Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/_16KpteCTcmEgYBUj_ecMwLqE_c.roa
File: _16KpteCTcmEgYBUj_ecMwLqE_c.roa (raw, json)
Hash identifier: HdajeFnEVGyerKTJ7HFsXoAXiru2sRKLRs7YqNv/aMs=
Subject key identifier: FF:5E:8A:A6:D7:82:4D:C9:84:81:80:54:8F:F7:9C:33:02:EA:13:F7
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0182C7D97EE7C9F512EBE03A69D6E6A812F4
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/_16KpteCTcmEgYBUj_ecMwLqE_c.roa
Signing time: Mon 22 Aug 2022 23:18:15 +0000
ROA not before: Mon 22 Aug 2022 23:18:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 141.11.204.0/22 maxlen: 24
141.11.216.0/22 maxlen: 24
141.11.224.0/22 maxlen: 24
141.11.220.0/22 maxlen: 24
141.11.128.0/22 maxlen: 24
141.11.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c7:d9:7e:e7:c9:f5:12:eb:e0:3a:69:d6:e6:a8:12:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Aug 22 23:18:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff5e8aa6d7824dc9848180548ff79c3302ea13f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6a:e7:a1:d7:e0:c5:08:c7:84:dd:d4:7b:d9:
43:a0:9c:a9:63:b8:45:59:75:1f:ea:8f:bb:09:29:
92:1a:f7:67:43:d3:1f:b6:09:2c:35:ef:9a:1d:de:
a2:9a:5d:bd:cf:9c:79:6e:17:d7:97:3c:9d:6d:f3:
49:b8:f1:4d:da:1d:5a:31:25:f1:ad:f8:d4:aa:25:
00:98:be:ca:ce:1b:ef:87:c9:a1:ed:e8:a3:79:29:
4a:bc:c4:c1:3b:f5:1b:32:cb:45:09:12:08:6e:af:
83:4b:e5:1e:17:6c:35:54:22:93:82:8f:f2:4b:a9:
97:43:e8:05:af:34:30:0e:58:a4:e7:f5:7e:56:d0:
f9:b0:22:30:82:d4:f8:45:6d:fc:00:85:14:28:2f:
a8:13:bb:50:7a:55:73:a6:7b:4b:7f:34:65:ec:38:
57:5f:0b:b3:14:8c:44:df:5e:cb:9e:45:b6:10:90:
56:cc:94:f0:63:e6:07:73:7a:72:ce:5c:02:8a:3a:
be:57:9c:0f:a0:29:8f:2b:f3:73:05:29:1f:d2:28:
15:0c:df:ca:4e:0a:34:76:c6:61:0a:2a:c0:8a:fc:
26:eb:33:bd:c5:52:dc:15:74:b4:8a:61:a1:2b:97:
d4:1e:c6:02:c8:87:cf:8a:8f:6e:d3:b6:f2:bb:90:
fe:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5E:8A:A6:D7:82:4D:C9:84:81:80:54:8F:F7:9C:33:02:EA:13:F7
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/_16KpteCTcmEgYBUj_ecMwLqE_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.21.0/24
141.11.128.0/22
141.11.204.0/22
141.11.216.0-141.11.227.255
Signature Algorithm: sha256WithRSAEncryption
30:ac:fd:67:22:95:f2:48:5b:48:83:8d:3f:f7:d4:b7:26:f7:
60:43:9b:00:b6:4c:9a:f6:dc:f0:5b:e4:eb:f5:3c:17:97:9c:
0b:35:8f:69:fe:a5:29:a9:a5:bb:15:11:a1:ed:3a:8d:36:be:
28:02:47:ee:1c:d0:83:d5:a7:a7:46:50:70:d7:a5:16:ee:88:
cb:f1:69:41:3d:68:fc:a0:67:61:e7:6c:ed:5a:3b:57:7d:2d:
36:dd:a2:3e:8b:46:c6:e8:4c:0a:e2:d7:a3:a1:fa:ab:85:97:
14:16:67:71:b7:ed:72:8f:d5:19:88:e9:0c:5a:4c:27:0e:8e:
eb:23:f8:2d:b7:2c:42:22:92:b4:21:0a:d7:89:3a:a8:6e:d3:
c8:a6:89:04:ac:9a:12:a4:e7:e5:bc:21:3b:86:1a:11:06:eb:
c3:c5:17:3e:70:e2:c8:1a:57:62:05:b0:b5:fc:de:e5:37:3c:
bb:3b:e8:b3:1a:36:e8:4a:61:fa:30:5e:fb:ed:3a:9b:8d:13:
55:4a:87:0b:61:60:69:37:96:d0:68:d9:f2:74:e4:d4:6b:18:
74:42:53:93:96:2c:6a:f1:35:8a:22:13:60:d3:d5:78:7c:ce:
e8:f6:7e:14:6d:05:21:48:53:c1:e5:e4:ff:eb:64:f4:aa:33:
9f:dc:3b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:02 2025 by rpki-client