Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/UZfL2o2W8CrCzBMGrGkXwTdzrJU.roa
File: UZfL2o2W8CrCzBMGrGkXwTdzrJU.roa (raw, json)
Hash identifier: ocJ1qzypR9jBbde6pqIYqEjMTZNrWDP8eCRNTBodAEo=
Subject key identifier: 51:97:CB:DA:8D:96:F0:2A:C2:CC:13:06:AC:69:17:C1:37:73:AC:95
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 052A0B10
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/UZfL2o2W8CrCzBMGrGkXwTdzrJU.roa
Signing time: Mon 20 Jun 2022 13:39:44 +0000
ROA not before: Mon 20 Jun 2022 13:39:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 141.11.19.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86641424 (0x52a0b10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jun 20 13:39:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5197cbda8d96f02ac2cc1306ac6917c13773ac95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:28:59:fc:f7:b8:80:7c:e4:6e:01:40:1f:02:
1e:27:72:37:b4:f0:da:ed:77:7d:d3:ab:b7:7b:a5:
7b:9e:61:05:18:24:83:49:e1:44:8c:b2:99:e9:8d:
5e:d1:6b:b8:54:73:9b:b3:7c:b4:2a:f3:e5:9d:3b:
d6:f7:43:0d:f3:88:b3:13:a1:52:ed:9d:fa:4a:43:
80:86:f3:85:63:11:a8:0f:3b:92:6f:7e:31:f7:f4:
16:2b:1c:83:bf:ba:ee:84:88:7c:ba:30:95:5f:30:
ed:00:ff:56:8a:d7:a0:8f:86:79:eb:60:3b:3b:9b:
46:65:fa:41:ee:ea:e5:90:78:b9:fb:5d:57:e6:42:
89:97:5b:7f:ff:3c:60:39:b7:47:da:fe:20:2b:40:
80:61:3f:65:e9:75:e1:bd:93:35:45:6c:24:d0:97:
07:6a:cd:da:f4:54:5a:e9:c9:7d:e0:9b:03:e5:1f:
77:e5:d9:cf:b0:1c:70:9b:aa:51:c9:7f:aa:12:84:
f3:f1:26:92:77:1c:fd:13:42:f1:27:24:d7:f8:f4:
2e:73:37:69:3d:29:46:57:7c:eb:78:2e:21:db:d7:
83:18:2a:70:f5:b9:03:8e:06:ec:2b:f5:3d:2a:82:
8b:7e:e1:0f:28:48:18:98:b4:ec:4d:47:6e:51:61:
34:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:97:CB:DA:8D:96:F0:2A:C2:CC:13:06:AC:69:17:C1:37:73:AC:95
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/UZfL2o2W8CrCzBMGrGkXwTdzrJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.19.0/24
141.11.21.0/24
141.11.136.0/22
Signature Algorithm: sha256WithRSAEncryption
16:a5:91:0b:80:5c:de:e8:bf:c2:38:21:7e:87:34:a7:71:2f:
a0:97:99:bc:d0:d4:ad:00:78:6d:ed:9f:ae:68:d8:41:1d:e5:
c6:c7:84:3d:77:c4:d9:2f:2a:1b:53:f7:20:90:30:ff:22:9c:
12:fd:52:bf:60:6b:dd:d6:26:75:73:e9:a2:5a:d9:29:fa:d2:
53:86:78:f7:00:0b:f9:02:25:d1:1c:f1:a6:38:cb:10:67:2f:
81:46:e0:3d:ea:40:0a:e5:e6:39:4b:e4:7e:6f:b8:f1:ec:b9:
c4:d9:01:49:a1:47:ff:3a:f3:f2:70:e2:6f:06:e8:35:e9:01:
0d:3f:23:6b:2c:d1:88:b0:bb:42:bc:ac:3b:89:b2:a0:1e:03:
f2:6e:7e:ef:38:01:33:fb:6d:01:b6:7f:c0:2d:75:be:57:0d:
9d:23:c8:f8:ad:cf:ed:62:7f:ce:47:1d:a5:58:60:64:b0:ea:
b0:a6:d9:02:cf:3f:1e:39:fb:51:0b:46:be:e0:2a:86:e8:14:
fd:9a:91:5e:e4:b7:e7:1a:0a:8f:d1:00:34:06:1d:c1:7f:ca:
99:ec:3b:71:e2:91:14:8d:e9:2b:10:0b:79:64:f9:ab:35:ab:
cb:12:70:f7:c0:e6:b2:9c:49:c1:7b:ce:c5:b4:90:3a:3d:55:
f4:eb:67:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:31 2025 by rpki-client