Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/iVwoB9_IG2mECUHsy9LMZ52USwc.roa
File: iVwoB9_IG2mECUHsy9LMZ52USwc.roa (raw, json)
Hash identifier: DS6OcCt14ndsvFEas+9gh/Q6BuuUdzhE52Gk9mIxEQc=
Subject key identifier: 89:5C:28:07:DF:C8:1B:69:84:09:41:EC:CB:D2:CC:67:9D:94:4B:07
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01840AB9284CDF02B283BA2E72FB8758689B
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/iVwoB9_IG2mECUHsy9LMZ52USwc.roa
Signing time: Mon 24 Oct 2022 16:00:17 +0000
ROA not before: Mon 24 Oct 2022 16:00:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208226
IP address blocks: 141.11.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0a:b9:28:4c:df:02:b2:83:ba:2e:72:fb:87:58:68:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Oct 24 16:00:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=895c2807dfc81b69840941eccbd2cc679d944b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:b1:b6:cc:7d:1c:b2:b7:20:73:b3:24:f7:
1d:06:b6:21:1e:dd:46:de:da:5d:e9:0a:61:b1:9e:
37:6c:09:b3:bc:ac:12:89:5a:e4:c7:7c:f2:7c:92:
88:06:15:e2:89:c5:a7:5f:22:ec:0b:16:3b:13:a4:
76:ea:cf:7a:ce:1b:28:51:ac:02:d2:62:52:d7:6e:
dd:a0:44:6c:5c:02:3c:5f:64:0e:05:fd:39:98:6e:
2c:22:75:6f:35:9e:e0:6f:18:e5:c6:c6:2a:bd:44:
2f:8c:9c:bc:6a:f7:b2:26:d7:0f:8c:1a:de:4c:71:
3e:bb:66:44:e3:5a:87:2b:2f:0e:f4:36:0a:43:d6:
55:a6:69:31:9e:d1:c8:bb:62:67:94:1b:ce:76:75:
90:9b:71:28:78:76:de:92:2c:d4:0c:eb:be:21:fd:
f6:5c:fd:57:c2:90:86:c5:f3:1a:69:06:e2:db:3c:
71:7c:bb:ec:8a:d8:74:a3:d1:d9:e7:5a:ec:4e:0c:
7c:5f:29:99:08:63:be:88:b9:8c:d7:6b:39:93:9b:
9c:b3:d2:08:f2:35:24:4a:29:96:6b:ec:8d:5d:6f:
4e:22:d6:f2:a7:a9:e4:c6:1f:d0:47:d3:cd:bb:8a:
9b:c2:cb:f3:1c:a7:ac:c0:ad:b5:16:6b:b0:96:6f:
f1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5C:28:07:DF:C8:1B:69:84:09:41:EC:CB:D2:CC:67:9D:94:4B:07
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/iVwoB9_IG2mECUHsy9LMZ52USwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.185.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:a6:bb:88:4d:b2:ae:38:d1:d1:92:14:07:c3:c6:d8:b6:8a:
55:51:15:b6:30:a3:b4:88:1b:6e:07:76:7c:92:c0:4b:dc:1b:
84:e1:48:77:e0:c9:97:ac:1b:84:d0:36:d8:ee:95:d5:1e:de:
76:d8:be:38:0c:67:3f:11:d6:1d:7d:ed:69:40:2e:36:e3:3c:
be:27:75:3b:66:57:5d:ce:2e:15:eb:a2:55:c2:e1:30:2a:7a:
85:71:b8:22:f3:20:3a:a4:fb:78:ad:a0:62:47:51:00:06:c7:
e1:47:57:36:7b:38:3d:0c:cf:e1:01:8c:34:6f:d5:1e:2b:2c:
ff:8f:c5:d1:9f:3d:4c:d0:6a:9c:02:79:88:8c:d7:ae:72:c0:
a1:8a:f9:a9:ad:a6:82:fa:eb:b0:b1:c7:76:b9:08:af:2a:be:
d3:61:ac:dc:aa:8a:13:78:fc:b6:fe:e7:d4:fb:39:8f:9b:fc:
bc:c1:3a:d9:80:8c:f4:c1:3f:de:7f:02:f4:8a:6c:37:b9:4c:
83:e0:ed:d3:89:db:53:c0:6e:0d:4a:70:69:80:bf:92:6d:bb:
ee:9b:ef:03:82:02:70:e8:fb:f2:74:ef:80:94:4f:9c:fe:68:
56:0d:27:a1:ff:18:c7:e8:bc:2c:8a:10:94:8a:78:6d:82:4b:
7c:97:4f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:26 2025 by rpki-client