Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/cRsMY9z44UavDctj-thNFyN-VOI.roa
File: cRsMY9z44UavDctj-thNFyN-VOI.roa (raw, json)
Hash identifier: KIV/3YTLcrl9rh4bOGJJb51q/YM1jtOrqaa74afIaMw=
Subject key identifier: 71:1B:0C:63:DC:F8:E1:46:AF:0D:CB:63:FA:D8:4D:17:23:7E:54:E2
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0183A7F4AC9B705A2A13D4954348A38C8E20
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/cRsMY9z44UavDctj-thNFyN-VOI.roa
Signing time: Wed 05 Oct 2022 11:42:53 +0000
ROA not before: Wed 05 Oct 2022 11:42:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 141.11.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a7:f4:ac:9b:70:5a:2a:13:d4:95:43:48:a3:8c:8e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Oct 5 11:42:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=711b0c63dcf8e146af0dcb63fad84d17237e54e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:14:60:1d:e2:cd:77:c4:b7:51:ad:62:a6:f6:
93:08:0d:1f:1b:24:af:49:8f:50:71:b4:60:fa:cf:
5e:29:0e:0b:1c:60:2a:78:64:ec:7c:b0:d0:8d:ae:
73:4b:08:da:80:03:5e:9a:77:ef:d8:14:f3:0f:95:
9d:8f:96:b3:fd:41:dc:cc:41:ec:d3:f4:70:27:3f:
37:15:6e:fe:ea:bb:9d:6e:3a:8a:5a:10:3b:47:86:
a9:f9:0c:e2:05:07:1e:89:93:fb:f5:1c:21:4b:f0:
20:61:1f:f9:5f:a2:63:b1:72:f0:21:b2:52:31:92:
23:76:0a:d7:ac:15:67:7a:b0:34:e9:63:97:e9:64:
da:ac:e0:33:29:93:fc:d7:8a:01:fb:3c:55:e1:42:
ab:12:84:f7:b5:7b:f7:ac:2f:85:7f:26:4e:09:e6:
8c:d6:82:14:df:79:7b:d5:d4:8e:08:50:3e:54:20:
fc:b0:ea:2f:25:59:47:56:8c:cb:09:31:c6:b8:55:
a6:42:67:8e:0b:89:31:73:cb:f4:36:cc:0e:31:f9:
4e:91:ef:06:fe:1d:68:00:a2:4f:8c:26:06:86:bf:
3b:fc:3d:33:80:65:02:33:ac:67:7e:79:83:3c:a2:
dc:05:eb:26:c5:85:32:c6:6c:8b:99:3e:13:d0:ff:
df:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1B:0C:63:DC:F8:E1:46:AF:0D:CB:63:FA:D8:4D:17:23:7E:54:E2
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/cRsMY9z44UavDctj-thNFyN-VOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.241.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:2b:7c:48:b0:28:7a:45:9c:0b:19:a5:a6:7e:e2:92:15:eb:
a9:ad:dc:87:91:60:87:ca:d5:66:bf:c1:ba:f7:55:72:b0:9e:
9b:0b:12:9a:00:80:52:5c:35:a4:20:06:89:f9:79:71:aa:b9:
05:64:a2:c1:2c:8c:a9:3b:23:21:6c:4d:c8:ae:64:62:4a:19:
76:de:8b:2c:e6:8a:70:fb:ee:5f:97:30:08:4a:b4:7a:3b:5c:
39:f4:04:eb:ad:4a:2c:5c:f7:bb:97:56:b2:d4:c6:5f:af:4a:
16:03:df:53:1e:e7:25:76:70:3f:15:fd:f1:c3:26:69:1d:da:
cf:2f:94:52:f3:9e:4c:d1:fe:0e:74:aa:be:d7:80:72:3c:c1:
9c:41:91:c9:b4:f5:78:95:d9:70:79:48:93:33:54:f4:25:fa:
54:42:b2:c5:6a:86:7a:95:1a:e8:f9:0d:cb:41:0e:09:3b:39:
80:b0:e1:03:f2:ce:e5:8f:00:3c:ea:cd:b4:19:88:1e:5f:28:
67:09:ff:df:e0:0b:7e:b7:4f:6e:da:80:bf:2a:5c:9c:d9:05:
10:55:fa:89:2b:b3:27:a8:fb:a2:7d:fb:d9:2d:55:62:d1:11:
ca:3e:a4:a7:e7:ed:93:03:65:37:ea:54:f4:1d:26:2e:ec:da:
02:5f:03:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:40:25 2025 by rpki-client