Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/wFm9MPtWHooIK04Hxu1SqVmFbC4.roa
File: wFm9MPtWHooIK04Hxu1SqVmFbC4.roa (raw, json)
Hash identifier: 7i2fnhNSKhzk/8JsKGA4X5PCXhp5S6RJVVF8t5ja2SM=
Subject key identifier: C0:59:BD:30:FB:56:1E:8A:08:2B:4E:07:C6:ED:52:A9:59:85:6C:2E
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0319FCAC
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/wFm9MPtWHooIK04Hxu1SqVmFbC4.roa
Signing time: Thu 17 Feb 2022 17:57:31 +0000
ROA not before: Thu 17 Feb 2022 17:57:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 141.11.192.0/19 maxlen: 24
141.11.104.0/22 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.112.0/20 maxlen: 24
141.11.6.0/24 maxlen: 24
141.11.12.0/22 maxlen: 24
141.11.128.0/19 maxlen: 24
141.11.20.0/24 maxlen: 24
141.11.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52034732 (0x319fcac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Feb 17 17:57:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c059bd30fb561e8a082b4e07c6ed52a959856c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4d:ad:f6:b8:43:a8:57:b7:57:01:41:2e:7a:
27:c9:a2:25:03:b9:a0:78:78:f7:01:38:96:6e:98:
2b:1e:38:08:98:fb:23:ff:cf:bb:0e:8f:82:20:ee:
ed:a0:37:96:9e:e5:ed:e6:23:e1:62:fa:cc:85:3f:
5d:56:88:f4:cd:72:bd:e5:d4:87:4d:5b:e5:87:bd:
6e:ee:eb:21:59:34:6e:f4:4a:0f:39:37:d5:40:26:
e1:9b:b6:b8:3a:28:19:23:a3:93:34:bf:be:a8:d3:
b4:6f:41:c4:68:7d:63:3e:d1:78:1f:78:69:2b:bb:
b6:fe:8a:48:f4:36:fc:04:ed:75:2e:81:60:b5:f4:
ca:eb:45:4f:c1:19:53:8f:2b:7d:86:f5:03:97:cb:
76:04:cf:53:c4:e6:9a:1f:a6:07:07:31:26:85:97:
48:88:51:d3:83:fe:c1:b2:3e:18:7a:a0:8a:df:e2:
00:e7:03:de:02:98:4f:53:2c:86:7b:3b:9d:32:d0:
33:03:02:97:5a:70:a9:cf:be:61:03:58:87:47:72:
b9:e6:96:e9:99:f4:d6:a2:b8:9a:ef:5e:4d:cd:60:
8e:1f:80:16:ca:71:58:c6:d1:69:fe:7f:ac:e4:9d:
23:d7:6b:81:5c:7c:51:c0:ae:c4:e1:40:4c:b8:38:
d9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:59:BD:30:FB:56:1E:8A:08:2B:4E:07:C6:ED:52:A9:59:85:6C:2E
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/wFm9MPtWHooIK04Hxu1SqVmFbC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
141.11.6.0/24
141.11.12.0/22
141.11.19.0-141.11.20.255
141.11.104.0/22
141.11.112.0-141.11.159.255
141.11.192.0/19
Signature Algorithm: sha256WithRSAEncryption
3d:4c:0a:a8:34:74:7a:d5:5c:7d:d4:bf:64:0d:de:0d:80:70:
57:55:01:c8:5d:d3:37:17:e9:22:58:84:cb:2f:3a:27:eb:02:
7f:f0:c9:a6:ef:40:3b:50:ff:0f:e3:d1:53:47:8d:62:4d:20:
42:cc:94:5f:24:a5:66:7f:22:2e:1d:02:06:64:98:49:bb:a1:
da:dc:87:1d:74:c1:9b:fa:39:1a:56:53:be:75:2c:b3:8f:73:
b1:45:12:ac:5e:40:9e:31:5e:b6:bb:d5:b0:2d:b4:71:e7:83:
dc:ac:11:c0:43:82:0b:ba:e0:cd:39:b5:d3:00:19:06:6c:92:
e5:ce:38:f4:b0:d2:d8:38:25:dc:0c:0b:72:b1:d2:a7:1a:6f:
74:29:b9:50:84:31:bc:8a:29:5d:de:4b:55:00:20:ea:e1:ac:
68:e1:05:dd:51:2c:28:ca:3d:66:09:43:b2:9f:c5:00:65:ea:
3a:76:29:ab:ad:8c:2e:9b:e8:8f:c8:47:1b:9d:7f:e4:2d:79:
45:06:09:9c:e4:26:d9:3e:e0:11:9c:4d:ed:5e:5e:3f:3f:6c:
ff:90:51:fe:22:56:7f:e2:3e:51:26:aa:ff:bc:cb:cd:29:72:
95:8f:f7:c1:a2:5c:b9:ed:e4:83:38:ca:c8:77:44:f5:19:63:
5d:aa:e6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:14 2025 by rpki-client