Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/q8BzhI78e-vTH9VdZ2iEbIYP7SE.roa
File: q8BzhI78e-vTH9VdZ2iEbIYP7SE.roa (raw, json)
Hash identifier: Qnm7zv8GFxFHot8S+x0/McOYFUpMdyzN77FyvxUEPFE=
Subject key identifier: AB:C0:73:84:8E:FC:7B:EB:D3:1F:D5:5D:67:68:84:6C:86:0F:ED:21
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 046BC48B
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/q8BzhI78e-vTH9VdZ2iEbIYP7SE.roa
Signing time: Thu 05 May 2022 14:53:09 +0000
ROA not before: Thu 05 May 2022 14:53:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 141.11.43.0/24 maxlen: 24
141.11.68.0/24 maxlen: 24
141.11.69.0/24 maxlen: 24
141.11.188.0/24 maxlen: 24
141.11.189.0/24 maxlen: 24
141.11.96.0/24 maxlen: 24
141.11.20.0/24 maxlen: 24
141.11.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74171531 (0x46bc48b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 5 14:53:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abc073848efc7bebd31fd55d6768846c860fed21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:91:54:99:0f:84:b7:62:e9:a7:9c:92:83:db:
7d:a0:08:92:57:97:7b:05:83:c0:87:6b:77:3f:32:
40:e8:d3:50:26:4e:17:df:01:f1:da:37:87:b8:8e:
eb:fe:ca:04:3f:63:d4:7b:23:7c:8f:5b:09:66:39:
d1:52:65:8e:87:fd:83:5c:c7:83:70:46:72:fb:af:
95:55:d0:26:0d:99:d1:55:cf:29:f5:d6:f1:b9:4a:
cd:c0:52:44:6e:3e:df:ce:d2:33:1c:fd:cd:fc:21:
d8:6e:9b:34:aa:44:91:c4:f9:0a:32:61:61:29:a6:
40:a3:fe:34:f4:dc:d5:5c:26:36:f9:99:70:f3:f7:
36:f5:04:d7:e0:25:85:16:e6:72:63:9b:7f:62:2e:
82:2a:fa:d1:f7:00:32:c0:a3:d2:8b:e7:45:76:e8:
ec:d7:d4:90:57:03:48:39:c9:87:46:6b:fb:ec:ba:
57:eb:26:c8:16:28:f9:1d:02:31:84:bb:69:2c:2d:
f5:96:74:b6:ce:cb:b2:78:25:64:b1:b3:18:9c:cb:
76:6a:6e:88:d8:a7:46:db:51:7c:7c:80:ae:1d:b1:
6a:3f:c6:f2:dd:4a:6d:17:b4:8e:78:e8:21:a3:a4:
ed:98:11:4a:00:34:01:1b:e2:b1:a2:ac:00:c7:8c:
5c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C0:73:84:8E:FC:7B:EB:D3:1F:D5:5D:67:68:84:6C:86:0F:ED:21
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/q8BzhI78e-vTH9VdZ2iEbIYP7SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.20.0/24
141.11.27.0/24
141.11.43.0/24
141.11.68.0/23
141.11.96.0/24
141.11.188.0/23
Signature Algorithm: sha256WithRSAEncryption
55:98:05:d7:f2:44:af:48:54:33:77:a1:bc:99:b2:d0:1c:c3:
f9:3a:43:9d:73:41:d0:a4:ee:46:43:52:57:1f:36:d9:f7:b2:
cf:16:5b:3e:91:cb:61:88:62:0c:17:8f:93:06:b0:cd:6e:c6:
2f:32:30:3f:43:cb:bf:6b:b2:49:02:92:eb:c7:d9:18:c7:d1:
ac:3d:c7:d0:a0:fc:b8:8e:0e:58:07:ad:ee:ba:f3:fc:e4:fe:
ef:52:a2:a5:e6:ec:04:4e:32:c1:9b:e0:72:97:b3:05:6a:3f:
98:2f:89:38:6d:42:47:97:1c:0f:6e:70:c3:77:72:eb:ca:a9:
72:74:d3:c0:51:09:01:60:8a:5e:53:a6:e8:0d:9f:7f:36:a8:
6d:8e:67:36:f4:80:d3:75:d4:37:38:2b:9e:97:47:3b:f1:b6:
68:aa:c2:9a:46:2f:c6:c9:0d:5f:6f:79:f2:91:6c:78:7e:72:
27:cd:38:8b:7a:59:57:35:ae:de:57:7d:41:1e:7f:70:24:53:
6e:ab:6f:9d:19:e4:e2:72:b2:e1:94:a1:45:9c:b5:1a:de:4e:
50:ec:b8:1a:78:1a:14:bf:2a:13:d1:9c:d4:e9:ce:96:aa:81:
79:02:a6:da:62:eb:9a:c6:c3:21:0e:c1:a7:66:fa:33:d8:64:
f3:79:94:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:46 2025 by rpki-client