Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Wi4RU5mEAnnh6IW6POZz8eAN2Tg.roa
File: Wi4RU5mEAnnh6IW6POZz8eAN2Tg.roa (raw, json)
Hash identifier: 2D6Lg4rsXCBRNJx86mmkMv1eI62V0VWub3awbwZ5FOQ=
Subject key identifier: 5A:2E:11:53:99:84:02:79:E1:E8:85:BA:3C:E6:73:F1:E0:0D:D9:38
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0364FC5B
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Wi4RU5mEAnnh6IW6POZz8eAN2Tg.roa
Signing time: Tue 08 Mar 2022 10:38:08 +0000
ROA not before: Tue 08 Mar 2022 10:38:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 141.11.224.0/22 maxlen: 24
141.11.230.0/23 maxlen: 24
141.11.228.0/23 maxlen: 24
141.11.232.0/22 maxlen: 24
141.11.236.0/22 maxlen: 24
141.11.98.0/24 maxlen: 24
141.11.99.0/24 maxlen: 24
141.11.103.0/24 maxlen: 24
141.11.101.0/24 maxlen: 24
141.11.102.0/24 maxlen: 24
141.11.100.0/24 maxlen: 24
141.11.110.0/24 maxlen: 24
141.11.124.0/24 maxlen: 24
141.11.125.0/24 maxlen: 24
141.11.123.0/24 maxlen: 24
141.11.121.0/24 maxlen: 24
141.11.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56949851 (0x364fc5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Mar 8 10:38:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a2e115399840279e1e885ba3ce673f1e00dd938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:6a:91:f5:d6:f9:76:68:d2:a0:7a:6b:0d:
27:9b:c6:e1:67:7b:6a:04:b9:13:66:3e:7f:8d:e6:
bc:60:86:91:47:9f:b2:ac:a7:b5:52:c0:e7:68:01:
d5:be:41:10:a4:6a:15:8f:c4:a2:58:81:78:95:7e:
a2:4c:fe:84:0e:da:8a:38:32:cb:58:da:33:86:d7:
17:dc:f4:a2:db:e4:dc:32:92:de:e6:ba:ce:89:f8:
ef:2e:56:d9:02:b4:d2:42:7c:0f:be:f5:d1:63:40:
05:53:f8:10:d8:41:86:41:1a:07:93:22:a7:19:8b:
fc:1b:62:09:6d:b6:d9:3d:e4:7e:a9:e7:71:d8:58:
c0:7b:33:a1:09:cf:3c:8c:7b:01:14:5c:64:5a:e0:
4b:15:71:f3:47:15:46:d9:d9:41:b2:d9:e8:07:6e:
8f:3c:36:64:a3:95:66:2e:82:7e:53:18:bf:29:91:
7b:48:0d:96:b3:41:57:7b:b1:e8:57:07:0a:61:bc:
f0:ee:14:fd:60:bc:f6:90:64:ec:55:a2:bf:91:ec:
ab:32:7c:49:b2:ce:00:10:5f:c5:67:74:bd:c6:a9:
d9:ff:ca:81:06:53:9d:4e:86:1d:5d:8d:23:a2:9e:
00:ce:47:36:cb:30:e8:ad:f4:85:fa:17:3f:b1:cc:
78:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2E:11:53:99:84:02:79:E1:E8:85:BA:3C:E6:73:F1:E0:0D:D9:38
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Wi4RU5mEAnnh6IW6POZz8eAN2Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.98.0-141.11.103.255
141.11.110.0/24
141.11.121.0/24
141.11.123.0-141.11.126.255
141.11.224.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:af:a2:d4:4e:68:ee:a9:d0:a3:6d:7e:ee:b3:36:f3:b8:00:
76:9a:78:ca:99:74:8b:ad:6c:cc:21:c3:30:50:6d:cb:bd:02:
dc:4a:20:96:80:7b:7f:45:a9:9f:c3:85:f1:8b:34:d8:63:4c:
da:5f:fe:ae:b3:5b:40:c4:ff:5d:f3:67:5f:a8:9c:88:3e:8a:
bb:e0:00:1d:4e:b1:c2:6e:b0:e9:c1:e1:bb:5f:cb:57:f7:8a:
8d:e7:20:8c:e3:c9:54:17:0f:eb:dc:e9:75:f3:15:3a:69:4d:
0e:98:04:d3:0c:97:f7:16:37:4a:8e:6c:9f:23:43:d8:a9:69:
c3:93:02:9d:a8:54:97:46:aa:9b:ad:fe:de:8f:e0:9f:66:79:
bd:b5:61:4e:65:aa:3c:78:70:8c:9a:f9:f1:95:95:b5:77:05:
79:90:de:8b:ce:2e:d6:3f:57:0f:b2:e3:ff:76:46:25:8b:cd:
01:49:92:2e:d9:10:a6:62:5b:a8:84:c4:59:c2:bd:5f:e5:47:
88:b3:19:ab:69:63:d2:b0:a3:92:93:b7:41:c7:66:ed:2c:4e:
88:f6:32:fa:51:ab:d5:01:e2:96:50:39:1a:74:64:13:74:d8:
f7:70:3d:47:44:db:61:68:ef:32:e2:2d:71:d8:5a:90:0c:f6:
09:fd:39:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:22:28 2025 by rpki-client