Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/cR6PX-DC6kKWBlYihzKuYOjDrD4.roa
File: cR6PX-DC6kKWBlYihzKuYOjDrD4.roa (raw, json)
Hash identifier: 73bbfCShAnlQteOAatSYQgc/V/ruFyXJcYs3n4LslVg=
Subject key identifier: 71:1E:8F:5F:E0:C2:EA:42:96:06:56:22:87:32:AE:60:E8:C3:AC:3E
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0184C2F0701D6D31B874F63A5FDC4E2BABE5
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/cR6PX-DC6kKWBlYihzKuYOjDrD4.roa
Signing time: Tue 29 Nov 2022 10:30:47 +0000
ROA not before: Tue 29 Nov 2022 10:30:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210439
IP address blocks: 141.11.40.0/24 maxlen: 24
141.11.109.0/24 maxlen: 24
141.11.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c2:f0:70:1d:6d:31:b8:74:f6:3a:5f:dc:4e:2b:ab:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 29 10:30:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=711e8f5fe0c2ea42960656228732ae60e8c3ac3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:81:49:c2:54:46:a9:66:43:5f:b1:72:62:ef:
62:fc:4f:09:fb:f3:02:4c:3b:ef:7b:5b:34:d8:24:
a6:ab:27:58:96:48:5e:50:e6:fb:3a:c0:69:9d:00:
4c:ea:73:0e:88:cb:4c:81:c3:52:e8:4c:5f:4e:e1:
91:b0:4b:4b:bf:e9:e0:7c:91:57:c8:27:72:94:02:
f3:69:02:47:0d:35:5c:4d:d4:31:76:f3:04:22:f5:
48:5b:90:c8:c8:94:06:74:0d:04:48:04:d6:39:b5:
fb:c3:6a:30:e5:e6:55:d4:28:25:d6:2c:04:ef:05:
9f:9d:86:90:18:f1:4d:fb:98:ea:d2:d4:58:f1:63:
7e:84:46:99:ee:12:2f:73:83:01:56:bd:c2:4c:08:
e8:77:e0:7a:de:f3:2b:97:07:3b:c5:52:c9:de:61:
3a:84:b0:69:64:69:3f:96:dd:b5:b2:28:56:a7:ab:
38:db:7f:86:3f:47:23:54:df:37:ac:68:78:23:3c:
e6:4c:d6:70:92:fa:2c:6d:74:64:03:96:79:e2:1b:
7a:df:fa:43:b3:80:23:b5:f2:3e:e1:be:72:07:15:
78:97:3c:aa:ca:b7:ac:77:9e:26:69:0f:5a:a6:ea:
b1:04:ce:0a:97:b3:00:2f:c3:76:7c:c3:b8:c8:a3:
73:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1E:8F:5F:E0:C2:EA:42:96:06:56:22:87:32:AE:60:E8:C3:AC:3E
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/cR6PX-DC6kKWBlYihzKuYOjDrD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.40.0/24
141.11.109.0/24
141.11.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:f3:57:3e:65:7f:b5:9a:ca:d1:eb:a6:9b:fc:23:26:0e:14:
45:c6:2b:d3:c1:df:11:7a:02:e5:e4:80:51:3d:91:5d:ad:5e:
91:e7:64:ee:71:26:2a:30:b5:49:c7:10:a6:b4:f7:ec:26:1f:
b5:15:66:a0:b5:d9:3f:0e:3b:65:56:79:d6:a7:ae:90:ae:3c:
11:b2:ad:30:29:c7:d8:be:e1:e5:9a:ba:73:99:6c:ed:ac:b1:
a6:c7:a9:97:1d:83:32:2d:bf:f5:87:d8:e4:46:e8:0b:02:3e:
d5:cd:e5:02:35:27:90:8a:aa:fe:30:a3:93:47:3e:4c:85:c5:
4d:0d:cb:db:fb:92:11:9c:a9:9a:30:d6:bd:08:60:21:51:5c:
55:9f:bd:96:a2:29:27:a3:b4:6e:b2:4f:44:23:9f:45:10:83:
1f:d4:3b:fb:dd:da:db:5a:8e:eb:f0:fa:71:b3:f9:70:71:9e:
33:d2:1e:09:92:24:ef:f2:50:4d:50:6d:6b:dc:9b:cd:00:86:
39:37:b7:49:95:31:2d:7a:08:39:3d:df:b7:58:7d:1d:48:fa:
3e:ff:d4:7c:e2:46:75:d2:ab:80:22:65:6b:67:10:9c:b4:ac:
8f:a3:f8:38:9e:9f:f1:0f:e7:f9:66:95:7e:e8:ed:9e:60:2c:
d7:90:3e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:03 2025 by rpki-client