Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/i3HT2jmbXdrpEzDikT8_nbZNs4Y.roa
File: i3HT2jmbXdrpEzDikT8_nbZNs4Y.roa (raw, json)
Hash identifier: OK82L80p6Yw0ioHMP7Hx/HWtu4S6LYvcN8JeJSzZeVQ=
Subject key identifier: 8B:71:D3:DA:39:9B:5D:DA:E9:13:30:E2:91:3F:3F:9D:B6:4D:B3:86
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0475D072
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/i3HT2jmbXdrpEzDikT8_nbZNs4Y.roa
Signing time: Mon 09 May 2022 10:29:50 +0000
ROA not before: Mon 09 May 2022 10:29:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46450
IP address blocks: 141.11.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74829938 (0x475d072)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 9 10:29:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b71d3da399b5ddae91330e2913f3f9db64db386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:b5:a3:f9:ff:9c:56:f0:6d:b0:7a:ee:46:
48:ca:49:5f:49:9c:77:8e:c7:2d:b7:12:6f:2d:7e:
14:07:66:6c:43:64:a0:c9:95:f3:8d:0d:2a:ab:14:
54:e0:46:9b:32:e7:e6:54:2d:8a:06:c4:d1:75:b9:
87:df:98:43:37:20:9b:f6:dd:86:91:bd:88:a2:de:
c2:34:3b:0f:93:85:cb:a0:02:e7:14:6e:7f:26:d1:
04:59:22:56:e6:e5:5b:09:79:0d:4a:34:ce:66:84:
da:68:7e:3b:d8:8e:c7:e1:51:8e:de:50:80:f9:91:
b4:f2:53:65:d6:65:52:ed:bd:40:34:44:b6:e9:13:
47:f3:f2:94:f3:79:4a:07:d1:b6:e1:38:05:61:45:
2c:e3:c7:be:46:05:f6:aa:52:67:ed:bf:e3:cd:22:
45:2c:2a:6b:c5:46:a7:5c:6e:6d:80:43:2a:c2:3c:
ad:ed:4e:ee:e2:30:ba:61:e8:ff:ee:57:92:90:f7:
38:9b:a6:5b:2d:30:e0:6a:82:bd:c5:a7:68:1a:e4:
b3:79:73:34:ca:13:33:7e:ed:a7:cf:d1:3d:fc:7a:
0d:b3:3d:64:8f:f7:16:b5:29:94:98:fa:2b:7a:1d:
0b:ad:aa:03:dc:e4:c2:71:dd:af:fc:c1:8d:e5:81:
22:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:71:D3:DA:39:9B:5D:DA:E9:13:30:E2:91:3F:3F:9D:B6:4D:B3:86
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/i3HT2jmbXdrpEzDikT8_nbZNs4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.40.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:54:74:e9:a3:81:e2:cf:df:97:72:57:7b:f6:48:e4:04:30:
5f:f1:4a:02:f0:c0:82:97:41:13:d4:dd:81:84:a0:8e:13:eb:
00:31:d7:55:41:47:47:5d:97:05:e3:0d:d4:14:f0:18:60:b5:
26:5f:f4:7f:d1:e8:53:80:bf:04:ca:86:41:7e:ac:5f:28:0c:
83:be:57:65:b7:65:16:cc:d1:07:ff:18:4d:61:cb:51:5e:c1:
46:f9:ab:b2:f6:fe:3b:40:1f:66:50:68:a8:48:f3:1c:df:61:
1f:7e:e1:7d:25:ed:4c:65:ab:75:97:57:75:1b:43:0c:5d:d3:
d1:32:03:2a:e7:9b:5d:0a:3b:e6:97:33:df:9f:ba:1f:aa:87:
45:82:93:28:6d:f0:ec:48:53:4c:b0:44:26:19:41:9d:89:02:
5a:37:7c:4c:6c:c9:8a:39:8a:f5:17:1f:5d:35:af:b3:44:be:
5c:4d:46:8f:24:06:3a:8a:08:59:27:12:81:59:c3:f9:23:f3:
3a:04:5e:91:a0:3a:b5:ac:95:c8:3b:4a:39:1a:e2:71:04:a1:
be:ee:87:97:31:d3:20:2d:3d:91:14:90:89:c8:b5:fa:ba:97:
fd:77:44:2b:21:88:16:57:45:39:d9:0c:86:dd:1c:4f:5a:6e:
0e:5f:b7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:40 2025 by rpki-client