Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/aCIY4CxBjUSGKIXy6qa8EaviMlI.roa
File: aCIY4CxBjUSGKIXy6qa8EaviMlI.roa (raw, json)
Hash identifier: w3MyiCFqsSPL6VyhpuFcgq3+29gtF3EzPR2tKuyLrSI=
Subject key identifier: 68:22:18:E0:2C:41:8D:44:86:28:85:F2:EA:A6:BC:11:AB:E2:32:52
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04D49BB9
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/aCIY4CxBjUSGKIXy6qa8EaviMlI.roa
Signing time: Tue 24 May 2022 20:20:13 +0000
ROA not before: Tue 24 May 2022 20:20:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64487
IP address blocks: 141.11.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81042361 (0x4d49bb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 24 20:20:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=682218e02c418d44862885f2eaa6bc11abe23252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:6b:35:cf:87:00:36:c9:67:4c:d4:de:2d:
d6:e2:39:04:7e:46:34:6b:00:b7:29:51:9a:8d:68:
b5:dd:65:01:74:c5:ec:48:8b:a1:61:e9:f2:36:b6:
0f:de:62:f5:d8:df:9a:bd:9b:92:92:51:44:43:b6:
28:45:07:f2:23:de:fe:ff:ca:d4:96:b7:69:6f:7b:
65:2b:77:ce:b3:04:62:c7:44:ec:40:5f:84:29:2f:
c5:43:d0:8b:7a:5c:da:5a:33:f1:75:f4:44:9f:2f:
4f:19:7b:45:a4:87:15:e4:11:1b:5a:8c:f5:cc:8d:
a8:3f:72:d3:7f:65:d9:78:0c:91:15:d1:78:03:82:
49:03:03:af:72:2b:52:7a:f2:ca:13:00:72:12:8f:
ff:55:8a:44:24:2c:ab:8c:7f:1a:f7:e3:2f:05:21:
11:46:cc:2d:87:aa:dc:54:a0:34:56:7f:84:d6:c0:
c7:5d:bb:a0:ca:10:4a:48:9b:0d:97:3b:cf:b4:c6:
94:15:f1:be:23:48:10:00:b1:bd:9c:82:d3:d5:a8:
4e:e9:f5:ba:e8:1c:30:f3:14:c9:19:cf:09:db:da:
2e:fc:38:7c:2a:47:55:77:9d:19:54:8f:78:54:dc:
03:a7:23:94:e4:de:20:35:75:32:76:f0:e9:d7:e6:
84:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:22:18:E0:2C:41:8D:44:86:28:85:F2:EA:A6:BC:11:AB:E2:32:52
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/aCIY4CxBjUSGKIXy6qa8EaviMlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.34.0/24
Signature Algorithm: sha256WithRSAEncryption
06:dd:75:5f:11:73:bb:4c:0e:ea:9c:73:8a:26:0a:a2:a0:ae:
65:9d:20:ab:01:ac:31:2d:78:f8:21:6e:27:db:36:c3:f3:11:
5a:3c:bb:ac:aa:df:8e:70:47:37:a4:1e:fb:4d:06:65:15:3b:
2c:99:36:45:0c:72:75:12:09:09:5c:bd:2b:7e:b5:9a:d7:d7:
3d:18:fa:cd:d0:66:2f:dc:15:bd:51:99:03:d3:c3:ae:ef:52:
5b:85:e3:3d:34:e7:99:70:5b:96:d4:77:5d:17:8a:4c:91:51:
8b:f6:22:9e:2a:5b:53:15:29:e7:cb:18:67:fb:79:02:dc:43:
12:ee:5e:e0:03:f1:22:25:2a:ca:5c:2d:91:6e:81:b2:8f:6d:
9b:c4:62:41:d9:cf:19:dd:25:ca:2b:36:2a:e0:6f:b1:9b:48:
a5:9c:29:9d:32:28:79:03:da:a6:07:65:77:8d:ba:c7:6b:af:
a3:7a:80:27:07:33:30:1d:b1:e3:90:08:8e:49:ae:df:f5:fc:
be:3b:f2:86:f9:f9:53:4f:e2:41:99:3a:05:99:6d:5e:86:e8:
b5:1f:df:dd:34:c8:5b:de:f2:86:f9:2e:81:e7:3e:97:fe:fb:
f7:fd:e2:58:d7:24:90:f8:a9:78:5c:6d:2f:cc:ed:a1:a8:15:
83:db:bd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:14 2025 by rpki-client