Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/aqE_OugB69v-YjX1FMElfmlnLII.roa
File: aqE_OugB69v-YjX1FMElfmlnLII.roa (raw, json)
Hash identifier: 9TaaymWdv+wN/gacLtSPJoVQNw6kykk7IRZQ5Hb8wn8=
Subject key identifier: 6A:A1:3F:3A:E8:01:EB:DB:FE:62:35:F5:14:C1:25:7E:69:67:2C:82
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04F4E1CD
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/aqE_OugB69v-YjX1FMElfmlnLII.roa
Signing time: Mon 06 Jun 2022 11:08:21 +0000
ROA not before: Mon 06 Jun 2022 11:08:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 141.11.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83157453 (0x4f4e1cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jun 6 11:08:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6aa13f3ae801ebdbfe6235f514c1257e69672c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3d:30:a5:7c:45:13:bc:96:4e:60:1c:75:1f:
db:31:8b:38:83:90:82:80:7b:b3:72:22:90:b9:a3:
98:eb:41:88:24:38:0c:62:32:85:99:d9:d6:44:8b:
4c:7b:70:fa:c6:bc:8f:c4:7b:e3:59:24:5a:4e:2c:
ae:0b:b6:ef:02:e8:19:3b:55:c7:3b:dd:e8:79:9a:
88:3f:93:a3:58:0f:9b:9f:eb:d7:fb:ce:c5:ab:7b:
8d:34:4e:4e:90:3c:ca:b7:71:66:d4:ad:61:74:54:
3a:30:ed:8e:99:ca:77:14:54:ce:07:8e:37:04:a9:
b5:62:19:ef:55:a4:6f:16:b7:c5:96:44:6b:b8:22:
a3:a6:40:f5:e4:fd:b1:5e:3a:c3:5f:0f:4f:ee:2b:
9c:95:11:0b:93:f2:8a:e8:be:57:75:41:32:2e:ad:
98:02:e1:03:0a:a9:52:74:28:16:6c:0e:4e:af:68:
c4:b0:86:85:af:d5:7a:c7:6e:28:8c:62:09:d6:b3:
d3:e9:e4:52:0d:5b:bf:1c:da:51:80:e1:50:e3:98:
87:d2:cf:fd:57:20:d4:72:16:85:63:da:73:1a:4d:
c7:c7:32:a5:08:a9:67:e9:cb:53:18:be:b5:e7:dc:
c0:74:6e:ae:5f:bb:8f:3f:1b:bb:8b:5e:31:99:5c:
b3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A1:3F:3A:E8:01:EB:DB:FE:62:35:F5:14:C1:25:7E:69:67:2C:82
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/aqE_OugB69v-YjX1FMElfmlnLII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.128.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:b1:7e:7e:84:04:6e:bb:df:5d:14:cd:6a:08:4c:26:9b:39:
a0:f5:32:b9:d1:2d:69:68:92:fa:f2:d7:09:94:96:9c:49:d5:
45:8f:a6:01:9e:d9:1e:26:da:07:4f:88:f0:d4:98:ab:f6:73:
ec:b6:2a:84:a9:7a:5b:8c:01:7e:96:b0:df:41:a9:7a:01:11:
04:8c:1f:39:e0:31:a0:b9:63:0a:4e:21:9e:b0:58:64:1e:37:
49:0a:f5:9c:6e:42:69:5e:bf:23:b1:82:15:3c:f1:9c:63:a4:
81:ac:0c:94:45:a7:07:76:5d:82:b4:94:e1:e7:e2:b8:c0:58:
b0:8d:4f:2d:52:fc:74:86:68:3f:d7:a8:70:27:7a:8d:8f:6e:
68:eb:89:99:32:cb:60:1c:a0:96:10:8f:76:45:c1:8a:ed:9f:
ca:74:de:3b:33:a5:ef:da:0f:c5:f2:b5:b7:38:fa:b0:72:90:
0d:38:53:75:72:62:75:e0:f1:d5:70:33:03:cb:28:d3:66:dd:
eb:d0:b5:61:88:1b:92:3e:26:a5:66:dc:f0:e9:3a:32:4a:a2:
bc:f1:ac:7e:5a:6c:3b:f3:9b:47:9d:e1:e8:6c:3c:56:f8:6e:
35:55:6f:d0:4d:6b:82:71:5b:30:7c:2a:53:c1:33:74:bc:ea:
59:ca:27:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:56:02 2025 by rpki-client