Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/xAIrmS8nICxoMPT2GVA2S3Xmnq4.roa
File: xAIrmS8nICxoMPT2GVA2S3Xmnq4.roa (raw, json)
Hash identifier: XHWLDYBlIQ/3tlohjUB3SPfYomra3wwrVw0fUb8hcpc=
Subject key identifier: C4:02:2B:99:2F:27:20:2C:68:30:F4:F6:19:50:36:4B:75:E6:9E:AE
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0183ACA3190C9A73C34687D5394260208B4C
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/xAIrmS8nICxoMPT2GVA2S3Xmnq4.roa
Signing time: Thu 06 Oct 2022 09:31:53 +0000
ROA not before: Thu 06 Oct 2022 09:31:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 141.11.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ac:a3:19:0c:9a:73:c3:46:87:d5:39:42:60:20:8b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Oct 6 09:31:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4022b992f27202c6830f4f61950364b75e69eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:db:41:4d:e0:15:dc:b9:53:e7:0a:d1:9c:8c:
73:71:7f:87:3f:5c:a6:dc:03:4b:31:49:44:2f:a6:
1b:fc:94:56:9b:ab:43:1c:0b:64:c9:ea:7f:da:24:
63:39:48:d0:3f:75:71:79:86:b2:25:40:62:cd:a0:
9c:2d:ba:2b:b6:98:0b:f4:cf:1d:25:60:8f:84:b6:
64:8c:c9:44:4f:af:e7:99:d7:f3:e4:be:42:83:ee:
a2:4f:5e:fb:90:69:7c:88:16:8b:22:fe:a5:3f:32:
c5:46:c7:b9:4b:e4:4d:8f:17:f7:37:a7:a2:e2:5c:
49:36:fa:ed:ef:56:97:02:c1:6d:a6:41:7a:44:f0:
3d:fe:0e:42:12:3b:6d:38:e8:b8:07:09:17:43:03:
c0:b4:56:43:97:95:ed:6b:64:c5:66:11:e1:6b:4e:
8f:8f:17:21:d0:21:94:d0:7f:03:c2:36:9e:c6:f8:
47:ff:ed:41:4a:c9:ff:bd:f9:26:99:1d:80:e2:91:
af:fe:d8:ad:9a:02:2e:42:00:98:6f:6e:07:a3:ad:
30:e4:b6:a1:1f:bc:f1:e3:2b:46:f2:41:22:37:61:
a7:dd:1a:ba:8b:ad:95:66:16:4a:b9:54:71:11:a1:
a2:c8:51:64:f5:fa:6b:37:fd:b8:45:4a:ea:7d:ee:
79:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:02:2B:99:2F:27:20:2C:68:30:F4:F6:19:50:36:4B:75:E6:9E:AE
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/xAIrmS8nICxoMPT2GVA2S3Xmnq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.123.0/24
Signature Algorithm: sha256WithRSAEncryption
31:c1:64:45:67:e9:b7:84:a2:be:0b:ad:6a:29:eb:27:5a:2a:
fe:5c:5c:1a:a5:0f:e9:b5:21:10:99:40:98:48:10:cd:af:47:
84:79:f1:11:f2:6f:7c:83:76:cc:8a:89:54:f3:de:27:c1:fb:
06:e1:85:ea:90:46:fa:34:f8:37:8c:d3:af:47:c2:c2:9f:59:
eb:7c:68:41:a2:e5:24:89:51:93:f7:c6:7f:97:ee:a4:36:65:
20:20:d1:9d:5e:e1:07:bd:21:54:bc:5a:d0:1a:02:b8:bd:45:
85:10:6e:73:be:6b:05:5d:7d:a7:40:88:8b:66:2b:d8:a8:92:
b1:35:16:93:6b:d8:48:bd:76:8d:64:12:0f:07:b2:4a:e7:b4:
b7:39:89:44:51:16:71:ff:9a:16:c7:63:4f:2f:da:76:40:ab:
bc:94:c6:67:b2:55:37:b5:f6:76:1b:11:90:49:a8:be:01:63:
06:13:11:89:89:03:2c:e4:f9:a7:5b:d2:84:38:72:18:8c:03:
c0:01:d8:c9:b8:98:c7:8c:18:94:8e:1c:44:a7:9b:be:2a:e3:
80:7d:52:dc:dc:eb:f1:bd:c8:8a:95:6a:d9:3b:cb:d0:b8:e6:
ef:42:0d:4e:5f:db:ba:9c:07:bd:ff:f9:74:b4:6b:f5:dc:9f:
62:b4:34:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:26 2025 by rpki-client