Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/5ZClsXVhcYlpNjfn7dxRrzWRSW4.roa
File: 5ZClsXVhcYlpNjfn7dxRrzWRSW4.roa (raw, json)
Hash identifier: 8rpQ1LCwHAq7whP4RcbXAIXR0Cjiq9Fl6azD/waPhm0=
Subject key identifier: E5:90:A5:B1:75:61:71:89:69:36:37:E7:ED:DC:51:AF:35:91:49:6E
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 02EA092C
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/5ZClsXVhcYlpNjfn7dxRrzWRSW4.roa
Signing time: Thu 03 Feb 2022 17:43:29 +0000
ROA not before: Thu 03 Feb 2022 17:43:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 141.11.192.0/19 maxlen: 24
141.11.104.0/22 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.112.0/20 maxlen: 24
141.11.6.0/24 maxlen: 24
141.11.12.0/22 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.128.0/19 maxlen: 24
141.11.20.0/24 maxlen: 24
141.11.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48892204 (0x2ea092c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Feb 3 17:43:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e590a5b175617189693637e7eddc51af3591496e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3f:1d:c4:e6:b6:f2:6d:75:e0:2b:10:9b:6d:
40:47:ff:c1:95:62:c3:d1:4d:fd:ae:54:7c:1d:74:
97:a6:f5:9a:90:af:25:ca:75:98:a4:f5:e5:1f:72:
b9:c7:0f:04:f6:75:80:e8:62:9c:3d:8a:36:22:f5:
ca:01:9d:bc:39:90:ed:78:95:1f:89:43:24:15:40:
b2:0f:52:c0:2f:49:32:08:8b:45:78:15:21:39:d1:
74:bc:43:9c:f2:c7:2e:02:04:38:ee:8f:96:47:96:
78:74:bd:ab:31:6f:d2:1b:6a:22:0d:2e:dc:95:63:
1e:64:a4:f8:c8:49:c2:2c:62:54:cf:8d:66:e4:75:
bc:a5:7e:5f:27:31:97:27:86:b8:1b:d0:b6:09:7a:
b9:10:2a:ac:d6:41:07:41:d3:1b:e1:0d:4b:0f:92:
ec:2e:c9:f1:2c:49:da:17:42:79:fd:5a:c6:00:86:
55:66:05:5f:08:af:12:46:73:4b:16:69:1b:2b:30:
90:9e:0b:52:a9:04:7b:d7:67:bc:06:f6:fd:19:39:
b9:0f:50:43:79:c7:91:5a:9c:f2:40:92:9c:16:67:
81:82:bc:d9:d5:0c:81:78:37:01:c3:89:4e:a8:c2:
40:d9:f9:a0:7a:86:99:55:20:d0:1a:80:a7:cb:b2:
5d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:90:A5:B1:75:61:71:89:69:36:37:E7:ED:DC:51:AF:35:91:49:6E
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/5ZClsXVhcYlpNjfn7dxRrzWRSW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
141.11.6.0/24
141.11.12.0/22
141.11.17.0-141.11.20.255
141.11.104.0/22
141.11.112.0-141.11.159.255
141.11.192.0/19
Signature Algorithm: sha256WithRSAEncryption
4d:06:96:e1:50:d9:b0:fc:b4:b0:b5:d0:20:c6:50:94:26:ac:
5b:5b:93:07:46:27:95:2a:df:ac:50:32:ff:4a:1d:3d:be:6c:
8e:03:fa:f1:bf:d7:32:e8:39:a2:8d:f7:26:fe:a2:57:b5:8a:
11:0c:b2:f0:46:93:91:0c:55:f0:53:0a:bd:0f:7d:6b:d2:1f:
00:ae:51:9c:34:4c:58:ec:01:71:fd:4e:b4:e3:e6:30:be:07:
42:7c:1a:88:9f:b5:40:37:8c:ac:52:1e:68:cb:96:3a:23:82:
ac:6b:98:34:db:a4:0c:b3:66:67:a3:b3:1c:07:fd:ad:e4:4b:
d6:db:53:d0:62:0e:07:36:c3:79:67:0d:de:84:8e:52:83:ad:
cd:38:3c:0d:bd:03:4f:f7:82:15:c1:a4:42:8a:c3:d4:55:af:
9c:ae:31:35:73:61:d6:fe:00:d3:3f:a8:8f:4e:7f:22:dc:57:
14:7b:c6:ac:a9:ab:57:5b:7a:da:29:0f:eb:b3:ba:88:71:d3:
3c:07:0c:c8:79:84:2f:67:8c:c0:fb:d1:5c:b7:e9:76:7a:ef:
f6:1c:f1:2d:df:bf:11:42:75:ff:86:90:4a:de:98:a7:04:87:
df:9f:49:4e:21:ef:a2:77:be:1a:51:f7:3f:ba:3f:dd:a0:ec:
c3:17:60:4b
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIEAuoJLDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDIw
MzE3NDMyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTU5MGE1YjE3NTYx
NzE4OTY5MzYzN2U3ZWRkYzUxYWYzNTkxNDk2ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKw/HcTmtvJtdeArEJttQEf/wZViw9FN/a5UfB10l6b1mpCv
Jcp1mKT15R9yuccPBPZ1gOhinD2KNiL1ygGdvDmQ7XiVH4lDJBVAsg9SwC9JMgiL
RXgVITnRdLxDnPLHLgIEOO6PlkeWeHS9qzFv0htqIg0u3JVjHmSk+MhJwixiVM+N
ZuR1vKV+XycxlyeGuBvQtgl6uRAqrNZBB0HTG+ENSw+S7C7J8SxJ2hdCef1axgCG
VWYFXwivEkZzSxZpGyswkJ4LUqkEe9dnvAb2/Rk5uQ9QQ3nHkVqc8kCSnBZngYK8
2dUMgXg3AcOJTqjCQNn5oHqGmVUg0BqAp8uyXV8CAwEAAaOCAj0wggI5MB0GA1Ud
DgQWBBTlkKWxdWFxiWk2N+ft3FGvNZFJbjAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
LzVaQ2xzWFZoY1lscE5qZm43ZHhScnpXUlNXNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBT
BggrBgEFBQcBBwEB/wREMEIwQAQCAAEwOgMEAI0LAQMEAI0LBgMEAo0LDDAMAwQA
jQsRAwQAjQsUAwQCjQtoMAwDBASNC3ADBAWNC4ADBAWNC8AwDQYJKoZIhvcNAQEL
BQADggEBAE0GluFQ2bD8tLC10CDGUJQmrFtbkwdGJ5Uq36xQMv9KHT2+bI4D+vG/
1zLoOaKN9yb+ole1ihEMsvBGk5EMVfBTCr0PfWvSHwCuUZw0TFjsAXH9TrTj5jC+
B0J8GoiftUA3jKxSHmjLljojgqxrmDTbpAyzZmejsxwH/a3kS9bbU9BiDgc2w3ln
Dd6EjlKDrc04PA29A0/3ghXBpEKKw9RVr5yuMTVzYdb+ANM/qI9OfyLcVxR7xqyp
q1dbetopD+uzuohx0zwHDMh5hC9njMD70Vy36XZ67/Yc8S3fvxFCdf+GkEremKcE
h9+fSU4h76J3vhpR9z+6P92g7MMXYEs=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org