Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/VX8DtyM1RRYR4ZeNI5cATvXCpGU.roa
File: VX8DtyM1RRYR4ZeNI5cATvXCpGU.roa (raw, json)
Hash identifier: QFLCW9PcuHPNCXOs608QqJyq8NbaN4iL+bMQuqpxUSA=
Subject key identifier: 55:7F:03:B7:23:35:45:16:11:E1:97:8D:23:97:00:4E:F5:C2:A4:65
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0181DDF18C83F75B08B77BF1E2FE1DC670D2
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/VX8DtyM1RRYR4ZeNI5cATvXCpGU.roa
Signing time: Fri 08 Jul 2022 13:13:23 +0000
ROA not before: Fri 08 Jul 2022 13:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1030
IP address blocks: 141.11.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:dd:f1:8c:83:f7:5b:08:b7:7b:f1:e2:fe:1d:c6:70:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 8 13:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=557f03b72335451611e1978d2397004ef5c2a465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b5:23:89:04:7d:88:98:d9:b7:3e:ff:2f:5c:
19:d8:8c:19:ed:6a:5e:cc:2e:24:fb:3d:25:1d:b2:
f2:ac:d1:b1:57:81:0b:65:17:ea:84:d2:a3:ea:05:
cf:77:c7:53:d5:38:31:bb:b9:83:f3:cf:6d:5b:c1:
ec:27:c5:37:40:a4:56:92:5d:59:c6:d8:39:8b:51:
be:7b:a2:b0:84:d5:f3:0a:7a:7e:30:98:e3:a3:e0:
7e:6a:f6:fb:fe:ed:33:7f:34:e2:dd:2e:4c:b8:10:
d3:e2:a1:2b:99:00:d3:35:5c:01:a6:60:19:e8:df:
15:96:64:7f:54:cf:1e:d7:d5:60:28:2f:4b:62:e8:
22:cf:b2:7b:8a:ef:5e:46:55:c6:47:f0:f1:31:09:
1c:ce:aa:e6:d4:a2:c5:1e:28:b6:93:9a:f1:c2:9a:
6d:bf:d0:6b:99:25:70:53:ec:cc:6e:72:d9:d5:f9:
ad:29:5d:36:99:0f:d2:2f:c8:50:90:de:4e:39:4d:
ed:c9:cb:6c:4c:fe:33:91:51:a9:3d:46:2d:04:e9:
b7:99:71:fd:d9:b5:d6:a6:4e:b2:ac:4b:6f:0d:be:
2e:76:5f:a2:48:09:16:d2:86:51:88:76:20:fc:93:
a8:ee:46:2c:ed:be:ef:70:89:3d:49:26:e4:0e:1b:
33:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7F:03:B7:23:35:45:16:11:E1:97:8D:23:97:00:4E:F5:C2:A4:65
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/VX8DtyM1RRYR4ZeNI5cATvXCpGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.111.0/24
Signature Algorithm: sha256WithRSAEncryption
99:76:f7:de:fa:b0:b2:58:0f:14:0f:e4:b3:b0:c3:fc:98:28:
c5:a8:76:2e:2c:01:2a:17:32:62:b6:9c:c0:7c:7e:1b:87:1f:
7d:70:6b:d0:58:fa:35:a9:6c:1a:1e:97:13:bc:d7:47:d2:72:
fd:37:dc:fc:a3:b4:33:4c:6c:83:42:d8:5e:86:74:58:f1:d7:
71:68:44:a5:fa:34:fd:26:80:41:33:5a:20:8e:cf:b3:47:d3:
8f:15:c3:f0:df:ec:39:b9:39:59:8f:3d:82:b9:c4:f9:df:7f:
aa:ef:1e:a5:0a:3c:1c:89:39:3d:ca:38:07:02:5d:f3:fa:35:
1c:af:c1:ac:33:84:37:e7:c9:15:ea:03:4c:97:67:50:19:4a:
98:98:67:f2:ac:11:52:0a:bb:f4:a4:44:a9:8b:43:25:62:ee:
17:c0:e7:b2:ce:03:28:3d:3a:db:97:3c:78:74:a6:a2:5b:ff:
05:00:c0:8d:d4:da:30:01:7b:52:8a:85:59:10:a6:12:58:e5:
1e:de:22:03:89:9e:a5:09:71:d5:47:8e:71:5e:73:a1:1a:ba:
f0:58:9d:0a:65:07:be:55:e2:7d:9f:ca:87:25:38:5e:9a:9c:
ab:e5:b2:86:91:a0:d2:7b:2b:31:3c:e7:1b:08:4a:d3:fb:95:
0b:f1:e3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:02 2025 by rpki-client