Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/vCkV3MT8-5xTb-nY4pf5RxFT2hI.roa
File: vCkV3MT8-5xTb-nY4pf5RxFT2hI.roa (raw, json)
Hash identifier: mYdiGl34iuGqAExW9szDdqVyDnBMRAm4izKtSMRvGpI=
Subject key identifier: BC:29:15:DC:C4:FC:FB:9C:53:6F:E9:D8:E2:97:F9:47:11:53:DA:12
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01851AB089B4A3F43EEAA3CCC5B5C1246FA7
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/vCkV3MT8-5xTb-nY4pf5RxFT2hI.roa
Signing time: Fri 16 Dec 2022 11:27:35 +0000
ROA not before: Fri 16 Dec 2022 11:27:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 141.11.168.0/23 maxlen: 24
141.11.186.0/24 maxlen: 24
141.11.88.0/23 maxlen: 24
141.11.90.0/23 maxlen: 24
141.11.102.0/24 maxlen: 24
141.11.5.0/24 maxlen: 24
141.11.228.0/23 maxlen: 24
141.11.26.0/24 maxlen: 24
141.11.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1a:b0:89:b4:a3:f4:3e:ea:a3:cc:c5:b5:c1:24:6f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Dec 16 11:27:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc2915dcc4fcfb9c536fe9d8e297f9471153da12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:14:e6:b4:2e:d8:7e:8f:69:b6:6e:de:70:
48:29:b9:b2:af:95:70:6d:11:23:60:e5:9d:d1:45:
8c:59:02:20:50:02:7d:2e:47:69:fe:30:cd:b3:19:
eb:a4:ba:bd:74:51:d0:dd:28:f6:1c:a3:ee:aa:bf:
8b:25:48:25:1f:ac:e3:73:2b:37:27:84:09:08:2c:
7b:23:f8:55:a1:87:f5:2d:f3:79:07:a0:3e:a7:60:
9d:e9:a1:54:19:5e:f9:f3:90:d7:07:5f:36:7b:f0:
85:26:e8:2c:02:e6:aa:0e:ba:1c:9f:5a:86:50:9d:
a4:86:fb:7c:2d:cf:7f:23:35:fd:da:b9:57:44:b0:
97:df:22:80:9c:2a:ce:4a:c8:ae:77:f3:20:7a:4d:
90:d0:5b:e0:a8:aa:9d:0b:38:c4:07:f0:31:97:65:
8b:af:58:17:40:3f:d9:b5:9a:b4:a9:33:0e:82:9b:
87:71:96:0c:c0:de:9e:3a:85:3c:4b:e5:dc:03:80:
a2:65:ab:e7:ba:67:16:8e:ba:df:e3:9a:eb:98:51:
c8:fe:e8:55:a2:80:96:67:72:d4:d8:58:ad:ac:dd:
0c:a7:fc:92:5d:e4:76:a5:18:51:d7:c8:64:39:47:
36:ea:e1:a2:0d:2c:95:78:f9:ca:c8:ba:89:9d:ea:
c1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:29:15:DC:C4:FC:FB:9C:53:6F:E9:D8:E2:97:F9:47:11:53:DA:12
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/vCkV3MT8-5xTb-nY4pf5RxFT2hI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
141.11.26.0/24
141.11.34.0/24
141.11.88.0/22
141.11.102.0/24
141.11.168.0/23
141.11.186.0/24
141.11.228.0/23
Signature Algorithm: sha256WithRSAEncryption
77:87:e2:ad:92:55:cb:b8:f3:cb:bb:59:87:66:0d:90:cb:16:
0b:f5:5d:8f:2b:1a:9e:fb:f8:47:a5:e4:19:b8:af:0f:96:7c:
25:66:f7:da:94:1d:c1:cd:9f:fd:76:23:32:2a:95:b9:39:05:
08:fe:27:03:e9:27:b9:f1:2e:b2:f2:be:6c:34:a0:1a:c7:95:
1b:dd:f1:fe:13:96:3e:8f:df:23:fd:b7:e4:fb:3c:17:12:f1:
30:07:38:2c:55:eb:4c:21:29:fe:fe:31:67:34:ff:ef:71:65:
d7:75:98:a7:33:81:af:69:98:a2:06:c4:43:33:6a:3a:d8:85:
5c:95:bf:f5:28:1c:b3:f5:af:69:c3:cf:41:f7:a4:b5:98:ae:
1b:03:8c:af:61:51:d9:16:1c:07:50:c0:00:51:c5:ae:a5:d1:
75:c9:41:c3:0c:86:80:d5:4d:8c:21:26:0f:92:9f:09:ff:e0:
ea:e9:59:37:9a:5f:a6:a3:ea:01:aa:2d:87:a7:98:04:72:8f:
a1:21:9a:e0:9e:5d:78:b2:4b:c0:39:73:c5:1d:76:03:4a:e3:
26:11:3e:e3:01:41:23:8c:88:14:90:8d:3d:e0:fe:47:ae:70:
b5:4b:47:f8:af:fd:cc:f4:fe:a1:84:70:4b:63:43:e4:37:03:
d8:a7:e7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:21:08 2025 by rpki-client