Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/e8tuY5yH_U6PldQsX6nwIuQsxaE.roa
File: e8tuY5yH_U6PldQsX6nwIuQsxaE.roa (raw, json)
Hash identifier: jU1HoMvaJEYG/ZaY6s8tSFfFwhpha575sra5770pU0I=
Subject key identifier: 7B:CB:6E:63:9C:87:FD:4E:8F:95:D4:2C:5F:A9:F0:22:E4:2C:C5:A1
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0185062215B360AFAF20BC5E5421F775229D
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/e8tuY5yH_U6PldQsX6nwIuQsxaE.roa
Signing time: Mon 12 Dec 2022 11:39:35 +0000
ROA not before: Mon 12 Dec 2022 11:39:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 141.11.178.0/24 maxlen: 24
141.11.200.0/22 maxlen: 24
141.11.208.0/22 maxlen: 24
141.11.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:22:15:b3:60:af:af:20:bc:5e:54:21:f7:75:22:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Dec 12 11:39:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bcb6e639c87fd4e8f95d42c5fa9f022e42cc5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:08:21:4b:35:ca:06:f8:06:c0:27:ab:1d:0f:
a5:ca:ef:dd:58:7a:63:40:cf:b7:5d:7c:70:0c:31:
48:58:b6:a5:a4:b8:1e:49:38:7a:e9:22:c6:6e:95:
24:2f:29:37:06:15:ee:2c:31:a9:4a:b3:54:e3:75:
ff:08:b3:7a:e5:40:c2:f4:ef:ff:dd:2f:49:5d:b4:
6a:f1:63:11:ae:5f:92:bc:30:3a:e7:ba:1b:47:13:
31:75:bf:ee:cd:ca:df:42:ec:14:82:c9:4b:10:96:
45:9b:68:07:3c:3c:e3:1e:90:4d:a9:f3:a7:7d:15:
7c:6b:65:ca:97:57:e8:4f:1b:08:90:92:73:4e:05:
d1:09:d2:69:e2:ac:f7:93:f0:7c:be:c8:58:c5:cb:
b6:e8:55:39:a4:07:96:3d:54:f5:bf:e6:91:11:16:
b2:39:ea:b6:66:a3:cf:8c:f3:c8:db:22:fd:12:68:
a5:15:e6:47:33:df:ab:ab:73:24:38:a4:be:7f:0c:
e4:98:c8:59:23:cf:cf:f9:e7:5c:03:e8:c2:0e:3f:
56:82:68:f8:d1:1f:31:f2:21:80:fe:e4:2e:e9:9e:
ca:16:f5:22:93:e5:58:18:29:29:d6:c0:07:50:f4:
bf:b6:f8:da:bb:35:ea:50:4e:47:db:37:c7:d9:65:
c6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CB:6E:63:9C:87:FD:4E:8F:95:D4:2C:5F:A9:F0:22:E4:2C:C5:A1
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/e8tuY5yH_U6PldQsX6nwIuQsxaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.178.0/24
141.11.200.0/22
141.11.208.0/22
141.11.236.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:70:02:e1:36:58:90:1d:93:82:80:e7:79:84:b9:f9:de:77:
ce:8f:12:79:44:16:c7:a9:fb:7d:96:60:70:98:23:41:c9:e3:
02:2b:d1:e5:20:20:eb:c3:c4:b5:6d:8c:c6:8b:68:23:b9:cf:
28:cb:45:22:40:e1:6e:75:8a:23:20:80:f5:81:df:cb:dd:64:
0f:0f:67:48:73:16:a5:14:f4:52:35:d2:1a:a7:b7:f3:8b:a9:
90:b2:3c:64:95:df:44:4a:fc:45:34:cd:f1:1a:98:f4:c2:3b:
c1:fb:ee:2a:04:71:bf:3a:b8:41:f4:9e:93:08:88:58:c1:4c:
7f:cb:a9:65:72:9c:78:f5:89:9b:f6:d9:ec:3d:0c:c6:3a:de:
fa:7e:2d:54:1e:da:71:6a:4a:47:f9:24:a1:31:ee:19:8e:71:
c0:55:59:15:00:2f:e5:9a:7e:97:fa:91:9b:6b:0f:0a:b6:56:
b6:d2:37:51:94:7a:92:ac:7c:3f:85:37:82:93:c9:b6:84:95:
ec:53:69:d8:1d:cc:c6:93:64:02:5b:b5:39:0a:1d:79:c4:48:
f8:d0:d1:23:b0:a4:e6:44:34:38:b9:de:2e:6b:a9:68:82:34:
27:c9:66:8a:1d:49:c7:47:70:2d:bb:25:66:83:27:38:20:cf:
6d:8c:e5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:58 2025 by rpki-client