Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Zx1CMhEfbHNLt4YE-wO5kPUrtSc.roa
File: Zx1CMhEfbHNLt4YE-wO5kPUrtSc.roa (raw, json)
Hash identifier: 0tF7W20yCEVk/yY1ipspt6aVjO7vAUJYSlwhP8expnw=
Subject key identifier: 67:1D:42:32:11:1F:6C:73:4B:B7:86:04:FB:03:B9:90:F5:2B:B5:27
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 043A495B
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Zx1CMhEfbHNLt4YE-wO5kPUrtSc.roa
Signing time: Wed 27 Apr 2022 17:27:00 +0000
ROA not before: Wed 27 Apr 2022 17:27:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.11.44.0/22 maxlen: 24
141.11.43.0/24 maxlen: 24
141.11.40.0/22 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.42.0/24 maxlen: 24
141.11.41.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.80.0/20 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.0.0/24 maxlen: 24
141.11.10.0/23 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.22.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.20.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.37.0/24 maxlen: 24
141.11.36.0/22 maxlen: 24
141.11.38.0/24 maxlen: 24
141.11.33.0/24 maxlen: 24
141.11.32.0/22 maxlen: 24
141.11.35.0/24 maxlen: 24
141.11.34.0/24 maxlen: 24
141.11.160.0/24 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.192.0/19 maxlen: 24
141.11.92.0/22 maxlen: 24
141.11.128.0/19 maxlen: 24
141.11.224.0/20 maxlen: 24
141.11.240.0/21 maxlen: 24
141.11.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70928731 (0x43a495b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 27 17:27:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=671d4232111f6c734bb78604fb03b990f52bb527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a3:d9:63:67:bc:87:e5:f3:44:89:45:16:3d:
10:f1:c3:a8:71:a0:be:17:71:a2:ea:61:c3:9a:f5:
96:3b:bf:43:c0:92:f8:85:6b:60:0b:75:69:8c:a5:
60:cb:fe:53:0e:5e:2d:0a:e0:bd:0a:61:6d:4b:dd:
ca:03:b4:7e:dd:3a:e9:f5:e8:16:e0:d1:12:3f:5f:
02:45:ce:7a:52:5a:2a:0e:ac:2c:c7:9d:7c:0d:73:
c3:32:7d:f1:03:39:e7:01:da:56:3f:cb:4f:e5:ba:
c9:92:72:be:f5:09:fd:1f:35:e8:3a:d3:5a:ff:6e:
22:0f:e3:5d:8f:a5:48:2f:95:e4:36:a1:a6:b0:56:
a5:2f:ae:6a:72:1c:42:a4:d3:3d:f9:f5:7b:f5:73:
a0:46:1d:b5:9b:09:4c:ed:e2:3e:cf:77:30:a0:7b:
c2:7e:5e:65:22:63:37:c7:cb:2e:9d:36:2c:93:b9:
d5:fe:14:21:90:74:96:25:b0:03:32:cb:57:be:4f:
d4:65:cf:18:d0:cd:68:d6:62:aa:fa:9f:12:59:30:
82:c0:f7:13:b0:8c:3c:23:3f:aa:1f:d5:89:5e:f0:
57:6e:c4:8a:d9:6f:f7:51:f0:2d:5e:30:05:10:51:
e8:81:b5:63:6c:1b:06:86:de:d8:bb:09:12:64:df:
74:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1D:42:32:11:1F:6C:73:4B:B7:86:04:FB:03:B9:90:F5:2B:B5:27
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Zx1CMhEfbHNLt4YE-wO5kPUrtSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0-141.11.2.255
141.11.10.0/23
141.11.17.0-141.11.18.255
141.11.20.0-141.11.22.255
141.11.25.0/24
141.11.28.0/24
141.11.31.0-141.11.47.255
141.11.80.0/20
141.11.128.0-141.11.160.255
141.11.176.0/24
141.11.182.0/23
141.11.192.0-141.11.251.255
Signature Algorithm: sha256WithRSAEncryption
1a:29:7b:9a:37:31:88:0e:4a:21:67:af:80:89:aa:a2:2d:dc:
ea:93:55:77:b9:2e:8e:d5:86:c0:7a:09:f3:92:52:cd:27:39:
44:19:c2:64:6f:ca:18:0b:3c:51:33:e2:f4:65:0c:7a:e2:7d:
32:61:c5:9d:35:40:74:b3:3a:93:ea:f2:1b:74:bb:ca:cf:69:
84:b0:b0:d8:05:80:a5:be:3f:da:42:12:40:a6:d8:3b:2a:89:
40:8f:35:28:17:3a:88:50:8c:d0:09:8c:55:3b:76:57:95:4d:
59:dc:3e:87:97:d2:87:75:4a:17:bd:b0:8b:c8:9f:e2:ca:4c:
c7:b3:1b:d3:85:ea:bd:8a:1f:72:cb:91:35:17:65:63:5a:d4:
93:06:fa:8e:60:38:48:1a:7f:99:ec:55:53:6c:8e:51:95:23:
d5:d2:c1:07:a6:0a:2d:d6:44:13:53:00:49:95:7b:d2:6f:20:
2c:34:52:39:29:f3:e4:e8:52:1f:62:30:7c:7a:00:91:12:3a:
e2:02:50:ab:a5:eb:88:33:15:d6:df:28:ff:a1:c3:70:a2:7b:
f2:85:d0:54:9b:dc:94:9c:9a:e8:c6:58:b8:28:35:a4:e8:52:
d7:71:74:7b:ec:d1:68:9d:34:d5:63:60:c3:f1:c5:ee:71:63:
93:e5:34:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:32 2025 by rpki-client