Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/h-dA95IbkYg2x0jCTaGDvGofo-8.roa
File: h-dA95IbkYg2x0jCTaGDvGofo-8.roa (raw, json)
Hash identifier: fVPgwuo9QkQVge0Rxj11I7vAwjU6QH4V8xNLSz5nXjc=
Subject key identifier: 87:E7:40:F7:92:1B:91:88:36:C7:48:C2:4D:A1:83:BC:6A:1F:A3:EF
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 018210F90024DE93C84F79AA31423D84D53E
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/h-dA95IbkYg2x0jCTaGDvGofo-8.roa
Signing time: Mon 18 Jul 2022 11:02:10 +0000
ROA not before: Mon 18 Jul 2022 11:02:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 141.11.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:10:f9:00:24:de:93:c8:4f:79:aa:31:42:3d:84:d5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 18 11:02:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87e740f7921b918836c748c24da183bc6a1fa3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:73:4a:3f:23:01:72:6f:5b:35:78:49:34:71:
ed:61:bd:3a:11:9d:e4:92:87:52:02:1a:45:2d:b6:
d3:78:f0:a2:49:2a:03:23:ac:00:1d:38:ba:a9:e7:
2b:43:f1:2d:98:63:70:0a:95:a6:32:f9:15:79:18:
86:98:8d:1f:60:1f:bd:45:8e:73:dc:de:20:c2:36:
cb:e9:d7:56:43:ff:10:86:7d:b9:58:ae:fe:5b:fc:
e3:55:53:f2:8e:5d:75:11:2f:34:5d:b1:75:b3:59:
5b:0c:cc:13:77:86:f0:70:26:4a:b3:70:c0:ef:2f:
8b:18:17:da:8e:68:f1:68:5b:1c:f5:43:fa:46:98:
9b:2e:92:7e:b5:3f:d6:d3:4e:6d:a7:af:70:7d:31:
61:8c:8a:eb:e8:16:4e:fa:c8:7a:b5:c8:18:e6:99:
43:92:af:9a:a9:d7:10:c4:78:69:2f:bb:3d:73:ef:
2c:64:f9:8f:1b:ed:fa:69:e0:a4:bd:79:8f:a8:b7:
00:e4:69:63:f6:d2:a7:25:2d:e6:ec:35:a3:8e:16:
84:e2:c3:0b:4b:24:93:58:79:17:87:21:8e:8b:7c:
b4:e7:97:51:84:36:1e:4a:c2:d6:ba:52:7d:0b:3d:
7b:b0:23:06:c3:53:c9:1a:c6:b6:01:45:a4:b6:d1:
82:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E7:40:F7:92:1B:91:88:36:C7:48:C2:4D:A1:83:BC:6A:1F:A3:EF
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/h-dA95IbkYg2x0jCTaGDvGofo-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.12.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:1e:35:d3:d2:b1:02:bf:af:c5:23:4b:7e:cf:dc:29:64:5f:
15:c5:49:0d:f6:bf:0f:bb:03:cc:b0:78:bb:18:03:81:2c:e4:
8e:f5:12:49:74:d9:f3:a3:bd:ae:b9:31:3c:dd:40:c9:6b:3b:
30:cc:58:1b:68:8f:1f:a2:d3:99:cd:f4:f7:02:36:a1:eb:8b:
09:c9:e7:01:99:d6:54:4a:c6:f8:ef:fb:fe:55:e1:78:af:8c:
87:26:60:60:7b:b0:b8:0e:69:bb:7e:20:37:52:fd:71:d1:63:
53:99:93:ec:40:11:ab:2e:4f:53:75:07:e6:ca:90:3f:10:b0:
be:23:c2:52:25:77:9d:97:f3:55:f7:55:a3:1c:2d:5f:d1:bc:
2b:86:14:a8:cc:ed:b4:30:29:16:a7:7f:b7:0b:e5:fc:e0:b3:
b5:99:1a:e8:2c:00:67:04:98:2e:e4:8a:da:02:44:f3:ab:5b:
9c:45:b2:14:5e:e5:38:9e:28:6a:7d:81:31:30:53:32:16:55:
55:88:1f:98:15:06:04:f2:f0:34:57:52:40:aa:a9:7b:4e:cd:
3e:fd:cd:c6:d2:9d:98:5e:5a:4d:c1:2f:f9:e7:3f:97:37:6b:
5c:34:dd:ec:bd:e3:73:c9:ed:4e:22:33:a6:a9:36:46:49:e2:
e0:11:b4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:44 2025 by rpki-client