Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/nKw4E3qt9Yzptc9PmNAu9OQ0pbU.roa
File: nKw4E3qt9Yzptc9PmNAu9OQ0pbU.roa (raw, json)
Hash identifier: aR6MoiYxkcmcG/GhTWn/sDc+tBjHIk6qcWqX9XIjCQs=
Subject key identifier: 9C:AC:38:13:7A:AD:F5:8C:E9:B5:CF:4F:98:D0:2E:F4:E4:34:A5:B5
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 03B189F0
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/nKw4E3qt9Yzptc9PmNAu9OQ0pbU.roa
Signing time: Fri 01 Apr 2022 22:13:34 +0000
ROA not before: Fri 01 Apr 2022 22:13:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 141.11.168.0/22 maxlen: 24
141.11.80.0/22 maxlen: 24
141.11.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61966832 (0x3b189f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 1 22:13:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9cac38137aadf58ce9b5cf4f98d02ef4e434a5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:88:7b:59:81:15:2d:60:c7:aa:14:95:5f:9c:
08:7d:46:7a:54:4d:e5:07:b5:8b:02:f8:d9:fa:a2:
c9:92:ac:5b:0e:fa:da:60:96:3d:8b:a7:bf:aa:49:
68:70:a6:89:06:7f:a6:06:6c:b3:23:c0:83:c0:5e:
48:e5:53:a0:2f:b0:30:c6:17:65:f4:a7:2b:59:66:
fe:67:a7:c3:98:aa:d9:78:4a:74:52:c3:e7:40:89:
7f:f2:ef:ad:c3:b2:ef:4d:63:fa:7b:9c:67:ed:5c:
ae:a8:bd:9d:cb:b7:f6:94:5e:5f:9d:76:54:eb:ae:
92:d4:f8:4a:7e:ae:1b:d7:60:3d:5c:67:30:77:f3:
d9:85:1c:8a:6e:a4:58:60:a2:3a:25:38:38:24:d3:
91:72:9f:0e:f3:07:a5:5e:a0:4c:d0:9a:8f:61:e3:
53:e9:f0:67:39:eb:82:18:f9:c6:12:fe:79:ee:df:
94:61:a7:fb:44:b2:86:06:2c:6b:b7:a6:87:48:1f:
28:92:7e:bc:18:2a:e4:00:1d:4d:e7:6a:1b:bb:7f:
33:73:e0:e0:0c:f8:d2:a6:57:9c:4d:53:f8:96:58:
bd:be:51:c3:af:c1:74:56:98:c1:41:82:f9:fc:81:
bb:1b:35:45:a5:92:7f:6c:7b:80:72:d4:36:32:d8:
0d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AC:38:13:7A:AD:F5:8C:E9:B5:CF:4F:98:D0:2E:F4:E4:34:A5:B5
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/nKw4E3qt9Yzptc9PmNAu9OQ0pbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.32.0/22
141.11.80.0/22
141.11.168.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:94:26:c7:fb:58:e9:b8:03:b3:40:ad:2f:ec:6f:c3:6b:ed:
6c:d1:b0:da:04:1a:32:41:bc:3d:21:45:68:b5:25:f6:f7:eb:
24:4b:af:39:d1:9c:e0:26:d0:4b:49:29:10:94:08:ce:21:25:
fc:71:25:02:10:2b:7d:f4:f1:af:76:85:2d:46:7b:51:e3:02:
f9:01:59:58:15:e7:b6:d6:b7:3f:87:a8:01:10:c8:15:71:af:
d1:9d:c0:a4:57:9e:90:da:6e:c6:10:33:a2:af:b2:8a:27:f7:
62:1f:78:ea:64:8e:3e:db:aa:1d:3a:1d:c3:96:38:16:bb:16:
e9:c5:82:2e:9c:81:9a:48:73:14:b6:97:02:45:77:a5:5f:73:
80:fb:e5:a3:71:a3:29:1e:77:7c:5b:a3:61:5a:50:17:cb:6c:
9e:ea:34:f1:49:f0:af:e9:76:8e:67:6b:ca:bc:b6:f7:4d:c8:
e5:62:20:81:01:98:57:f8:8e:73:f3:09:70:29:58:39:d1:38:
bf:4b:f0:2e:36:ca:4b:eb:cc:5e:26:9a:27:3a:82:42:b6:a9:
29:23:f6:e0:4d:1f:39:94:0d:8c:90:dd:4d:61:a1:a4:c5:80:
81:56:bd:e6:d3:f0:ad:fa:70:b2:a5:cf:5a:1e:ce:da:59:ee:
f1:94:ef:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:20 2025 by rpki-client