Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/WXpf2Cqxf1FdA9oJ3-RTx_RAt7M.roa
File: WXpf2Cqxf1FdA9oJ3-RTx_RAt7M.roa (raw, json)
Hash identifier: V9U6xhuxzedH8ZK5s5P4VbZj/af200Upb/MjEpiPtAs=
Subject key identifier: 59:7A:5F:D8:2A:B1:7F:51:5D:03:DA:09:DF:E4:53:C7:F4:40:B7:B3
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0183A7F683BE3375EBCCA693ADDD7B62EE3F
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/WXpf2Cqxf1FdA9oJ3-RTx_RAt7M.roa
Signing time: Wed 05 Oct 2022 11:44:54 +0000
ROA not before: Wed 05 Oct 2022 11:44:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 141.11.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a7:f6:83:be:33:75:eb:cc:a6:93:ad:dd:7b:62:ee:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Oct 5 11:44:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=597a5fd82ab17f515d03da09dfe453c7f440b7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:15:8a:d2:60:3c:41:29:fd:82:db:b6:ee:32:
a0:74:55:e3:fe:e1:44:93:4f:d3:2c:6d:7b:01:00:
38:99:3e:4a:b0:03:21:f7:8b:8b:9b:94:0f:9f:7a:
37:70:00:39:f6:fd:6d:fb:ef:7b:45:52:01:4f:f4:
39:70:32:74:3b:ae:d8:4f:d3:fc:9b:da:a4:9f:eb:
b4:b6:1e:4a:4c:a6:d0:14:0f:72:57:e6:59:6a:f6:
38:b7:9b:e9:da:c0:2f:34:4b:25:72:e5:db:3b:a5:
68:5b:0a:c8:e7:e2:8e:af:10:b9:9b:c2:b8:65:e5:
05:3b:87:ab:82:42:7d:e9:23:16:81:f9:71:83:43:
25:a1:67:2d:f1:25:08:70:b3:bb:10:8d:13:e5:33:
34:e0:4e:90:31:2d:0c:be:4f:01:72:a7:74:df:af:
79:ef:9d:b9:91:c9:e8:b4:87:82:8c:dd:d3:12:2b:
de:42:cc:6a:fa:7a:17:41:ab:c6:0a:05:58:b8:a9:
d3:35:80:14:d7:14:eb:8f:8f:de:27:eb:96:64:ac:
bb:2c:9e:7d:54:fa:0c:1d:72:a5:89:8c:31:3c:2f:
24:2f:92:db:d6:63:b7:0c:55:79:64:c4:16:7a:d3:
ca:7e:39:fc:82:17:88:95:41:83:f8:7b:54:e8:e1:
c1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7A:5F:D8:2A:B1:7F:51:5D:03:DA:09:DF:E4:53:C7:F4:40:B7:B3
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/WXpf2Cqxf1FdA9oJ3-RTx_RAt7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.38.0/24
Signature Algorithm: sha256WithRSAEncryption
68:09:b3:e2:1a:84:84:7e:0d:11:cf:f5:db:cb:9e:66:25:16:
8d:ec:f3:e9:0a:2a:36:fc:0d:44:a2:31:1b:d8:85:ed:60:d4:
28:57:9e:83:9e:64:e2:2a:86:de:a2:a0:69:29:ff:36:a0:77:
07:2a:f5:31:fe:a2:64:a0:fe:8b:e5:22:80:46:2c:63:ee:cf:
67:44:8c:b6:1e:0b:e4:20:14:bb:75:71:9c:e9:5b:15:9a:bf:
d5:97:f5:35:96:3a:60:6a:2c:16:d6:51:a8:f7:7e:b0:e3:9f:
64:e3:9d:fd:b3:61:5b:f5:cc:41:d9:b2:6f:f4:5c:24:4e:d4:
83:4e:15:17:9c:4e:c6:d2:9c:6e:b9:41:1f:85:89:77:3a:2d:
d5:b0:4e:45:26:2b:b8:d1:b8:88:ea:66:58:f6:4b:3e:e5:c6:
66:ff:eb:1a:6c:b6:30:03:b7:6f:87:42:8f:3f:a1:e2:b6:ca:
f7:f1:31:7f:d9:02:46:34:7d:1b:3e:3c:cf:aa:4e:97:89:bd:
7a:08:b2:5b:7f:57:e6:c0:ee:b0:87:f4:79:a4:cf:24:a4:db:
0c:c6:45:ed:d5:a9:b7:82:f5:e7:1e:ba:c2:8c:dc:50:81:1f:
ec:12:9f:ed:b4:a2:65:59:8e:a1:be:0b:62:15:c9:88:2f:32:
b6:d9:0d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:24 2025 by rpki-client