:c3:f7:b6:d6:20:
1a:3b:95:4c:50:d5:5e:d4:69:1d:8c:1e:bc:90:24:
8e:08:ee:07:52:2b:ea:bc:ec:51:47:47:7c:be:4a:
9f:fb:14:ca:5d:da:03:6e:df:73:15:19:98:0b:4a:
b2:47:c2:b3:58:f4:a8:4b:89:02:0f:86:3d:a9:74:
bc:21:be:d4:e6:46:0d:18:a8:ba:12:22:82:94:dc:
c0:4b:a5:5c:be:4d:36:e9:5e:dd:d5:b4:7e:3f:4f:
8a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B6:00:A7:D9:7B:18:72:0D:4A:A5:F3:B5:54:DB:3E:F5:C0:6B:76
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/R7YAp9l7GHINSqXztVTbPvXAa3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
141.11.6.0/24
141.11.19.0-141.11.20.255
141.11.104.0/22
141.11.112.0-141.11.159.255
141.11.192.0/19
Signature Algorithm: sha256WithRSAEncryption
23:8b:c1:f9:f6:7b:4d:e1:0f:64:f5:fc:28:fb:53:e3:1d:60:
52:3c:c9:47:58:94:1d:c3:55:99:4d:4a:c4:29:31:5b:53:35:
d6:e4:b3:13:8e:aa:0b:97:4d:35:69:c4:62:90:09:93:6a:6f:
73:cb:61:13:64:1c:1a:c8:92:f6:7f:3a:4a:9f:d0:6d:e5:5c:
a6:3a:c4:66:fb:a7:69:aa:bf:d8:40:d4:b4:97:26:61:62:fa:
56:47:9c:66:0c:17:f8:54:9a:da:5e:f3:ba:85:c2:d6:ee:3c:
ec:1a:73:1b:28:14:06:03:58:a1:15:0f:96:42:0d:09:97:9c:
2a:17:25:3e:95:e2:86:f0:29:bd:b1:a4:62:7b:45:3b:40:f2:
d7:f5:db:43:b5:1c:64:b2:a7:07:12:3b:cd:56:89:6c:26:19:
b4:6f:ab:28:ff:34:a6:1e:13:c6:77:c1:86:0f:31:21:12:ab:
c0:8d:70:ae:b2:47:91:ff:a0:39:de:3e:8e:79:cd:c8:8f:a5:
08:bf:64:24:62:db:6c:42:b6:85:88:25:ae:24:a2:0f:11:e7:
17:04:37:f2:f2:b4:a5:49:cc:b6:6a:7a:13:a9:67:12:89:55:
fc:d5:f3:17:34:6d:15:6e:ed:00:08:19:96:d6:21:b8:d8:d8:
35:5a:26:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:39 2025 by rpki-client