Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/b0o7PFn82WT7hSQbRv-EIi157ZQ.roa
File: b0o7PFn82WT7hSQbRv-EIi157ZQ.roa (raw, json)
Hash identifier: Ragw3dNHroyLLLRpJfm7AmwUsg5wetfKXX+BZfzSQkE=
Subject key identifier: 6F:4A:3B:3C:59:FC:D9:64:FB:85:24:1B:46:FF:84:22:2D:79:ED:94
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 026036F1
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/b0o7PFn82WT7hSQbRv-EIi157ZQ.roa
Signing time: Sat 01 Jan 2022 08:03:19 +0000
ROA not before: Sat 01 Jan 2022 08:03:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8888
IP address blocks: 141.11.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39859953 (0x26036f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jan 1 08:03:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f4a3b3c59fcd964fb85241b46ff84222d79ed94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:c5:ef:f5:bb:3a:29:a6:c6:3e:e6:18:67:
cc:80:36:9b:b0:44:e8:42:a2:d3:8c:e3:65:c0:2f:
e5:2c:b4:b2:07:7c:5a:35:53:8a:28:29:9d:ec:12:
6f:4d:42:a3:90:4b:b6:93:16:53:fd:70:91:0d:db:
41:e8:ef:6d:4d:26:43:13:d2:ee:ae:5d:23:b9:ae:
21:a2:dc:5e:92:db:3a:b6:76:1b:99:6d:5b:23:a9:
ac:e8:ad:1c:ff:b8:2b:45:c1:ea:1e:2d:bd:f1:04:
bb:64:ff:8e:43:b1:9c:5b:b3:8f:2d:d1:ff:8d:7d:
60:33:a8:c7:38:2f:bd:9d:10:12:23:f4:91:a6:e6:
73:45:f7:88:ef:74:ab:78:f7:05:d5:ae:dd:9b:0d:
ee:f8:8e:2b:e9:db:29:5d:6f:0f:b2:08:eb:fb:64:
5b:e9:a9:4c:07:b4:ea:d6:c3:a9:8a:44:3f:10:14:
3b:f4:81:54:45:d2:3f:fa:90:23:73:22:6a:58:59:
b2:a4:02:65:f6:71:2b:1c:76:e2:dc:db:f7:f4:31:
c7:23:4b:e4:3b:44:f4:64:f4:cf:ed:42:fc:10:ed:
ca:4d:5d:7c:0d:48:45:00:b7:ae:29:d3:e2:f3:2a:
b6:7b:1d:a0:e4:9d:11:fa:e8:1f:18:a6:63:27:79:
f3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4A:3B:3C:59:FC:D9:64:FB:85:24:1B:46:FF:84:22:2D:79:ED:94
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/b0o7PFn82WT7hSQbRv-EIi157ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.111.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:a5:5f:76:cf:bf:8d:15:62:87:d0:4d:7f:98:04:34:fd:7a:
73:9c:ad:2c:30:d9:e4:48:f1:66:d2:39:09:6b:61:1f:82:bf:
c7:e4:3b:26:60:cf:96:a4:ae:e8:70:6f:fc:14:eb:cd:c3:73:
c7:af:d4:4d:9a:2f:09:25:91:22:29:d3:f3:78:c2:47:c8:c1:
1a:58:af:df:9c:ba:e3:64:15:b4:51:c6:e5:5b:a5:e8:81:d2:
12:2f:f0:18:45:b4:e3:70:f3:e8:f7:90:3a:97:a2:3a:75:79:
ab:5b:98:7e:ec:1c:1d:52:2b:e9:1e:ae:52:78:9e:e0:5f:5f:
1c:3d:4c:a8:67:fb:fb:53:4a:5f:37:1c:97:37:7d:65:bd:ec:
e7:52:4f:e7:46:70:5b:6b:a3:13:95:3c:89:7b:90:a1:d4:e8:
00:2d:0c:e2:5d:eb:ca:73:28:25:dc:ac:45:66:20:8f:d6:8d:
0b:56:12:b9:1a:f0:58:91:cd:45:3e:db:d4:54:43:e9:10:94:
ee:c4:f2:7f:aa:23:5e:b1:a1:67:3a:e3:e2:4d:67:57:9a:47:
55:7b:9b:6d:b9:da:18:a8:9f:a1:c2:fa:8f:d9:4f:c9:b8:d6:
2a:8e:ce:a7:22:c9:af:2b:72:19:05:f6:04:50:24:f3:d9:ff:
e0:c7:49:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:30:37 2025 by rpki-client