Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/dbHGlFVaS1MzcPtxDLA4OnT9fo8.roa
File: dbHGlFVaS1MzcPtxDLA4OnT9fo8.roa (raw, json)
Hash identifier: s3wwcoYZQp60wBon6KGwsL/7+aZwQiMXGl9KS3HNTkk=
Subject key identifier: 75:B1:C6:94:55:5A:4B:53:33:70:FB:71:0C:B0:38:3A:74:FD:7E:8F
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 03424857
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/dbHGlFVaS1MzcPtxDLA4OnT9fo8.roa
Signing time: Mon 28 Feb 2022 10:25:37 +0000
ROA not before: Mon 28 Feb 2022 10:25:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 141.11.0.0/24 maxlen: 24
141.11.240.0/22 maxlen: 24
141.11.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54675543 (0x3424857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Feb 28 10:25:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75b1c694555a4b533370fb710cb0383a74fd7e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f1:e0:7f:5b:36:cf:d7:67:2e:5f:94:b8:26:
40:d9:47:19:20:80:46:19:df:68:b5:0b:95:68:2b:
66:30:1a:33:cf:c1:8d:91:5e:44:34:30:3a:e1:01:
e4:a8:24:7f:4d:d6:e0:9a:9c:27:13:92:c4:62:72:
7d:c5:8a:20:d2:bb:41:9d:21:0f:70:5d:13:c1:23:
bd:8d:00:b1:7a:51:63:46:46:6e:77:01:a9:6b:b2:
0b:99:ac:75:c1:df:88:9d:9b:91:a4:58:bb:33:cb:
8c:26:e0:16:69:9f:fd:10:13:3f:81:a2:ad:ef:b2:
42:9b:ab:89:51:af:47:2e:15:dc:f1:99:71:32:8a:
66:f7:f2:db:af:b5:87:58:80:0b:29:57:c8:1a:ee:
4e:94:96:b5:b1:12:b5:f2:be:90:28:29:d4:aa:c3:
5a:6d:a1:a5:01:6b:8f:dc:e4:c2:f5:0b:52:66:71:
39:8b:82:25:d1:f8:bc:9f:ca:dc:7f:3e:f9:e5:33:
97:9e:e8:bc:9e:6c:7a:26:19:40:bc:e7:87:d3:bd:
66:d6:14:ae:85:07:42:a3:05:d1:ad:6b:78:94:fe:
1a:d0:e3:33:7a:5d:aa:00:2e:10:c5:b3:06:dc:47:
fb:ed:26:0d:29:32:69:ba:28:45:f7:b0:bf:67:ae:
99:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B1:C6:94:55:5A:4B:53:33:70:FB:71:0C:B0:38:3A:74:FD:7E:8F
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/dbHGlFVaS1MzcPtxDLA4OnT9fo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0/24
141.11.240.0/22
141.11.248.0/22
Signature Algorithm: sha256WithRSAEncryption
28:d0:22:ae:ee:82:94:5c:00:9c:27:bb:d1:32:1d:7b:79:bd:
71:20:ec:0d:16:ae:8d:61:8f:89:fc:00:68:1c:be:89:89:b1:
55:5c:67:43:c1:5d:40:7d:16:6c:5c:c9:e7:d3:f4:45:0c:9f:
ba:0c:8f:68:ae:44:64:b2:c6:7b:6d:47:28:df:c7:f1:5e:7e:
58:da:f6:68:75:d3:c4:dc:0b:ce:76:c1:f7:25:42:ad:87:e4:
4e:80:bb:c9:ca:83:98:88:17:cc:68:5d:be:af:b6:18:b0:4f:
d0:e9:91:3b:36:e8:01:ba:84:39:b2:5c:75:04:0a:71:70:39:
8e:a9:26:71:cd:d7:6d:6c:4d:b5:d2:27:50:67:78:c4:b9:c5:
40:39:14:b2:06:9c:4d:75:57:24:da:c5:22:b1:13:bc:79:52:
9b:b8:7f:d1:b0:07:ce:05:51:1e:c7:42:43:8a:44:d6:a2:fc:
25:84:30:aa:e9:71:37:69:2c:d9:b1:a0:35:65:10:b0:30:75:
8b:24:9e:23:f4:59:39:c4:ee:cf:74:c7:00:cc:6a:1c:64:d3:
b4:1e:09:53:0b:c8:3a:cd:42:df:29:83:b0:bb:c2:b2:43:60:
ef:60:e3:98:64:72:5d:ad:34:01:84:e6:b2:f1:5f:96:93:5e:
61:5c:f0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:47 2025 by rpki-client