Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/hKvMnSf-eVIqSWsFv__L4Aoh_H0.roa
File: hKvMnSf-eVIqSWsFv__L4Aoh_H0.roa (raw, json)
Hash identifier: L3RqCXoRzLYsWgy6l1TIYq4lABg9cVIESxtGpfA0OiA=
Subject key identifier: 84:AB:CC:9D:27:FE:79:52:2A:49:6B:05:BF:FF:CB:E0:0A:21:FC:7D
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0183B28FA3865812A1147B73B19C38EA4585
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/hKvMnSf-eVIqSWsFv__L4Aoh_H0.roa
Signing time: Fri 07 Oct 2022 13:08:21 +0000
ROA not before: Fri 07 Oct 2022 13:08:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204843
IP address blocks: 141.11.240.0/24 maxlen: 24
141.11.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b2:8f:a3:86:58:12:a1:14:7b:73:b1:9c:38:ea:45:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Oct 7 13:08:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84abcc9d27fe79522a496b05bfffcbe00a21fc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5f:c4:0e:13:e0:f5:74:f6:29:e2:79:97:24:
a3:48:eb:b3:78:52:59:45:57:07:4a:b4:de:91:69:
06:68:27:77:e6:96:be:0d:82:09:15:f0:13:e0:8e:
4e:18:a8:70:aa:e6:f6:51:eb:44:a6:74:57:47:01:
54:c8:50:a1:28:63:9c:73:ab:73:b9:93:3c:d2:0b:
12:ba:a1:39:6c:c1:be:e0:e3:6c:0f:87:c3:ea:bc:
3c:98:81:84:3f:83:34:5a:fc:c0:73:19:9f:2b:0b:
0d:8b:9f:44:63:49:6e:e0:97:7b:18:fb:6d:4e:88:
c4:fc:63:70:da:07:c0:23:a0:d2:d1:49:3d:18:f5:
1b:71:6d:dd:c6:19:5c:69:ed:24:4b:1c:8e:45:ed:
e1:99:ce:47:ec:09:f1:8c:2d:e6:fe:93:b8:d7:25:
f8:f4:ca:31:5b:34:1d:98:72:82:86:6d:d0:02:d9:
7a:b1:54:bd:81:02:e0:d0:06:7e:06:28:70:58:10:
17:b0:1d:69:c1:e3:05:f1:7c:48:00:9c:a2:16:b9:
b8:05:de:ca:22:20:07:08:c1:da:30:c6:6f:63:f1:
f7:33:98:29:6f:e9:40:3c:b0:fb:0e:b4:d7:28:25:
9d:42:de:ce:2a:d0:76:96:bb:06:84:1c:87:13:da:
4a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AB:CC:9D:27:FE:79:52:2A:49:6B:05:BF:FF:CB:E0:0A:21:FC:7D
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/hKvMnSf-eVIqSWsFv__L4Aoh_H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.240.0/24
141.11.248.0/24
Signature Algorithm: sha256WithRSAEncryption
10:f3:3f:84:b2:55:72:cd:58:7f:e2:0d:33:71:1a:59:60:63:
e6:ff:a0:6b:43:60:8e:23:0f:cd:5a:a3:40:36:dd:f1:46:8d:
af:dc:ac:8e:0f:40:5e:ed:86:77:4a:e3:40:68:d0:54:1d:bb:
9e:4f:ce:e4:36:be:ff:88:d0:89:be:08:87:d7:03:55:c6:b8:
da:18:b7:9e:f9:3e:4d:a7:3a:b4:15:a9:3d:dd:88:e1:57:0c:
83:19:68:09:3e:f0:fb:2d:2c:48:7d:8b:37:4b:71:17:3a:c6:
f5:b4:95:fc:ce:45:43:0e:9e:8b:fc:22:90:ef:ae:ff:8b:1a:
2e:13:5e:26:82:63:43:58:53:c8:f4:40:54:56:c3:f3:2b:b5:
f0:d9:49:78:13:b2:fd:10:60:a3:cd:64:c1:a6:8d:e0:5f:02:
14:09:19:c9:90:7d:5b:a3:68:1b:06:fe:e9:7d:3f:f2:67:0d:
07:56:06:66:b5:d8:90:7c:77:64:7b:39:6e:b4:09:05:41:f7:
79:cf:58:ac:9c:06:8e:98:eb:82:d2:13:71:98:df:ed:a0:0f:
b7:8c:16:6e:01:b9:ad:e3:66:17:6f:c3:dc:e8:1e:f8:90:25:
13:31:38:b3:88:d3:ad:a3:ae:a4:b1:e0:04:24:c4:2d:95:13:
9f:02:9a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:48 2025 by rpki-client