Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bGEzRte24H5Jqrl-r_MHsX4Bo8I.roa
File: bGEzRte24H5Jqrl-r_MHsX4Bo8I.roa (raw, json)
Hash identifier: aaeqCVFEGbbY+HEwK87Vg2hyuY7xRc/iGVTUi5qecMw=
Subject key identifier: 6C:61:33:46:D7:B6:E0:7E:49:AA:B9:7E:AF:F3:07:B1:7E:01:A3:C2
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04E74590
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bGEzRte24H5Jqrl-r_MHsX4Bo8I.roa
Signing time: Tue 31 May 2022 11:19:13 +0000
ROA not before: Tue 31 May 2022 11:19:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 141.11.74.0/23 maxlen: 24
141.11.187.0/24 maxlen: 24
141.11.86.0/23 maxlen: 24
141.11.104.0/22 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.234.0/23 maxlen: 24
141.11.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82265488 (0x4e74590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 31 11:19:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c613346d7b6e07e49aab97eaff307b17e01a3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:67:bd:48:e4:90:a1:18:38:66:ef:ae:99:
61:8a:3e:6d:67:96:e9:35:f8:df:87:0e:5f:56:2f:
45:14:16:2e:d4:37:14:54:1d:c2:7a:17:90:1e:37:
fa:db:18:74:f6:10:c3:3b:83:58:5a:f6:b8:85:35:
d5:bd:04:51:e5:26:87:34:65:f8:ef:46:ba:ee:32:
de:f9:79:8a:df:8b:7e:ef:5d:65:1e:60:14:a4:c8:
db:d1:d1:03:1e:32:f2:e9:ee:70:48:3e:38:84:a2:
ca:68:42:7c:b3:d1:78:30:71:9a:15:c5:cf:96:57:
65:fd:e7:2a:12:41:63:f3:38:8a:d1:7a:a9:64:7f:
e2:76:0e:64:78:53:13:20:67:53:1f:ba:78:dd:88:
fa:60:62:06:d2:24:a8:c3:55:de:47:b5:0f:be:d6:
90:9a:a7:a2:c0:c3:96:d7:68:b7:9b:86:f2:d3:b9:
dd:30:95:31:19:60:70:f5:73:27:0f:8e:d1:48:11:
e5:c8:d3:fa:be:a7:22:25:88:50:59:54:d6:59:32:
1e:ca:af:48:b1:7f:6f:7a:aa:10:58:f9:e5:78:62:
fb:34:d1:18:fb:d4:5e:5e:d5:06:9a:a9:ad:2b:19:
aa:9a:20:34:c3:3a:c6:c2:c2:f8:45:da:af:44:13:
5c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:61:33:46:D7:B6:E0:7E:49:AA:B9:7E:AF:F3:07:B1:7E:01:A3:C2
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bGEzRte24H5Jqrl-r_MHsX4Bo8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
141.11.74.0/23
141.11.86.0/23
141.11.104.0/22
141.11.127.0/24
141.11.187.0/24
141.11.234.0/23
Signature Algorithm: sha256WithRSAEncryption
16:72:04:bf:80:f1:ad:30:53:4a:34:40:05:86:3e:74:03:f6:
4d:65:42:f6:f0:4d:7c:78:ed:fb:b4:46:98:dc:f3:77:ca:34:
6d:38:1f:b8:86:cf:e9:98:63:01:44:6b:76:47:a9:ed:b6:ef:
f6:42:95:a7:53:93:d8:5e:88:1c:ae:ae:bd:97:bb:d0:95:41:
5e:9e:08:66:22:2e:de:93:17:b3:07:9c:c1:73:80:43:f4:75:
95:03:75:64:1b:26:bb:fd:41:1f:36:dc:ca:2b:b8:37:da:14:
70:2a:79:ef:a1:c2:7d:fb:d2:10:ee:b5:f0:4d:5a:83:d7:04:
b7:8e:32:5c:ce:88:df:7a:1c:9c:9c:ce:f7:0c:66:f9:4a:c0:
be:d4:b3:e0:08:67:e7:00:35:00:3f:9b:b4:9a:d2:bd:65:a5:
3b:7d:98:b2:dd:da:0c:58:b1:27:0b:9d:9c:41:3a:3a:82:7d:
25:bb:08:cb:1d:03:d5:16:09:c0:b8:94:53:20:21:32:06:bf:
37:ed:bc:c6:3b:11:e8:36:19:f3:85:cc:82:4a:c9:48:63:8e:
14:65:b0:1e:7a:21:ae:72:d9:79:97:ab:1b:4e:84:1f:ab:64:
03:b6:0f:d8:45:0b:9d:ac:55:20:96:38:59:f6:64:5c:b5:d2:
2f:fd:29:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:45 2025 by rpki-client