Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/lbN8jhsJzRvZEOOzGdXp-qJvGoY.roa
File: lbN8jhsJzRvZEOOzGdXp-qJvGoY.roa (raw, json)
Hash identifier: TtoCyIqaisSWxk+tpM3oleOXgOPzTcdEiqYlJejYYmg=
Subject key identifier: 95:B3:7C:8E:1B:09:CD:1B:D9:10:E3:B3:19:D5:E9:FA:A2:6F:1A:86
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 044DC501
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/lbN8jhsJzRvZEOOzGdXp-qJvGoY.roa
Signing time: Tue 03 May 2022 09:52:39 +0000
ROA not before: Tue 03 May 2022 09:52:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 141.11.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72205569 (0x44dc501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 3 09:52:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95b37c8e1b09cd1bd910e3b319d5e9faa26f1a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a9:36:b9:ee:3c:e3:24:9b:73:d5:9c:3f:c4:
78:71:3f:21:f3:1e:cc:ac:f8:7a:9c:8a:38:b0:fa:
2f:c3:24:1b:65:9e:d4:06:4e:24:e8:db:f4:fa:ec:
1b:e3:1c:1e:a9:f4:26:64:42:a2:e0:43:dc:74:d3:
72:24:1a:cf:62:a9:2f:cc:f1:f9:ce:7f:04:97:9f:
ba:a4:cf:9d:04:f0:e4:3c:5d:97:98:11:ee:96:c6:
63:6a:6a:35:9d:cd:b3:22:eb:06:5f:49:bd:0d:cf:
c4:fa:b2:42:7c:b7:60:83:ee:1f:df:56:13:60:de:
fb:40:70:ef:50:6a:c3:58:17:8a:52:bd:fe:ff:16:
d5:ce:40:a6:df:b4:af:86:57:7c:9c:34:a0:29:5e:
68:47:f3:4e:45:88:34:9c:6e:a0:b2:8b:3c:df:ee:
90:1a:74:90:64:9a:29:e3:2c:b1:81:e7:5d:59:f6:
ab:cd:ed:c9:72:be:80:59:8e:2b:55:ac:a2:29:f3:
b9:86:19:6c:94:4a:ab:c9:d1:5f:f1:31:f4:71:70:
08:db:09:66:cf:25:16:f4:4d:f2:de:53:8b:fe:e7:
dd:c4:27:62:bc:a7:ef:48:55:13:84:41:6a:7c:c1:
c1:dd:49:94:0b:65:19:bb:1a:cc:ca:0b:c8:1d:c2:
6a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B3:7C:8E:1B:09:CD:1B:D9:10:E3:B3:19:D5:E9:FA:A2:6F:1A:86
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/lbN8jhsJzRvZEOOzGdXp-qJvGoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.179.0/24
Signature Algorithm: sha256WithRSAEncryption
84:db:38:6e:92:6c:f8:8b:dd:bf:d9:81:59:0e:87:63:93:ac:
fd:8c:5d:5b:8f:e8:46:dd:99:81:9d:66:b3:48:6e:6a:5c:4e:
2e:67:8b:3b:48:79:e9:63:ad:89:c9:3b:b5:77:9b:ce:bb:54:
8a:80:e5:7c:2e:f8:4a:7b:ed:fb:2f:fc:8c:c7:1f:63:1a:02:
c2:33:55:45:bf:cc:90:d6:77:e9:09:52:32:22:19:0d:d5:b2:
65:61:76:68:45:08:d8:3f:a4:2b:eb:9f:c4:74:13:13:ab:a6:
e9:6a:f2:0d:bf:e0:64:b1:5b:9a:a9:70:8c:00:70:bb:e5:a0:
54:11:e6:47:9b:10:5c:53:8d:1b:10:e3:6b:63:45:9f:7f:51:
4f:8c:34:45:7d:98:b9:c2:d3:d6:52:76:cd:ef:9b:c4:79:5c:
eb:21:5c:af:8a:d3:54:01:3f:9c:32:d7:0f:a9:89:34:4d:e8:
e5:ae:87:53:7d:05:a4:b3:43:9c:4d:42:c5:04:06:a2:00:83:
18:27:8c:3b:b0:aa:0f:71:43:60:24:65:31:d8:0c:c9:6b:86:
ad:4f:b5:b7:05:98:a5:d1:53:ce:73:fb:e7:fb:c7:7a:a1:4e:
cd:a0:d1:34:7f:4c:21:ce:0e:d6:fa:c9:30:7c:43:c5:a8:4f:
c1:22:4f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:29 2025 by rpki-client