Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/wFjFFm--nW7Xy9e8yn9FEqKRAmE.roa
File: wFjFFm--nW7Xy9e8yn9FEqKRAmE.roa (raw, json)
Hash identifier: 9jObI5cUyKfa9gpsDX69be+6f2q2F2bjL5wBFkp9u00=
Subject key identifier: C0:58:C5:16:6F:BE:9D:6E:D7:CB:D7:BC:CA:7F:45:12:A2:91:02:61
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0183E7167409555A336F11708C7B684A1092
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/wFjFFm--nW7Xy9e8yn9FEqKRAmE.roa
Signing time: Mon 17 Oct 2022 17:55:51 +0000
ROA not before: Mon 17 Oct 2022 17:55:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205220
IP address blocks: 141.11.156.0/22 maxlen: 24
141.11.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e7:16:74:09:55:5a:33:6f:11:70:8c:7b:68:4a:10:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Oct 17 17:55:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c058c5166fbe9d6ed7cbd7bcca7f4512a2910261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:20:2c:53:3f:ff:05:f1:11:73:6c:50:3c:db:
41:fb:06:f3:a0:ac:ad:1f:4d:65:16:bf:5b:bf:e5:
41:6d:2b:6f:79:35:fb:52:24:53:b5:9f:17:2f:ff:
6e:76:12:76:79:5a:ab:a4:f2:b3:99:a1:15:cf:7c:
ad:47:48:f2:8e:87:51:90:91:84:53:9e:be:bf:47:
18:9e:e5:64:2e:84:f2:30:0f:7b:10:a0:da:1e:51:
8f:2e:26:7f:0b:db:13:67:73:b3:7c:ce:15:b7:da:
2e:84:7b:c2:cd:8d:01:82:5b:26:50:bb:ee:e9:12:
df:63:a9:4a:de:03:02:2e:9a:77:5c:78:8c:b5:dc:
96:28:e6:59:16:d2:b6:8f:0b:ce:a3:08:c7:b4:ec:
90:bb:cb:b1:87:d9:82:16:b4:5d:dc:4d:07:0f:89:
13:ff:74:4e:70:45:14:a8:3e:64:2d:10:41:0b:55:
93:f8:79:bd:85:b9:11:6e:0c:10:69:a2:7c:58:81:
53:3d:6c:31:db:67:b9:ad:05:42:cc:80:2b:c9:79:
d0:0c:29:46:eb:9a:85:9c:b8:95:1e:13:fb:74:e2:
61:e9:16:9a:4b:ab:8d:88:3f:55:dc:99:97:0f:7b:
68:eb:22:52:72:1e:83:dc:b7:78:6a:6c:36:92:65:
b6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:58:C5:16:6F:BE:9D:6E:D7:CB:D7:BC:CA:7F:45:12:A2:91:02:61
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/wFjFFm--nW7Xy9e8yn9FEqKRAmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.88.0/22
141.11.156.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:1e:7c:45:fd:90:91:c9:c2:36:d4:cb:ba:7c:b2:a0:2e:7b:
ee:b8:09:88:51:41:19:2c:d9:cb:cb:71:fe:61:5b:b5:97:e4:
78:b9:08:04:72:53:24:15:5c:5d:68:2a:85:15:8b:f9:c7:b6:
e2:f7:75:21:23:4c:49:66:d9:80:dd:5c:6d:34:b3:a6:49:f9:
69:52:e7:54:68:e7:18:38:22:66:5a:81:d4:0e:da:b0:4d:9c:
43:39:ee:50:d8:0b:82:8e:97:46:76:be:d4:14:db:bc:ac:5e:
63:94:0b:f9:9d:c5:0c:56:60:0e:d6:77:47:62:bb:d2:c4:20:
0d:10:2f:df:b6:ff:03:cd:cf:85:2b:1c:2d:15:64:c6:1c:cc:
32:0a:21:f6:da:aa:41:01:70:e7:47:fd:25:3f:d6:24:8a:40:
71:fc:c9:89:bd:a9:fd:df:d0:e5:89:0d:1f:b9:c3:54:de:5d:
2a:d3:c7:59:d8:d4:3a:3c:fa:40:e4:ef:8e:fc:a7:d9:0d:7b:
47:81:a6:f7:ca:d6:dc:9a:92:76:a4:5e:35:27:13:09:e6:67:
20:b5:de:35:bc:25:4b:33:41:b0:d7:88:98:0f:eb:8c:3d:77:
95:97:5d:7f:eb:5b:bb:91:8b:08:d4:5b:ab:45:1d:38:a1:ef:
d0:30:fb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:21:29 2025 by rpki-client