Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/w_vh-7fqhMga2pP8-vDUZof-XfE.roa
File: w_vh-7fqhMga2pP8-vDUZof-XfE.roa (raw, json)
Hash identifier: 0QY/p38umXbpUPNQhceP+jseVQ3fcyy//47acumlJ/U=
Subject key identifier: C3:FB:E1:FB:B7:EA:84:C8:1A:DA:93:FC:FA:F0:D4:66:87:FE:5D:F1
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01821B1DA305BBC4DA4ECBD474E1D948633F
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/w_vh-7fqhMga2pP8-vDUZof-XfE.roa
Signing time: Wed 20 Jul 2022 10:18:23 +0000
ROA not before: Wed 20 Jul 2022 10:18:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17447
IP address blocks: 141.11.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1b:1d:a3:05:bb:c4:da:4e:cb:d4:74:e1:d9:48:63:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 20 10:18:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3fbe1fbb7ea84c81ada93fcfaf0d46687fe5df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f1:83:0a:f4:00:6b:6c:84:a6:ff:2a:19:15:
ac:4f:2f:0b:e1:01:f3:6d:c9:9a:67:6c:39:8d:49:
cc:a7:1b:f9:d8:ae:42:2a:eb:1c:3c:b2:2f:e7:cd:
a2:56:31:64:59:dd:49:52:18:bd:57:e9:c6:14:c9:
b5:a9:74:a9:99:c5:45:4f:52:3c:8c:d2:f5:a1:e0:
02:be:d7:1a:10:d0:84:8a:b8:a8:c4:25:72:15:c6:
54:a8:1f:46:0d:84:4a:02:98:b0:12:3e:08:dd:e1:
e1:b5:76:37:bb:27:8a:13:21:cd:a8:f9:ec:8e:e0:
e8:54:04:48:ce:7d:cc:df:48:0f:28:6a:18:6b:78:
43:34:35:d2:a9:07:b5:8f:40:08:d2:90:0b:23:b1:
61:7c:f3:bf:60:70:c9:0f:65:13:ec:9c:c5:d0:99:
ce:b3:bc:96:d1:13:c4:4f:37:1b:8c:b9:f6:04:5f:
67:af:23:7a:d0:d5:37:51:d2:23:21:c5:e0:db:cd:
59:cd:2e:76:0a:55:2f:91:cb:f2:74:44:65:5b:77:
ce:30:cb:32:87:e7:92:69:27:06:ef:05:ff:dd:73:
eb:eb:03:b8:12:c1:3b:12:23:87:df:42:36:88:5a:
e8:8a:66:47:bc:26:f8:a3:84:d4:62:dc:6a:20:ae:
59:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FB:E1:FB:B7:EA:84:C8:1A:DA:93:FC:FA:F0:D4:66:87:FE:5D:F1
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/w_vh-7fqhMga2pP8-vDUZof-XfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.36.0/24
Signature Algorithm: sha256WithRSAEncryption
00:f5:0b:51:cd:6a:98:f7:70:ef:a1:96:47:1a:bd:dd:1e:68:
3b:c2:11:a2:63:a0:f8:f3:4d:0e:78:ce:e9:76:bd:07:19:ea:
3d:29:c0:2c:c0:9a:cc:26:04:d7:5c:d7:44:d4:c9:f2:53:6c:
8f:ef:dd:8f:e9:0a:03:c1:62:c6:10:37:c1:5a:db:e9:a1:2e:
7f:6f:3a:72:42:bf:24:b4:12:04:07:8e:8f:d2:b6:c2:b8:95:
b9:39:41:50:09:c9:1f:7c:99:1c:25:14:1d:9f:cd:51:da:5b:
fe:b2:15:58:87:0c:e1:9e:a7:91:c9:b3:5f:86:e2:6f:6e:5d:
65:30:c2:8e:25:59:9f:3c:9e:03:46:6c:51:46:f8:bd:37:04:
a3:3d:58:8a:e1:a2:f0:1d:aa:db:67:62:3c:b4:f5:8a:c8:fe:
bc:23:a4:48:85:50:7f:d1:0f:c1:d9:3b:db:4e:04:ad:08:a6:
c6:4b:d0:69:f8:0a:ca:0c:8a:46:0e:e4:fc:08:60:10:4e:cc:
59:6a:65:80:12:02:eb:8b:27:69:de:df:61:5c:13:b9:99:c4:
99:a0:e4:22:3d:b5:55:6a:3a:46:9f:c4:c8:26:72:7f:57:66:
67:56:9f:5a:31:cf:58:24:8f:78:87:9b:ec:e7:70:d6:a7:65:
1a:2f:84:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:29:05 2025 by rpki-client