Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/quSYAsJ9W0A0NFh32lACp6bYpfQ.roa
File: quSYAsJ9W0A0NFh32lACp6bYpfQ.roa (raw, json)
Hash identifier: srzhBF2/SuOjaVeGX4bW1QQFH8QBa9FRScGGMEEGkWY=
Subject key identifier: AA:E4:98:02:C2:7D:5B:40:34:34:58:77:DA:50:02:A7:A6:D8:A5:F4
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0410CDB5
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/quSYAsJ9W0A0NFh32lACp6bYpfQ.roa
Signing time: Thu 21 Apr 2022 12:03:11 +0000
ROA not before: Thu 21 Apr 2022 12:03:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 141.11.101.0/24 maxlen: 24
141.11.100.0/24 maxlen: 24
141.11.224.0/22 maxlen: 24
141.11.230.0/23 maxlen: 24
141.11.228.0/23 maxlen: 24
141.11.124.0/24 maxlen: 24
141.11.125.0/24 maxlen: 24
141.11.123.0/24 maxlen: 24
141.11.232.0/22 maxlen: 24
141.11.126.0/24 maxlen: 24
141.11.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68210101 (0x410cdb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 21 12:03:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aae49802c27d5b4034345877da5002a7a6d8a5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e9:6f:14:56:ed:ee:a6:48:59:ee:a1:fd:c9:
a9:6c:32:9f:40:4d:9a:84:68:3e:3b:71:04:a9:f2:
07:52:55:e2:4e:fa:16:0a:a2:73:b9:2b:47:ab:4c:
6d:e7:04:86:e4:a2:98:6d:43:1c:1d:00:ed:a0:05:
12:93:99:22:60:51:ca:b1:fc:14:e6:73:7f:4c:08:
a4:b7:fb:6c:bc:ea:4f:27:95:1e:6d:14:f5:19:b4:
c5:b7:28:a6:4c:ac:c6:88:ec:8c:46:3e:82:c5:24:
ad:71:5c:8f:af:f3:91:04:00:88:d0:55:f5:7e:f9:
52:95:b4:a4:56:67:45:8f:b3:a7:5b:33:a9:7d:e2:
08:60:46:36:8a:a5:e4:79:c4:55:e0:f1:ea:6a:7c:
81:9e:6f:ef:64:ca:1f:d8:37:6c:a4:67:2a:dc:4e:
87:77:2d:0b:a1:45:9e:d5:eb:19:2b:d0:91:dd:c3:
68:43:99:0d:f7:6d:3d:97:a8:69:59:84:ec:44:f5:
02:02:6e:cd:be:55:3a:86:2e:ac:60:96:6e:db:66:
5f:0d:84:f3:9a:eb:bb:a2:72:e8:f9:77:92:19:ad:
df:92:61:fa:6b:7f:f3:0a:ab:d1:3d:4b:06:29:b7:
12:86:e2:66:21:05:62:dd:58:74:d5:f3:9f:df:46:
83:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E4:98:02:C2:7D:5B:40:34:34:58:77:DA:50:02:A7:A6:D8:A5:F4
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/quSYAsJ9W0A0NFh32lACp6bYpfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.100.0/23
141.11.123.0-141.11.126.255
141.11.224.0/20
Signature Algorithm: sha256WithRSAEncryption
85:3a:fd:67:02:49:9c:85:c0:17:04:52:59:40:91:5c:93:9c:
43:c4:6a:a0:39:d0:6e:27:60:11:80:60:04:a5:ae:73:fa:eb:
06:24:2d:11:b9:e0:c2:3c:e0:98:95:4e:ef:b3:75:69:d5:8d:
47:d3:6b:65:b1:80:e4:98:dd:29:97:9e:41:9e:63:0b:75:cb:
9c:15:c0:59:0c:cf:a9:34:af:5c:9f:da:51:82:21:f8:28:40:
62:77:fd:62:07:04:75:bf:ca:0e:af:60:13:b6:b6:a9:b2:dd:
94:19:fb:5c:e3:53:53:9e:79:0c:c4:f3:89:00:c4:7f:2e:78:
12:69:2b:28:41:18:ec:ef:de:50:b1:10:52:23:f7:21:5d:f9:
fa:15:0a:11:fc:a5:0f:a2:13:a4:b6:c9:b0:04:fa:15:06:8f:
19:c7:73:62:0e:9e:2e:9b:8d:a4:c1:68:09:0a:4d:eb:2f:dd:
04:f8:40:47:22:9f:df:23:25:85:c4:13:fe:4f:68:30:d1:4c:
2b:b2:d9:fa:6c:0d:99:be:67:cb:20:7b:88:92:13:75:b5:da:
5a:69:ca:12:5f:fe:90:d6:d5:73:c2:82:8c:e7:ec:a7:e9:ed:
f6:45:89:68:b4:df:58:52:0c:bc:19:58:da:37:c2:92:70:e0:
d6:82:f4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:11 2025 by rpki-client