Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/pbzlgzFMIKQJjH91AGIWdssANMI.roa
File: pbzlgzFMIKQJjH91AGIWdssANMI.roa (raw, json)
Hash identifier: rxZpSyxfb1GAh908NcIQLyQDs9WJkK0gddU5rh493+Q=
Subject key identifier: A5:BC:E5:83:31:4C:20:A4:09:8C:7F:75:00:62:16:76:CB:00:34:C2
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01833B6B8740E9A9980A5E290A2AB4A313D6
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/pbzlgzFMIKQJjH91AGIWdssANMI.roa
Signing time: Wed 14 Sep 2022 09:54:06 +0000
ROA not before: Wed 14 Sep 2022 09:54:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19437
IP address blocks: 141.11.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3b:6b:87:40:e9:a9:98:0a:5e:29:0a:2a:b4:a3:13:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 14 09:54:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5bce583314c20a4098c7f7500621676cb0034c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:de:05:64:01:b3:82:25:8f:a4:bb:5c:21:d2:
b3:a7:66:4a:2b:33:f3:69:9a:70:01:9d:72:a1:a3:
64:48:d6:26:f0:8b:e2:9f:3e:ba:0f:ce:9b:58:95:
d0:52:71:f7:80:b0:20:fd:9b:5b:41:52:1b:47:76:
2b:a9:c9:cd:3a:78:8e:a9:ca:a1:fa:32:ef:59:81:
74:28:0a:7b:29:53:0d:24:04:34:5d:e4:9b:f2:22:
d8:8f:7d:39:ff:52:30:4d:cc:cd:fa:49:3e:06:78:
26:64:1f:87:96:48:0b:1a:06:e8:8e:b8:1b:6c:ad:
fb:15:e8:00:87:1e:86:90:7f:83:c4:66:20:51:52:
41:c8:bd:fe:f3:2d:7d:ef:c0:2e:20:79:45:e9:f4:
d5:7a:d9:a7:1d:e4:01:1f:90:1a:90:8c:4e:8a:8c:
12:be:5a:1a:6b:74:7f:46:7a:b0:df:c1:ad:08:8b:
5a:15:64:32:0a:53:65:ce:d0:79:d8:ab:6c:52:09:
16:a7:9a:93:c2:1f:b9:75:cc:c6:fc:3b:2a:3b:0e:
f4:8e:18:a4:db:95:e6:54:5a:8b:ec:10:54:20:a0:
97:bc:2c:9a:8a:16:24:80:4f:83:39:0e:9c:18:bf:
8a:0f:0a:1c:53:7b:a4:f1:2d:68:92:9e:95:af:2a:
9a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BC:E5:83:31:4C:20:A4:09:8C:7F:75:00:62:16:76:CB:00:34:C2
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/pbzlgzFMIKQJjH91AGIWdssANMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.112.0/21
Signature Algorithm: sha256WithRSAEncryption
53:4b:99:89:a9:b2:6a:1a:51:bf:cc:6f:ab:4b:b5:fd:c2:af:
f7:52:0e:60:c7:52:ca:7b:33:4f:f5:89:f0:69:d8:51:86:87:
62:29:01:0a:45:60:d9:ff:9c:1b:68:c5:a3:65:74:ac:4d:a3:
b6:b7:d7:6f:d3:fe:ac:b9:a6:49:55:37:c2:6a:10:26:78:1f:
54:06:7e:d7:99:2c:61:7e:9c:3d:46:38:10:2b:8d:ae:fc:69:
2d:94:00:a7:ad:59:34:24:f9:f1:da:39:3b:c1:5a:29:8b:19:
36:e6:f7:d8:be:bc:d2:ae:31:7b:ad:00:52:52:9f:d4:03:92:
7e:1d:60:fc:02:43:19:55:de:04:76:5b:96:b3:ef:d8:e5:b2:
cf:ee:c4:65:97:43:83:42:ec:97:ea:2d:60:5d:28:10:97:89:
b2:e3:23:62:72:e4:ea:f6:e8:ff:d3:3a:72:df:0e:e0:5f:1c:
fd:69:ce:ff:e9:64:e9:01:1e:8d:84:78:f4:67:3f:ca:7a:e1:
8e:02:57:d6:f6:9f:2c:b5:d3:c4:0e:b6:78:74:2d:57:45:7c:
3d:eb:52:44:70:c0:8c:ed:0e:16:ca:75:07:28:d6:63:fa:b0:
52:1d:f8:35:5f:06:e0:c0:9c:d3:d4:c6:2f:f3:93:07:d7:18:
0e:97:27:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:48:30 2025 by rpki-client