Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/wkgTke8qDY0hTIqXe-V2NWMLIdI.roa
File: wkgTke8qDY0hTIqXe-V2NWMLIdI.roa (raw, json)
Hash identifier: XFPNxUdKA7yT/Lbrfnk3DLtOLlq5CZBdtGXVPvTE7Yo=
Subject key identifier: C2:48:13:91:EF:2A:0D:8D:21:4C:8A:97:7B:E5:76:35:63:0B:21:D2
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 018475AF8C1860AB958078166E87A9D5A8C4
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/wkgTke8qDY0hTIqXe-V2NWMLIdI.roa
Signing time: Mon 14 Nov 2022 10:29:09 +0000
ROA not before: Mon 14 Nov 2022 10:29:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 141.11.168.0/23 maxlen: 24
141.11.186.0/24 maxlen: 24
141.11.88.0/23 maxlen: 24
141.11.90.0/23 maxlen: 24
141.11.96.0/24 maxlen: 24
141.11.102.0/24 maxlen: 24
141.11.5.0/24 maxlen: 24
141.11.228.0/23 maxlen: 24
141.11.26.0/24 maxlen: 24
141.11.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:75:af:8c:18:60:ab:95:80:78:16:6e:87:a9:d5:a8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 14 10:29:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2481391ef2a0d8d214c8a977be57635630b21d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:66:31:37:a4:53:74:55:72:ab:91:4c:63:95:
2f:bc:f4:7d:ba:9b:62:08:de:1e:f7:9f:72:0f:1d:
68:cf:aa:a2:8d:2f:f1:e4:6b:9c:7a:de:d6:32:e6:
48:4c:9a:1c:42:55:6a:dd:4c:bc:99:02:68:42:44:
0b:c8:07:6c:de:2f:dd:28:2f:0c:8b:40:c1:45:a7:
d6:54:3f:49:a8:f8:e9:59:53:95:6b:6a:a4:79:1a:
64:2a:9d:4c:00:88:4b:b6:d7:8a:28:15:df:ea:6f:
fb:d6:da:65:9a:91:d6:50:83:62:b1:fc:63:f5:71:
3d:72:72:58:09:7a:59:30:8e:01:b3:61:a6:b8:ad:
b1:f3:9c:3f:b1:a8:51:bc:0f:b1:37:39:47:8a:79:
da:d5:84:84:d2:ea:5b:5f:83:ae:5e:2e:4b:6b:ea:
96:af:5a:68:7e:7f:75:ef:5a:49:85:da:51:cd:cc:
2c:f1:97:c2:7f:11:8e:2d:ff:03:d8:5f:a4:15:a8:
68:40:89:7d:b1:95:1d:f1:ca:92:ab:72:b7:09:03:
63:b8:24:dd:02:5f:61:9e:fb:08:ce:69:6d:4f:d8:
cf:7d:68:2d:34:ac:80:2b:69:32:7d:e3:8e:fa:70:
7e:c0:70:6b:a2:01:82:f1:16:95:d9:0a:ac:34:83:
43:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:48:13:91:EF:2A:0D:8D:21:4C:8A:97:7B:E5:76:35:63:0B:21:D2
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/wkgTke8qDY0hTIqXe-V2NWMLIdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
141.11.26.0/24
141.11.34.0/24
141.11.88.0/22
141.11.96.0/24
141.11.102.0/24
141.11.168.0/23
141.11.186.0/24
141.11.228.0/23
Signature Algorithm: sha256WithRSAEncryption
93:1a:f2:cb:1a:db:3a:4c:ff:6c:c1:18:35:49:e0:bb:b5:da:
72:7c:e0:03:c8:e3:0c:a3:17:83:e3:dc:60:9f:f5:24:fa:98:
bb:41:03:47:e5:f2:c2:91:64:0d:99:0d:c8:73:40:9d:f7:04:
5c:ac:e8:b7:d3:93:69:18:a1:00:40:df:eb:97:b9:53:e5:62:
c8:16:3d:ff:c5:fb:7d:47:62:0e:6f:40:fb:60:f2:e3:a9:c3:
7c:8b:04:54:a7:c7:74:6e:36:a1:98:c6:f1:78:89:06:b8:36:
4e:01:fa:ea:e2:71:6e:66:3e:e7:b1:22:65:d8:a1:ea:57:be:
49:f7:ad:7a:fa:b9:54:f8:f1:70:26:bd:4f:9d:1c:f4:8b:a2:
1c:1e:80:ca:6c:af:de:ac:5d:a4:b2:7a:15:cd:27:b0:3d:57:
a0:52:af:81:64:8e:f1:cd:0a:5a:0c:46:5a:b1:17:25:92:e1:
f9:d9:11:63:ad:3c:b4:68:f7:d5:a0:77:45:c9:91:36:9e:6a:
f7:22:73:75:2f:a1:a0:4a:75:e4:9d:33:c5:63:12:9c:d1:2e:
c5:49:e5:93:da:89:46:2e:10:6b:f7:c6:93:fb:71:0f:6b:92:
b1:08:42:38:1a:9e:c7:00:ae:76:16:9f:49:16:54:e3:56:c2:
25:db:ce:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:55 2025 by rpki-client