Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/s5m6sC9tRN4SDRNeLnnyGGHWtHI.roa
File: s5m6sC9tRN4SDRNeLnnyGGHWtHI.roa (raw, json)
Hash identifier: yLygvDIe+jpJZKHRzQlzoWJXL3UQRfdUAruYzn3T1GY=
Subject key identifier: B3:99:BA:B0:2F:6D:44:DE:12:0D:13:5E:2E:79:F2:18:61:D6:B4:72
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 02ED4DE5
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/s5m6sC9tRN4SDRNeLnnyGGHWtHI.roa
Signing time: Fri 04 Feb 2022 17:33:14 +0000
ROA not before: Fri 04 Feb 2022 17:33:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 141.11.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49106405 (0x2ed4de5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Feb 4 17:33:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b399bab02f6d44de120d135e2e79f21861d6b472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:4a:49:1a:a5:b4:e1:60:3b:fb:6c:ac:e4:
58:2c:87:e5:ee:e4:53:23:6a:87:43:79:dd:47:ff:
60:ca:10:d4:af:4e:bd:fc:f8:8a:47:f8:45:f6:30:
6c:da:47:0d:af:f2:bd:83:fc:5a:01:1a:31:5e:d3:
28:d3:c3:29:bc:9c:28:e5:1d:3b:0b:81:4f:35:44:
30:aa:eb:d5:95:44:01:1d:49:1a:31:61:82:82:1e:
66:3a:08:37:91:fc:ec:d5:a7:8c:41:50:0a:90:86:
f9:82:05:5a:61:44:5a:a4:22:e6:ba:19:0d:fe:82:
54:95:7d:c7:81:b5:dc:88:57:d3:28:43:c9:9a:9e:
96:a8:e7:3c:1c:76:23:a7:78:ea:5f:c4:55:4a:72:
4c:98:bc:1a:93:0c:9f:92:3e:9f:2d:ff:02:38:b3:
d8:76:1e:5f:79:20:3f:15:bc:e7:3a:cf:94:b4:f1:
f0:e2:8b:31:22:2f:13:d0:86:15:41:87:e8:c4:e0:
18:1f:ab:e1:e2:4e:23:6a:c5:b2:79:73:ce:d7:4b:
83:6e:11:4d:7d:a2:38:8d:3e:0e:d6:2f:a8:6d:75:
1d:c9:e4:62:b7:46:97:06:b4:c6:0a:fb:05:fe:74:
cf:78:5c:f0:6d:a9:9d:26:6a:27:71:5b:4a:9b:bc:
0e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:99:BA:B0:2F:6D:44:DE:12:0D:13:5E:2E:79:F2:18:61:D6:B4:72
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/s5m6sC9tRN4SDRNeLnnyGGHWtHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.184.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:0f:4e:a1:b3:34:3a:52:5d:f3:34:0a:5b:b4:6d:e5:f4:fb:
95:3e:4e:59:15:00:16:62:d2:4b:12:c5:ae:ff:9b:07:33:73:
5b:b8:43:d7:0b:25:80:bd:67:9e:86:e1:3b:2d:eb:b0:68:72:
e5:29:1d:17:2a:1d:a0:64:53:fc:45:14:33:7b:e3:32:ea:f2:
b8:42:16:09:08:b2:25:67:2b:ef:85:88:33:e6:20:c6:31:8a:
7a:6b:5d:9d:1d:7c:db:32:80:49:33:ce:27:41:cf:29:76:55:
10:e9:86:e9:fd:a4:e3:4f:56:56:98:68:73:7f:0f:c7:c2:b2:
4b:23:9d:b2:bc:0d:07:dd:a5:e1:5d:e0:91:d8:37:6b:33:a2:
75:68:e3:74:3f:55:cb:b6:84:fd:b2:bb:b8:ad:1f:4f:93:87:
40:35:e1:71:bd:78:fd:79:5d:e6:51:07:54:cd:be:3f:19:87:
05:a8:9a:5c:8c:b2:75:35:95:b9:5f:58:ae:57:0a:28:8a:a1:
1a:d3:22:94:dd:5d:94:8c:9a:db:de:ae:12:e2:ee:07:cd:a6:
6f:40:5b:37:eb:b0:61:1d:da:83:71:b9:8c:a0:e2:c3:3b:e9:
81:da:aa:0a:c6:c2:db:6f:44:2f:5c:f5:a5:73:8a:0a:d0:4e:
af:a8:a8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:21:55 2025 by rpki-client