Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/koP0XHskwu44SxknZBPiUKsYBfw.roa
File: koP0XHskwu44SxknZBPiUKsYBfw.roa (raw, json)
Hash identifier: 5cqoEW8DgNb70/jZJMS+CSzm6K+dPB434KlARa1Pyrw=
Subject key identifier: 92:83:F4:5C:7B:24:C2:EE:38:4B:19:27:64:13:E2:50:AB:18:05:FC
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0469187D
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/koP0XHskwu44SxknZBPiUKsYBfw.roa
Signing time: Thu 05 May 2022 12:23:34 +0000
ROA not before: Thu 05 May 2022 12:23:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 141.11.80.0/22 maxlen: 24
141.11.30.0/24 maxlen: 24
141.11.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73996413 (0x469187d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 5 12:23:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9283f45c7b24c2ee384b19276413e250ab1805fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:34:92:cd:cc:fb:75:1b:2d:ef:d0:a9:6d:21:
cf:c0:30:95:88:39:45:8f:33:08:44:b3:40:63:41:
0f:8b:61:c6:24:14:c6:7e:b5:39:de:2f:b7:87:9a:
50:e4:19:10:af:d7:36:35:02:2a:5b:b8:8e:fe:1d:
db:82:a1:90:ed:9c:ae:38:72:29:2e:6f:b4:1f:f2:
60:6e:eb:be:d0:70:19:68:3a:83:92:c0:95:94:ad:
88:3e:22:83:fe:2a:a6:e0:23:4e:72:7b:3b:21:77:
3b:2c:40:a0:a3:c6:09:2a:9e:36:95:82:1a:d4:dc:
e8:5e:f9:c1:9c:2c:3f:7a:dd:d9:a5:79:cc:d2:60:
89:41:e2:4c:01:a2:e2:fd:04:83:5d:15:ad:45:9e:
0f:aa:68:e6:0d:10:9a:93:53:4c:35:66:51:1c:6e:
d6:a4:4f:4a:9a:8f:8b:55:a7:f6:b3:46:2f:8d:05:
70:02:bf:4c:07:33:ce:34:ae:77:b5:ef:b1:15:7f:
7f:39:72:9d:51:9b:5a:12:51:01:9b:97:b1:a6:d2:
ef:bd:ae:b9:04:2f:16:fa:d5:b0:c7:9a:43:6f:65:
9c:5e:02:49:db:c7:fa:62:c2:95:4f:9a:da:af:0e:
88:c6:06:71:82:97:5e:5f:0f:b5:dc:46:85:08:46:
31:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:83:F4:5C:7B:24:C2:EE:38:4B:19:27:64:13:E2:50:AB:18:05:FC
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/koP0XHskwu44SxknZBPiUKsYBfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.30.0/24
141.11.36.0/22
141.11.80.0/22
Signature Algorithm: sha256WithRSAEncryption
87:d7:a8:07:55:84:8b:4a:9b:ba:e8:39:b2:67:6b:01:3e:77:
32:bb:48:c2:85:66:af:d9:43:96:18:a8:b3:61:93:5a:9b:e1:
01:49:80:14:a4:16:11:a3:89:f4:12:bc:4c:9f:91:89:e2:53:
a4:20:cf:d2:a9:75:bf:61:e1:bd:1c:25:51:50:2f:3f:09:ca:
2f:ce:db:96:23:61:3d:0d:a6:f4:52:17:b0:d8:fa:81:45:eb:
24:22:12:41:86:05:36:b9:82:28:cc:a1:43:9e:2b:f1:ab:c2:
fa:45:37:e6:d7:4a:a8:f3:fc:1e:37:47:d0:e0:53:15:ec:03:
73:40:cb:59:3d:9f:13:04:c0:d2:63:fb:fc:8d:ab:87:f0:09:
e6:fb:4f:fb:4c:eb:b4:17:df:46:43:e4:35:cb:53:42:39:1e:
2d:a4:46:03:02:1f:cf:ce:df:95:e9:ab:ce:a7:cb:10:6b:52:
6c:35:a1:6e:16:59:ec:33:50:bb:9a:02:dc:bd:5c:e8:b2:e4:
35:d8:23:53:da:7c:bc:b4:80:b0:cd:ff:a7:88:6c:f6:68:e1:
3f:ed:f2:de:0b:52:23:dc:aa:26:2e:0b:0b:a9:26:a8:88:15:
68:3a:fb:98:1b:46:a7:74:77:15:0f:77:4a:8d:db:52:14:4d:
8d:f5:a8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:02 2025 by rpki-client