Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ySEGA2HzHgD0PcrZ5sgEvaztE1o.roa
File: ySEGA2HzHgD0PcrZ5sgEvaztE1o.roa (raw, json)
Hash identifier: sPQzw9XeXpbq8VbKx0wGduHlhmawUEOEQ69+qyAK4qU=
Subject key identifier: C9:21:06:03:61:F3:1E:00:F4:3D:CA:D9:E6:C8:04:BD:AC:ED:13:5A
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0184CDBF0E9C8492C89486655AFD8B6523EB
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ySEGA2HzHgD0PcrZ5sgEvaztE1o.roa
Signing time: Thu 01 Dec 2022 12:52:41 +0000
ROA not before: Thu 01 Dec 2022 12:52:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205431
IP address blocks: 141.11.100.0/24 maxlen: 24
141.11.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cd:bf:0e:9c:84:92:c8:94:86:65:5a:fd:8b:65:23:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Dec 1 12:52:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c921060361f31e00f43dcad9e6c804bdaced135a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e0:22:51:39:46:10:16:90:89:bb:b0:fe:34:
23:f7:02:6d:d8:77:92:46:bb:2a:1e:f9:3e:7b:a7:
9a:57:99:80:11:c8:b0:7d:5f:82:2b:9f:45:2f:30:
3a:a5:ca:fe:4d:72:cc:aa:e7:4a:15:b2:22:4c:4e:
bd:ba:6f:dc:72:0c:29:e4:65:a1:50:ce:51:32:87:
ac:99:9b:81:22:55:6f:3e:cd:46:71:b2:cc:0a:16:
17:6c:9b:97:c8:8e:36:2e:e4:23:c1:9b:28:07:eb:
34:f6:46:56:23:79:7f:4c:b1:7a:c8:bf:16:e2:62:
3e:68:ec:df:a9:85:73:3b:f1:75:6d:28:90:89:aa:
77:1d:ed:57:9d:f7:e3:93:2f:94:b4:e7:ca:24:36:
e1:28:e0:3e:a3:2b:dd:e0:b7:64:85:28:64:58:b1:
09:a2:78:9b:1f:13:50:a1:06:a0:5b:16:56:71:ba:
e1:a5:bf:ec:5f:9e:a6:6a:76:c1:6d:6c:49:ec:77:
71:c7:0d:87:c3:44:fc:3f:b4:aa:5d:e5:a2:4b:52:
fb:a4:ac:3a:48:0a:8b:86:4c:46:79:8b:20:2f:7a:
ab:fe:2d:d7:bb:40:4d:f6:11:83:ee:9c:d6:de:c8:
6e:2b:44:bb:86:7d:49:33:57:c3:08:b0:46:76:ef:
d7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:21:06:03:61:F3:1E:00:F4:3D:CA:D9:E6:C8:04:BD:AC:ED:13:5A
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ySEGA2HzHgD0PcrZ5sgEvaztE1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.100.0/24
141.11.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:70:a3:a6:0e:e0:24:40:6f:d7:14:ce:10:51:24:e9:b8:62:
77:e0:16:29:ad:5b:55:f5:bd:27:36:6d:72:14:69:2c:ad:32:
f6:74:6a:68:a5:c4:ea:de:ac:b2:9f:58:98:5e:15:5e:95:77:
e0:1a:7c:27:a8:a7:89:c1:36:8f:3c:2d:40:f4:25:04:ce:2e:
88:8c:91:61:9c:38:c3:ec:67:f8:ee:2e:18:d5:f9:c2:17:82:
98:65:61:b6:a6:31:37:3e:dd:95:a6:6c:97:7e:ae:c5:17:a3:
57:b8:d9:7e:ed:56:ab:3b:62:9b:44:4f:01:1b:7d:83:7d:a7:
7f:39:8e:31:3a:03:69:da:d8:28:a9:7a:7f:1a:1e:a2:83:67:
da:12:cb:c2:f8:ef:50:ac:47:e8:6c:37:4f:c9:5e:66:10:bb:
a7:10:51:3a:6c:d6:fd:86:62:f3:5d:65:7f:72:4e:25:42:ab:
c3:50:3c:fa:8b:be:c5:e6:52:6e:58:62:85:5a:13:6d:56:c5:
5d:0f:0b:b4:fb:90:92:5c:56:6f:6b:e4:e6:7b:52:22:92:d6:
65:b2:e1:10:5f:fa:82:87:e0:cf:b4:22:98:9b:c8:97:48:52:
ff:07:63:49:49:21:57:c9:d8:b6:b9:47:56:d2:7a:7a:28:c7:
9b:aa:31:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:07:44 2025 by rpki-client