Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/nRIBJZVnHt5lDMB5Yh5ImCK7bWU.roa
File: nRIBJZVnHt5lDMB5Yh5ImCK7bWU.roa (raw, json)
Hash identifier: xSkyVctPcc9xyctqluONuAmB/mPxNjpfMnCVyL+DBkk=
Subject key identifier: 9D:12:01:25:95:67:1E:DE:65:0C:C0:79:62:1E:48:98:22:BB:6D:65
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 018369C658819E56271DCDE10CA8585E1B49
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/nRIBJZVnHt5lDMB5Yh5ImCK7bWU.roa
Signing time: Fri 23 Sep 2022 09:55:49 +0000
ROA not before: Fri 23 Sep 2022 09:55:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.11.44.0/22 maxlen: 24
141.11.40.0/22 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.42.0/24 maxlen: 24
141.11.41.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.10.0/23 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.22.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.33.0/24 maxlen: 24
141.11.32.0/24 maxlen: 24
141.11.160.0/24 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.189.0/24 maxlen: 24
141.11.187.0/24 maxlen: 24
141.11.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:69:c6:58:81:9e:56:27:1d:cd:e1:0c:a8:58:5e:1b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 23 09:55:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d12012595671ede650cc079621e489822bb6d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:17:a1:89:59:fc:9e:b5:00:e4:33:e5:38:2c:
00:33:0e:7c:a5:85:57:04:af:d9:81:96:88:fd:4e:
ef:e5:b8:ed:6d:6a:06:0d:af:94:fe:58:8e:7d:4d:
56:d9:7b:e9:b0:be:e8:a8:d8:08:d8:f9:86:af:77:
cd:64:4a:ed:8c:a3:15:fc:6f:d2:09:8e:51:cf:e2:
7f:31:be:1d:29:63:62:fc:ff:b7:0e:d4:46:a0:ab:
f1:47:0c:fe:fd:c1:4d:cb:a3:0f:92:3e:04:fe:8c:
60:8f:0e:36:fa:c6:4b:52:41:46:2f:f3:91:7f:f6:
84:b3:1d:e9:36:3a:ec:31:25:0c:05:97:c1:a6:01:
c3:93:6b:b5:6f:e1:3f:2c:d7:c8:6e:62:1f:99:c7:
f0:b2:a7:f8:14:2a:5e:51:21:d5:ef:fc:d1:6c:fa:
8b:cc:7e:70:36:6c:eb:cd:f0:41:0e:b1:84:6d:fa:
2e:46:d8:0d:53:4d:24:54:26:1b:6b:cd:f7:60:69:
9a:9b:20:bd:02:b0:3e:f2:f8:84:1e:d2:71:b0:1b:
12:40:63:5b:9d:d1:a1:f3:75:57:77:8c:7a:53:b5:
c4:1f:25:8e:0a:64:94:62:1e:36:38:3c:11:02:0b:
be:96:ce:cd:e3:0d:56:0c:da:ee:b4:7f:dc:37:5f:
72:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:12:01:25:95:67:1E:DE:65:0C:C0:79:62:1E:48:98:22:BB:6D:65
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/nRIBJZVnHt5lDMB5Yh5ImCK7bWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.2.0/24
141.11.10.0/23
141.11.17.0-141.11.18.255
141.11.22.0/24
141.11.25.0/24
141.11.28.0/24
141.11.31.0-141.11.33.255
141.11.39.0-141.11.47.255
141.11.99.0/24
141.11.160.0/24
141.11.176.0/24
141.11.182.0/23
141.11.187.0/24
141.11.189.0/24
Signature Algorithm: sha256WithRSAEncryption
93:6f:4d:9a:f5:65:00:40:45:16:c0:b9:11:24:f1:d8:0e:ee:
af:e5:7f:cd:9d:e4:13:82:39:a9:e2:a1:27:d4:fa:34:bc:e9:
3b:d9:65:76:f9:ac:35:25:cd:e9:2e:5c:ea:a4:a9:8a:11:3f:
94:77:2e:ce:0b:62:f3:10:a8:b1:7a:31:c8:bc:47:b9:52:34:
57:11:57:3d:07:5c:a0:88:af:63:d9:88:6d:98:72:64:47:d8:
8e:5b:86:32:8b:a1:8f:58:e3:7d:44:39:d9:b1:21:a3:5f:46:
a3:f2:ba:b7:3e:1e:40:82:7b:b4:eb:1f:28:6b:a9:32:30:90:
28:68:eb:8b:54:01:2f:b8:3a:ef:23:bf:70:30:13:3a:31:48:
61:1a:02:88:3e:4e:2c:d0:2f:83:32:92:5d:51:c6:ea:1f:86:
23:9e:4e:ef:9b:27:b4:87:0a:99:d9:fa:f1:df:55:19:5e:f8:
0b:7f:e2:16:07:7b:78:09:9c:e1:48:aa:dd:1d:9c:b8:2b:16:
6e:ff:79:23:89:a7:24:00:bd:e9:fd:31:ed:15:27:3b:a2:cf:
f5:b9:e1:a4:86:23:58:22:3a:f8:1a:a4:33:be:eb:eb:dd:82:
2f:6f:b1:7e:c6:a2:5f:bf:95:20:ff:82:9b:3a:c9:c8:75:73:
52:f9:cf:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:39 2025 by rpki-client