Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/_1B3rgLr1u7kErbFwuumM_eAl3Q.roa
File: _1B3rgLr1u7kErbFwuumM_eAl3Q.roa (raw, json)
Hash identifier: 5mWN0ZxNYdefyFqx8vsVdC6EKP9fV56UTB8fLAP6pBg=
Subject key identifier: FF:50:77:AE:02:EB:D6:EE:E4:12:B6:C5:C2:EB:A6:33:F7:80:97:74
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0184ED04BB3809414464B09AC9920B26395F
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/_1B3rgLr1u7kErbFwuumM_eAl3Q.roa
Signing time: Wed 07 Dec 2022 14:37:00 +0000
ROA not before: Wed 07 Dec 2022 14:37:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396998
IP address blocks: 141.11.230.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ed:04:bb:38:09:41:44:64:b0:9a:c9:92:0b:26:39:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Dec 7 14:37:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff5077ae02ebd6eee412b6c5c2eba633f7809774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e4:22:be:f2:1d:7a:fd:09:ab:b3:0f:08:2b:
25:1a:3a:5f:a4:80:94:95:b6:b4:fc:aa:ca:18:01:
50:e6:ae:d1:37:83:3c:fc:65:af:0b:84:af:39:e2:
a3:fc:59:0f:eb:61:b2:57:0a:62:f1:68:48:98:f7:
bb:02:e7:a7:d4:b6:73:92:39:8e:70:64:bb:a1:19:
8b:9e:4f:be:d9:83:e4:ba:74:fb:fa:21:96:bf:68:
1a:53:cd:b8:fb:25:bd:0b:eb:58:c4:32:14:be:69:
a5:62:fa:ce:98:c7:98:06:96:90:fb:a4:7a:64:4c:
ce:65:61:99:c3:76:b3:c5:a7:45:49:e7:d1:09:5f:
a0:fd:30:82:6f:20:1f:37:a5:3b:d4:44:54:aa:0f:
3c:20:99:ff:a7:20:d5:53:54:50:93:79:dc:6b:b2:
a7:b8:5b:4c:1c:77:52:e4:a2:a0:19:13:a3:88:98:
45:96:8b:b2:62:fa:1c:55:40:5e:65:f5:a9:95:de:
3f:b7:cc:41:e9:cf:8a:85:93:ca:ff:90:5c:f3:0a:
0e:dd:56:df:16:2f:9c:52:45:5e:2a:ef:f1:43:93:
54:8c:25:d2:a7:9b:52:c4:d7:ad:31:6e:71:49:9d:
b5:b0:00:b6:f5:77:30:a7:db:7b:f7:03:7c:01:5f:
79:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:50:77:AE:02:EB:D6:EE:E4:12:B6:C5:C2:EB:A6:33:F7:80:97:74
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/_1B3rgLr1u7kErbFwuumM_eAl3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.230.0/23
Signature Algorithm: sha256WithRSAEncryption
99:50:aa:82:6e:d2:50:e5:f4:ac:87:7d:98:59:9a:47:cb:4d:
db:83:e9:ab:f6:38:75:2c:48:f3:24:90:0f:a9:59:e7:93:86:
3b:cb:8a:8e:5c:04:3c:69:96:41:c8:5d:56:35:34:8f:a5:42:
12:d2:24:c1:9c:c8:ff:a9:07:35:81:a3:be:1e:a6:9b:5a:20:
34:99:78:01:b4:fc:14:bb:e8:78:67:97:5e:ea:ab:f2:1b:7e:
8e:3e:7d:cd:4a:ea:74:d1:dd:14:ee:43:82:66:05:16:47:1b:
b9:43:53:8c:2a:30:4a:05:8d:5d:1d:f0:b0:80:c7:82:5e:33:
c8:24:7d:c7:c0:6d:44:3a:64:fb:9a:2c:6e:e9:ca:8a:97:45:
ff:3e:27:81:20:dc:59:3b:a5:e7:6d:95:e9:b8:51:f3:09:e3:
56:75:ef:ce:6b:65:72:ad:ef:3a:cd:de:f7:1c:42:62:be:1c:
77:d8:3d:fb:7d:fa:e4:86:72:5c:19:49:d1:49:66:ca:7c:a4:
b6:58:b2:30:d2:6b:d5:05:e0:bc:92:a5:c3:83:e0:3f:e0:7f:
6a:59:ef:d9:01:e6:be:a4:6b:7d:30:1a:3b:79:3f:43:43:0a:
42:d9:10:e6:87:1d:4e:e0:5d:73:77:a4:56:a0:fd:79:db:9d:
8f:9b:8e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:32 2025 by rpki-client