Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/vnN_nRq5lukrSokvUUBGfPRekP0.roa
File: vnN_nRq5lukrSokvUUBGfPRekP0.roa (raw, json)
Hash identifier: nZaPSxXnv+CwpsyGqd0npHiMUReTXOBU2hWKmr3y4d0=
Subject key identifier: BE:73:7F:9D:1A:B9:96:E9:2B:4A:89:2F:51:40:46:7C:F4:5E:90:FD
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04578804
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/vnN_nRq5lukrSokvUUBGfPRekP0.roa
Signing time: Tue 03 May 2022 10:43:11 +0000
ROA not before: Tue 03 May 2022 10:43:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54574
IP address blocks: 141.11.170.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72845316 (0x4578804)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 3 10:43:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be737f9d1ab996e92b4a892f5140467cf45e90fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5f:18:07:5a:46:a5:b1:3d:61:5f:4a:d4:52:
b6:23:34:56:92:05:6e:5c:d8:b0:73:9c:80:9b:f5:
df:51:1e:9d:63:31:1e:3e:98:dd:6f:ec:7d:89:3c:
75:55:d4:5c:46:2b:57:5e:41:6a:f9:d2:ba:0c:a4:
64:4d:e8:b1:38:16:a5:a4:cd:4b:d1:b6:e1:0e:41:
90:c5:83:54:3f:eb:95:c9:8e:0a:1f:70:16:aa:a9:
7e:c4:f8:f7:90:29:81:21:3f:92:6b:5c:eb:fe:10:
b8:1a:7e:10:1d:ec:47:9f:ca:49:64:c3:d8:e2:6e:
7b:50:21:d8:fe:a4:48:6e:d3:c9:47:97:da:f1:01:
d4:13:42:3e:46:4f:6f:fe:24:53:8d:20:e4:d7:c3:
7b:fa:f1:ae:ac:f9:d3:4c:f7:b6:38:8a:70:6b:f8:
99:6f:9e:89:32:1c:08:49:74:1b:f8:f1:b3:ba:b2:
ad:20:87:69:40:0d:8f:c3:09:80:a8:a0:8b:37:2d:
c5:7b:4e:1f:fb:40:a8:c1:29:22:1b:28:83:02:2d:
12:79:9e:cd:1f:2a:ec:1b:ab:19:eb:a3:1b:79:e8:
ea:f7:fb:3b:57:1a:30:f5:3f:1c:4e:97:2f:dd:f3:
7d:f7:7e:86:19:58:9f:3d:e0:51:30:cb:25:d9:da:
9d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:73:7F:9D:1A:B9:96:E9:2B:4A:89:2F:51:40:46:7C:F4:5E:90:FD
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/vnN_nRq5lukrSokvUUBGfPRekP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.170.0/23
Signature Algorithm: sha256WithRSAEncryption
23:7b:2b:89:52:82:08:20:ed:9f:91:24:4a:e1:f2:9e:d5:51:
29:30:94:3d:13:31:2c:8a:d8:77:4a:f4:6b:cd:23:ff:ae:74:
a6:46:72:8f:b0:78:af:bc:84:ac:c6:01:69:85:cb:23:a9:4e:
82:c1:4b:7d:7a:2d:ef:b2:63:f4:43:05:5e:10:15:b0:d7:91:
09:29:6e:f6:69:8c:70:8c:35:8e:9d:32:39:92:12:a6:3e:66:
b9:e1:08:12:2b:69:61:3e:cf:21:e6:ae:e4:c5:f4:66:3f:7c:
61:ed:bf:4a:fa:37:43:19:33:3c:3d:26:6d:72:40:22:0b:db:
4b:90:a0:90:82:c7:bc:6b:5e:7c:47:07:1e:b2:e3:ad:21:65:
5f:35:25:dd:73:f2:46:b4:13:f3:79:1d:5a:63:87:f8:b7:13:
5b:5c:b3:bf:36:dd:b0:a1:84:7c:6f:75:97:9d:2e:df:5b:a6:
e1:31:b1:2d:c9:75:b3:a4:69:01:eb:f4:a4:4e:35:98:49:01:
16:71:7f:b1:a0:19:ec:c5:c8:c7:eb:a4:67:dd:bf:a6:5b:6e:
11:05:bd:ea:04:65:b0:00:69:ec:20:fb:5c:b0:ad:07:79:e3:
47:c0:b9:ff:69:0b:19:c6:ef:24:09:b8:e8:36:a5:35:e9:b8:
c1:7f:31:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:31 2025 by rpki-client