Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/nS1YgXbUduSq8vuzRklarriakCg.roa
File: nS1YgXbUduSq8vuzRklarriakCg.roa (raw, json)
Hash identifier: ztR2FSyu5+VMwrotEN2fr3fQlOblxK6CMUAeoNQdgec=
Subject key identifier: 9D:2D:58:81:76:D4:76:E4:AA:F2:FB:B3:46:49:5A:AE:B8:9A:90:28
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 03B9246B
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/nS1YgXbUduSq8vuzRklarriakCg.roa
Signing time: Mon 04 Apr 2022 09:18:50 +0000
ROA not before: Mon 04 Apr 2022 09:18:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57416
IP address blocks: 141.11.161.0/24 maxlen: 24
141.11.177.0/24 maxlen: 24
141.11.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62465131 (0x3b9246b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 4 09:18:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d2d588176d476e4aaf2fbb346495aaeb89a9028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:96:97:95:ee:2a:50:c4:43:bf:71:29:bb:
98:12:72:1a:04:b7:95:f8:98:83:f8:2f:7a:ec:8c:
89:4c:f5:61:7b:8c:b4:73:5a:ba:c1:18:cb:35:72:
ba:b6:cb:3c:ab:03:52:d1:05:5c:23:8c:b0:1f:71:
ab:ce:04:c8:28:59:53:a5:ad:b9:5a:80:f9:43:7b:
86:05:ab:91:a4:0a:0a:f6:d4:8b:17:3f:60:f9:1b:
69:14:6d:a6:8d:32:12:bf:37:6a:e0:45:39:a7:d4:
f0:10:03:6c:9f:bd:89:48:26:8e:7c:c4:b7:95:e8:
bf:28:0a:ed:13:f5:b4:37:d0:a4:65:51:ac:4b:b7:
34:b9:24:3e:cf:0c:56:d8:1e:4f:24:c2:a8:3a:3e:
2d:23:11:75:9d:ad:a4:03:44:70:ce:85:65:36:b1:
ce:76:e6:21:ee:6d:80:0c:8e:bf:f0:fd:74:79:55:
e2:5a:5d:e7:4f:b1:72:c9:d2:65:ac:3a:ec:a9:83:
d8:a5:10:ad:5a:35:d7:00:60:e6:74:97:a3:07:cc:
48:68:97:51:fd:16:5b:42:02:15:d3:b9:5e:26:00:
d4:a4:c6:29:e6:11:99:af:70:a7:34:47:6b:29:dc:
65:46:c0:1d:87:49:82:a7:24:19:c1:e2:a3:ad:9c:
0a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2D:58:81:76:D4:76:E4:AA:F2:FB:B3:46:49:5A:AE:B8:9A:90:28
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/nS1YgXbUduSq8vuzRklarriakCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.30.0/24
141.11.161.0/24
141.11.177.0/24
Signature Algorithm: sha256WithRSAEncryption
27:9f:71:b0:ad:0f:c1:0f:ca:2e:86:cd:c6:04:86:5e:ca:32:
30:18:a8:a1:78:a5:9e:e3:13:bc:66:37:b6:18:4c:08:e5:b4:
e2:04:90:07:bd:66:18:10:69:7f:b4:fd:5c:80:65:1b:cb:b8:
ad:e9:62:88:f6:c3:ed:36:8a:4b:77:7b:37:00:ba:b8:e7:f6:
b4:c2:42:32:11:28:56:69:bf:ec:ef:f6:13:c1:99:83:50:49:
ec:67:98:24:3f:4b:5b:fd:6c:4c:c5:89:23:8c:83:fc:fd:3e:
34:af:fd:06:a6:36:32:1e:50:81:e8:a5:55:8d:f6:14:80:b1:
02:4d:c1:ca:03:ac:7e:26:24:c7:d5:91:cb:c4:fb:48:24:62:
4f:62:ad:0e:45:35:96:46:33:9d:f4:5c:55:92:0e:3f:39:20:
bd:95:03:b2:ec:61:58:1a:36:65:66:1e:a1:70:20:6c:2d:eb:
a5:fd:ba:4a:a2:95:83:e3:73:04:ff:54:f1:85:ed:a1:ab:de:
7f:bb:4a:e4:8e:12:b7:99:ac:96:d4:a7:0d:ae:7b:08:dd:0f:
85:6f:df:1f:11:5f:f4:88:4e:14:83:2c:ec:2b:5f:80:be:f2:
c4:36:fc:b7:d8:1f:6d:56:43:5d:dc:23:9e:ec:28:59:88:0e:
fe:6d:dd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:22:36 2025 by rpki-client