Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/wBQNob2UOkReHtd0r5EoAfjHdcU.roa
File: wBQNob2UOkReHtd0r5EoAfjHdcU.roa (raw, json)
Hash identifier: uYF5f+XyXlpibr4/4fqvdwFLtf0iCYY2ljVc28LUmwI=
Subject key identifier: C0:14:0D:A1:BD:94:3A:44:5E:1E:D7:74:AF:91:28:01:F8:C7:75:C5
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04E8C8A8
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/wBQNob2UOkReHtd0r5EoAfjHdcU.roa
Signing time: Tue 31 May 2022 11:28:00 +0000
ROA not before: Tue 31 May 2022 11:28:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 141.11.190.0/24 maxlen: 24
141.11.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82364584 (0x4e8c8a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 31 11:28:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0140da1bd943a445e1ed774af912801f8c775c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1d:cf:5f:26:cf:73:2f:d8:ec:fd:19:ea:ff:
88:05:41:39:8a:f3:34:4a:aa:bf:6a:b4:c0:b6:9d:
a6:8a:6b:8d:3d:83:4c:6b:6e:2d:fc:44:69:7e:27:
53:ee:2f:50:e7:c9:f1:59:95:28:f1:24:ef:87:3f:
02:03:62:72:b9:56:0c:20:c0:44:bc:4a:66:9b:62:
ad:16:c0:7e:77:b0:a0:2f:86:d2:79:51:37:a3:73:
70:c8:70:43:50:d2:69:22:98:75:ea:0c:93:ca:a8:
3b:9b:52:bc:14:96:e2:5f:01:1f:3b:db:0c:15:f6:
7e:aa:3d:e0:2a:0f:6a:7e:df:38:08:21:7d:fd:4c:
26:1a:9e:54:4f:7a:6c:a0:53:f0:e3:33:0b:9d:30:
06:81:13:a6:b8:ff:bb:b9:2d:64:36:86:bd:44:b1:
1f:d8:33:84:9a:cd:72:dd:46:76:18:aa:22:12:14:
33:a7:9f:03:1a:29:cc:63:97:d2:f4:62:5a:a4:27:
75:e5:83:40:d9:7a:6a:4f:ed:1b:a6:eb:50:cd:e1:
73:7f:7f:68:ed:56:81:03:07:55:a2:70:9b:2f:8c:
b5:17:96:d1:45:41:6e:99:64:20:dd:55:16:e9:33:
ae:25:3f:8c:63:44:e0:35:00:ce:cf:12:38:6f:15:
53:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:14:0D:A1:BD:94:3A:44:5E:1E:D7:74:AF:91:28:01:F8:C7:75:C5
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/wBQNob2UOkReHtd0r5EoAfjHdcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.103.0/24
141.11.190.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c1:54:ba:12:5e:1e:8e:bd:81:3d:57:c2:17:d3:32:21:ab:
2e:2e:65:57:80:dc:15:f0:1d:2e:ea:e6:0d:35:ac:0a:ff:14:
3b:53:33:f0:f3:38:3d:87:05:d6:80:6e:b6:21:9f:d6:bb:15:
32:4e:45:e7:47:f9:e0:89:1f:35:b5:4a:58:7c:00:2b:d7:13:
00:49:ad:3c:f0:f9:83:25:07:9c:9b:39:ed:0d:0d:3c:f6:81:
17:be:52:85:a6:b4:12:0f:44:b9:bf:eb:19:dd:9e:61:99:15:
09:e6:f2:6e:de:d6:78:c0:8d:74:9b:52:ce:01:e6:b0:6a:6d:
bd:76:21:b6:2e:6e:cc:4d:cc:82:a1:00:d8:fb:66:40:f3:58:
da:93:67:2a:17:46:66:95:cf:68:4b:2c:41:dc:60:bf:4c:c4:
6c:8f:28:a3:4d:59:db:c2:6b:45:ab:12:3a:b0:1c:8b:46:14:
54:2f:cc:e3:74:7e:29:8e:53:f2:99:d9:e3:15:72:7e:58:fe:
45:f8:3f:c7:fc:29:08:6d:da:cf:88:6b:60:26:82:8b:36:5a:
62:f2:9a:96:1d:82:b4:c3:6e:74:7a:cd:40:14:fc:71:67:c1:
21:e1:f3:5b:52:a3:58:b0:59:43:1a:21:b3:18:f0:cb:e4:91:
1e:2a:d4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:44 2025 by rpki-client