Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/rN3Nfz2yl8I7CcrBt5Bh3o3vLUI.roa
File: rN3Nfz2yl8I7CcrBt5Bh3o3vLUI.roa (raw, json)
Hash identifier: 3omECgEo0rXjR1ABNjxH2n7NNli8IhYRQ3Uq7pVZ7ZI=
Subject key identifier: AC:DD:CD:7F:3D:B2:97:C2:3B:09:CA:C1:B7:90:61:DE:8D:EF:2D:42
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0498C369
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/rN3Nfz2yl8I7CcrBt5Bh3o3vLUI.roa
Signing time: Thu 12 May 2022 18:30:07 +0000
ROA not before: Thu 12 May 2022 18:30:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 141.11.230.0/23 maxlen: 24
141.11.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77120361 (0x498c369)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 12 18:30:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acddcd7f3db297c23b09cac1b79061de8def2d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:75:f0:f1:87:58:87:84:9f:0d:22:0e:9c:42:
18:8a:f7:a6:26:8a:85:26:0c:ab:ee:1c:2f:85:49:
a4:01:6b:32:e0:65:dc:62:d9:74:e0:64:fc:d0:85:
0f:88:7b:6d:44:15:2b:47:8e:3e:b9:fa:50:3a:37:
c3:d0:62:47:c6:9c:bd:af:05:6a:21:11:2e:29:66:
7e:a3:3e:73:e0:75:ed:f8:81:fe:09:5a:e1:43:ac:
c1:64:82:b9:6f:39:c3:f9:5b:18:fa:42:7b:ce:74:
ee:9f:99:72:af:d2:97:51:10:e3:52:45:e2:ba:31:
12:26:0e:12:ac:c3:69:fa:33:73:13:59:b9:43:a0:
d2:2e:d0:32:d5:96:ae:62:b4:ea:ab:b3:01:70:43:
0e:c9:86:58:7e:da:05:db:1c:3b:ab:c4:7e:20:d2:
a6:6d:30:9e:2d:fe:9c:a5:97:ee:aa:67:33:95:59:
94:e7:5b:99:58:61:aa:47:c4:f5:62:c6:bd:a6:db:
b4:dd:47:ca:ee:a5:08:9a:5b:9a:f0:5f:8a:bd:5e:
21:ad:07:91:c9:b8:c4:48:19:1f:11:b8:4c:7e:3b:
c4:84:fc:de:2e:ee:4a:43:fc:51:66:41:ed:e6:0c:
da:d1:75:5c:57:03:ef:83:4d:ae:ce:38:aa:95:d8:
82:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DD:CD:7F:3D:B2:97:C2:3B:09:CA:C1:B7:90:61:DE:8D:EF:2D:42
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/rN3Nfz2yl8I7CcrBt5Bh3o3vLUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.230.0/23
141.11.236.0/22
Signature Algorithm: sha256WithRSAEncryption
41:54:19:0b:48:3f:10:e7:1e:62:9d:66:20:2e:84:cb:5d:a0:
9a:9d:27:5c:a7:e4:61:98:0a:22:ab:ce:80:15:20:12:ae:77:
63:19:bd:86:87:ef:c5:b3:aa:ce:7d:45:2e:ed:bf:81:53:1c:
88:64:56:2c:7b:0a:03:34:2f:9e:fd:d4:51:25:73:f9:03:d8:
d3:37:05:04:68:b3:db:d7:11:54:80:aa:bc:ac:27:e8:d4:86:
da:5b:36:5f:c0:45:b0:b8:a1:5b:cf:ca:03:a9:66:99:be:ed:
fd:45:9c:75:29:7b:26:d1:45:7d:e2:b9:be:49:b7:60:74:71:
83:da:eb:80:ae:a9:32:b9:25:2d:a1:71:75:5d:a4:a2:3b:39:
3f:6b:c4:db:0f:fc:8b:5c:df:3b:7a:c9:87:4a:76:0b:6c:0a:
9d:b9:6e:6c:fe:90:d5:3b:12:96:45:5e:c1:35:77:93:14:d1:
e5:05:17:f9:9e:cf:7a:cc:51:34:81:d3:87:a3:48:a2:cb:f9:
84:34:f9:9f:7c:5a:ac:e7:88:80:3a:10:8b:4f:4a:67:6a:ce:
a6:20:2b:89:dd:2b:f6:8d:49:f4:3d:f3:62:27:1b:76:ae:65:
52:be:b9:46:1e:0f:5a:d4:25:bf:94:90:af:99:99:6a:dc:44:
2d:e1:66:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:57 2025 by rpki-client