Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/zMYyZQjf2xjwo4w8Mrz8YQiSGyQ.roa
File: zMYyZQjf2xjwo4w8Mrz8YQiSGyQ.roa (raw, json)
Hash identifier: misO1bHZrfm9nLRwMRhZ4uPfchsZM64HPKdjtDqcVJQ=
Subject key identifier: CC:C6:32:65:08:DF:DB:18:F0:A3:8C:3C:32:BC:FC:61:08:92:1B:24
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01833B69B3ABC931E11FC747A14674CAEB17
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/zMYyZQjf2xjwo4w8Mrz8YQiSGyQ.roa
Signing time: Wed 14 Sep 2022 09:52:06 +0000
ROA not before: Wed 14 Sep 2022 09:52:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 141.11.178.0/24 maxlen: 24
141.11.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3b:69:b3:ab:c9:31:e1:1f:c7:47:a1:46:74:ca:eb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 14 09:52:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ccc6326508dfdb18f0a38c3c32bcfc6108921b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:81:da:34:34:a5:a0:80:1e:1d:6f:8a:ea:72:
6e:9a:53:1c:e5:1b:42:bb:9c:d3:07:d5:4d:73:dc:
2f:ef:e3:3f:34:49:27:f4:6a:5a:a1:b8:da:d6:94:
06:72:0b:72:1e:7c:c8:99:26:c8:b8:a4:8e:cb:4b:
86:48:1c:69:ae:87:96:f6:aa:56:92:63:97:c0:0b:
81:ca:08:a2:31:a8:c6:a7:c1:1e:64:4c:50:4b:f8:
86:1b:a1:9e:28:b9:ad:26:cd:73:56:28:ed:9b:91:
28:16:60:b6:25:c1:29:4d:4a:09:fa:8f:a1:e1:75:
53:e2:03:16:88:51:3b:90:79:f8:04:c0:8e:ec:fc:
1f:b8:ec:7e:fd:63:d2:4e:9e:a8:40:76:1c:9d:24:
2f:e7:ed:ec:2c:7b:ae:2c:06:69:33:d7:50:0f:8c:
71:4d:24:0f:35:6f:81:63:f5:3c:82:22:7e:ad:5c:
f6:21:e5:bd:d2:7d:65:a5:ed:40:e3:47:b5:da:c4:
c8:c2:80:c6:8b:c9:46:1c:1e:36:3d:f3:80:b0:bf:
8c:65:cd:4f:a7:86:86:5d:ca:f1:1d:29:19:e2:3b:
ab:7b:d6:2c:1a:60:bd:7e:c7:fb:01:7c:dc:17:c3:
cb:ca:44:03:56:0a:4a:bc:30:4b:f2:c2:c1:7f:58:
ea:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C6:32:65:08:DF:DB:18:F0:A3:8C:3C:32:BC:FC:61:08:92:1B:24
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/zMYyZQjf2xjwo4w8Mrz8YQiSGyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.178.0/24
141.11.200.0/22
Signature Algorithm: sha256WithRSAEncryption
20:70:b2:66:a3:c7:cd:4e:d9:44:ec:ea:f2:64:89:c7:43:8d:
2a:2d:cb:e6:8b:f9:d3:c3:85:45:73:6e:1e:37:7a:37:7d:69:
d7:4e:a3:7e:0f:66:c7:99:81:1f:9c:78:4e:91:01:04:d1:d6:
71:5d:eb:98:95:ed:44:be:4b:ae:c2:63:df:05:3e:b1:d9:92:
7f:21:1f:f9:f7:11:9f:82:5a:62:2f:8c:fc:ff:7f:25:30:69:
5e:1d:d4:ed:08:b8:11:55:3a:ea:af:7e:93:a5:12:70:ad:64:
04:d8:05:19:b0:92:2d:53:7a:0d:c1:aa:79:78:46:05:2f:3e:
92:bd:66:d7:11:21:1e:57:ee:d8:f9:98:03:5a:39:a8:00:a1:
01:02:01:94:3b:ec:c8:a6:cd:da:15:79:6e:f2:c7:8e:6e:3f:
a0:35:48:be:0f:7a:6d:ad:d2:d5:4f:21:b5:a0:c9:71:e5:76:
92:1f:45:59:a7:50:98:b4:a2:ae:9e:e6:3f:6a:a8:9d:98:3d:
5e:aa:03:41:7d:d8:f8:ae:20:f1:13:bb:38:6f:f3:11:69:15:
4c:3c:26:19:27:fb:15:b2:fc:c2:e3:7c:a9:2e:3d:b9:bf:dc:
70:a9:10:cc:56:5d:8a:70:d8:19:c0:22:4d:37:3f:e4:96:e3:
22:9e:46:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:58:29 2025 by rpki-client