Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/W8beNbrCfTVpU0d4ClROXuIqT1s.roa
File: W8beNbrCfTVpU0d4ClROXuIqT1s.roa (raw, json)
Hash identifier: pI0AVdz5Im/aOPi8SeRkmK0jTQYg1w0WbaKCtYzvrlE=
Subject key identifier: 5B:C6:DE:35:BA:C2:7D:35:69:53:47:78:0A:54:4E:5E:E2:2A:4F:5B
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0182449605D61EBA77E73A6B0AA17EB7E190
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/W8beNbrCfTVpU0d4ClROXuIqT1s.roa
Signing time: Thu 28 Jul 2022 11:34:18 +0000
ROA not before: Thu 28 Jul 2022 11:34:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 141.11.187.0/24 maxlen: 24
141.11.188.0/24 maxlen: 24
141.11.123.0/24 maxlen: 24
141.11.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:44:96:05:d6:1e:ba:77:e7:3a:6b:0a:a1:7e:b7:e1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 28 11:34:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bc6de35bac27d35695347780a544e5ee22a4f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b4:c6:fa:cb:ed:7f:e6:df:70:e2:d6:92:32:
8a:26:9b:de:49:3f:0f:ad:1e:34:fa:5e:5c:29:88:
fa:86:50:ce:48:d4:22:2b:61:b0:6b:f6:4b:7a:6f:
a3:aa:2f:87:97:6e:ba:69:8e:80:9b:35:c5:a5:15:
18:18:cb:8f:bb:e5:8d:55:ca:58:dd:52:cb:37:a6:
21:14:20:a2:68:9a:db:d1:a0:a7:4c:c5:e3:44:8f:
72:e7:f5:08:a3:3c:62:93:42:34:d0:b6:ce:73:bb:
cf:7f:52:ff:6f:6c:7d:23:26:1e:cd:36:fe:30:76:
60:f2:fa:ae:ae:14:00:f0:3e:9b:c5:42:84:40:0a:
3b:c6:0e:13:1e:bc:aa:7b:e6:ce:9c:75:e3:35:59:
d3:89:34:39:bd:b1:b8:7b:dc:f5:b8:71:c7:5b:22:
95:2e:72:13:a6:fa:81:9e:ea:a3:d7:f4:b5:77:c6:
48:b2:42:fc:5f:b3:41:76:89:be:7a:da:72:77:54:
04:e2:8b:93:db:95:a2:27:cc:c5:70:24:0b:dc:75:
eb:e1:83:11:99:6a:08:f6:6b:4a:92:ab:8a:2a:87:
86:df:52:1c:28:f4:04:10:fe:88:19:ab:96:10:e2:
e4:c7:a3:a3:66:19:d2:16:51:2e:21:c7:51:e5:67:
31:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C6:DE:35:BA:C2:7D:35:69:53:47:78:0A:54:4E:5E:E2:2A:4F:5B
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/W8beNbrCfTVpU0d4ClROXuIqT1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.123.0/24
141.11.125.0/24
141.11.187.0-141.11.188.255
Signature Algorithm: sha256WithRSAEncryption
7e:4e:95:ba:fb:ae:13:02:3a:69:cb:7f:b1:cd:40:d0:a5:58:
1f:98:5f:9b:92:10:85:b4:06:2e:ac:d9:67:d4:a5:60:c9:88:
88:02:4d:37:33:a2:ba:99:45:e6:ef:55:33:72:df:48:38:a5:
25:d9:f5:93:56:7b:97:1e:bf:89:b1:74:72:5b:82:c4:19:41:
c1:50:e1:64:7d:40:65:a0:86:3a:cf:fc:e1:a3:c1:c6:97:e7:
57:fd:b6:40:a6:1c:94:6b:b1:c7:6a:4c:8e:e7:dc:9e:df:f6:
af:77:1f:d2:25:cc:92:eb:df:b1:f2:4c:a0:10:99:3b:d5:48:
ee:a0:97:8f:41:67:81:3b:a0:f3:00:d8:ba:75:04:30:43:d2:
5c:c5:0f:8d:2d:c4:70:8f:f5:55:a5:d7:7f:44:36:97:2c:a2:
90:10:f5:76:b6:13:92:d0:3f:08:20:91:13:b1:b7:a8:24:da:
4d:b6:fd:97:de:5f:01:00:f9:15:8e:dc:fe:d2:c6:4b:0d:d1:
87:34:d3:b3:38:03:76:dd:83:21:cb:e6:58:bc:f7:ef:49:34:
41:d2:6c:1c:df:ea:59:7b:a8:45:9f:70:d3:e6:e0:ad:e2:14:
16:e3:bf:cf:1f:04:a3:a4:6d:7f:16:0e:59:91:3d:ea:77:84:
4e:a0:dc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:45 2025 by rpki-client