Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/_8cMzvQgyt5p2VAb_GiznV71yDs.roa
File: _8cMzvQgyt5p2VAb_GiznV71yDs.roa (raw, json)
Hash identifier: UbZihnr4Jf6gakUEVuPMZiNarlYGuaZoD/8bOfWUCFQ=
Subject key identifier: FF:C7:0C:CE:F4:20:CA:DE:69:D9:50:1B:FC:68:B3:9D:5E:F5:C8:3B
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 041743E1
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/_8cMzvQgyt5p2VAb_GiznV71yDs.roa
Signing time: Fri 22 Apr 2022 13:01:23 +0000
ROA not before: Fri 22 Apr 2022 13:01:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.11.44.0/22 maxlen: 24
141.11.43.0/24 maxlen: 24
141.11.40.0/22 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.42.0/24 maxlen: 24
141.11.41.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.80.0/20 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.0.0/24 maxlen: 24
141.11.10.0/23 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.22.0/24 maxlen: 24
141.11.19.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.20.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.37.0/24 maxlen: 24
141.11.36.0/22 maxlen: 24
141.11.38.0/24 maxlen: 24
141.11.33.0/24 maxlen: 24
141.11.32.0/22 maxlen: 24
141.11.35.0/24 maxlen: 24
141.11.34.0/24 maxlen: 24
141.11.160.0/24 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.192.0/19 maxlen: 24
141.11.92.0/22 maxlen: 24
141.11.128.0/19 maxlen: 24
141.11.224.0/20 maxlen: 24
141.11.240.0/21 maxlen: 24
141.11.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68633569 (0x41743e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 22 13:01:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffc70ccef420cade69d9501bfc68b39d5ef5c83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:2d:5b:d2:af:03:6f:8e:1f:eb:86:4d:02:
17:9b:29:ed:fe:1a:36:69:e1:fc:8d:11:92:30:5a:
6d:ba:c7:e5:ea:5a:59:9a:e1:b9:f5:5b:87:ac:4a:
97:61:ed:cb:18:98:dd:de:80:69:17:c2:85:1e:e1:
63:9b:f7:8b:f3:4d:52:92:f1:d4:6e:02:4d:d5:7c:
16:e6:4d:e6:39:11:f5:04:44:93:19:be:66:3c:57:
f9:0d:13:f2:60:72:70:ed:5b:38:cd:77:bc:83:67:
e3:6d:d3:c3:f5:ad:22:fa:97:63:9e:b6:93:ed:7f:
7e:fa:18:93:1d:b8:66:49:80:67:d4:da:cf:60:59:
12:54:f4:00:f4:54:a2:fd:91:6e:a7:7e:6e:42:54:
af:c7:23:13:3c:e0:4e:e9:2f:a6:bb:7d:1d:8e:7d:
02:23:dd:74:26:be:57:78:c3:fb:c0:cc:e0:90:9b:
eb:58:6f:a4:80:a9:40:69:7e:87:e7:12:cf:c0:53:
1f:16:d9:c6:b3:3f:50:68:c2:d7:ec:0c:88:7e:56:
51:f1:d0:a3:94:63:7b:aa:22:59:dd:67:89:f4:8c:
f6:50:55:f9:b7:42:bd:f6:a8:5e:c6:5d:4f:df:97:
d2:7e:35:ae:95:e6:5b:8f:b5:f7:6b:3b:0f:0f:4c:
fb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C7:0C:CE:F4:20:CA:DE:69:D9:50:1B:FC:68:B3:9D:5E:F5:C8:3B
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/_8cMzvQgyt5p2VAb_GiznV71yDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0-141.11.2.255
141.11.10.0/23
141.11.17.0-141.11.22.255
141.11.25.0/24
141.11.28.0/24
141.11.31.0-141.11.47.255
141.11.80.0/20
141.11.128.0-141.11.160.255
141.11.176.0/24
141.11.182.0/23
141.11.192.0-141.11.251.255
Signature Algorithm: sha256WithRSAEncryption
48:9d:4f:c1:a7:c8:3b:26:d8:8a:78:76:b7:55:a1:8d:b1:e4:
1c:a4:74:b4:97:1a:04:c8:53:05:1e:cb:65:5c:39:b1:7f:2f:
9d:76:d8:b3:c5:e2:35:22:44:7f:b3:a1:25:3c:b9:c8:38:71:
78:0b:f1:fe:92:21:d6:17:38:8f:d6:d4:38:63:86:8b:c0:c4:
f3:cf:69:d0:bc:3f:a4:0e:45:19:30:5e:1b:a0:a4:74:9a:ce:
0d:1e:62:3a:c6:35:1d:84:a6:f8:8f:9b:de:23:12:17:10:93:
f8:c6:5d:d5:08:7d:2b:fd:4a:88:79:8e:7f:0c:8f:ed:c3:84:
7b:58:db:ee:20:41:ba:0a:2b:12:68:d4:65:45:30:bc:6b:c1:
49:89:7e:70:09:fa:9b:f7:2f:6e:d4:0e:cd:0b:49:4b:8d:2f:
4b:6f:52:ca:52:8c:1d:11:5c:93:17:02:76:68:6a:51:23:3f:
0f:13:30:81:0e:38:dc:28:16:75:00:fe:57:9a:bf:0c:c0:7e:
c3:61:2c:e3:48:4d:85:b7:18:51:3b:bb:ed:21:f5:cb:01:5c:
38:10:42:a9:d3:cb:d0:0c:b2:58:d3:4d:ec:75:3c:ee:4a:70:
c0:92:34:2f:b4:ce:e4:17:e1:bb:43:c9:1a:0c:00:df:4e:9f:
46:45:64:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:30:04 2025 by rpki-client