Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/5uSsX4o2k-8cC50VkKJxmLGYA8A.roa
File: 5uSsX4o2k-8cC50VkKJxmLGYA8A.roa (raw, json)
Hash identifier: ddSeAZ+jh8tPezNoye5bJcHDBF1aMg8oA1RQqBtdwRI=
Subject key identifier: E6:E4:AC:5F:8A:36:93:EF:1C:0B:9D:15:90:A2:71:98:B1:98:03:C0
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01839D7F998C8F691A7F8A3C20B3B1A4F1B2
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/5uSsX4o2k-8cC50VkKJxmLGYA8A.roa
Signing time: Mon 03 Oct 2022 10:58:48 +0000
ROA not before: Mon 03 Oct 2022 10:58:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 141.11.0.0/24 maxlen: 24
141.11.124.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9d:7f:99:8c:8f:69:1a:7f:8a:3c:20:b3:b1:a4:f1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Oct 3 10:58:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6e4ac5f8a3693ef1c0b9d1590a27198b19803c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e4:96:8d:26:54:27:d1:5a:d3:b5:72:bb:c5:
93:1a:5f:93:cf:dd:ed:57:4a:b6:e5:4f:b8:1a:1e:
2c:f7:4f:66:57:20:77:07:70:2d:fe:0a:25:5d:81:
4d:e2:fd:c0:20:3c:ba:af:2b:30:3c:d0:c0:a5:47:
ec:75:58:47:dc:15:e5:33:36:1f:cb:3a:5e:36:bf:
24:bf:83:56:2d:ce:ab:19:a9:c2:28:66:b7:81:24:
3e:2e:34:d6:13:78:72:eb:c7:4a:5f:11:6f:5e:de:
f6:8b:4c:08:a5:a8:39:e9:bb:12:d4:e1:16:b1:e4:
91:16:a5:62:b4:d0:77:3b:07:eb:2f:a2:97:89:4b:
b8:9a:29:e2:34:5c:8d:c4:29:22:76:f6:ce:41:a9:
0f:df:42:75:83:c5:42:d5:e4:dd:36:68:07:28:a1:
01:f0:5c:84:28:a5:77:81:87:0e:34:0a:04:f6:50:
85:0b:fa:24:ec:3f:a4:47:49:bb:7c:7e:7b:2b:e2:
af:8c:02:16:39:27:8e:cf:96:2d:4b:28:6b:c8:11:
52:16:11:80:5e:a5:3b:80:b9:62:c2:92:26:0c:cb:
2a:d5:cd:3a:cc:c3:c3:6b:34:8e:2b:d9:08:9b:ff:
32:35:b6:8e:79:6d:50:34:b3:af:ef:c2:15:b4:0d:
8e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E4:AC:5F:8A:36:93:EF:1C:0B:9D:15:90:A2:71:98:B1:98:03:C0
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/5uSsX4o2k-8cC50VkKJxmLGYA8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0/24
141.11.28.0/24
141.11.124.0/24
141.11.243.0/24
Signature Algorithm: sha256WithRSAEncryption
79:62:54:c1:5f:4d:16:45:31:29:a8:34:12:33:26:7d:c3:86:
a4:18:e2:d0:c9:d7:26:d9:50:98:dc:01:77:ec:1c:63:fa:13:
e6:bd:fd:0d:8d:78:97:bf:17:82:fc:e8:3e:ac:47:dd:b4:bc:
41:66:a0:67:bc:13:5c:b0:ed:1d:1c:fc:56:73:d3:ea:dd:9c:
31:06:9f:4c:40:13:0b:5e:99:3f:15:82:a1:74:b2:a7:8e:f2:
1a:52:3a:42:f0:7d:83:eb:0a:4f:85:60:5a:1c:a9:55:9c:ab:
22:80:89:56:e4:69:ea:3f:ec:16:9b:eb:b7:7b:42:e5:99:f2:
0d:2e:c2:c0:e4:63:bd:6c:0e:25:2c:ec:25:90:5e:f9:1e:34:
61:30:03:62:45:75:3a:49:c1:ec:c7:75:d2:00:87:a8:49:ab:
95:03:8f:4e:dd:84:97:a2:79:3e:40:06:83:4f:a3:c7:3c:75:
d4:2c:5f:9f:cc:23:f8:98:e7:35:d0:b9:8f:80:03:38:2b:92:
0b:13:8a:9a:71:99:f6:26:fa:51:b6:d2:2b:e3:4b:2d:bd:f2:
86:8c:5f:11:88:1d:d7:e8:4a:ee:25:a6:3b:f0:81:55:43:18:
68:ee:50:b0:ad:b6:25:27:57:ef:a4:fb:73:eb:46:fc:91:7f:
42:0c:ef:cf
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYOdf5mMj2kaf4o8ILOxpPGyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIxMDAzMTA1ODQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmU0YWM1ZjhhMzY5M2VmMWMwYjlkMTU5MGEyNzE5OGIxOTgwM2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+SWjSZUJ9Fa07Vyu8WTGl+Tz93t
V0q25U+4Gh4s909mVyB3B3At/golXYFN4v3AIDy6ryswPNDApUfsdVhH3BXlMzYf
yzpeNr8kv4NWLc6rGanCKGa3gSQ+LjTWE3hy68dKXxFvXt72i0wIpag56bsS1OEW
seSRFqVitNB3OwfrL6KXiUu4miniNFyNxCkidvbOQakP30J1g8VC1eTdNmgHKKEB
8FyEKKV3gYcONAoE9lCFC/ok7D+kR0m7fH57K+KvjAIWOSeOz5YtSyhryBFSFhGA
XqU7gLliwpImDMsq1c06zMPDazSOK9kIm/8yNbaOeW1QNLOv78IVtA2OrwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFObkrF+KNpPvHAudFZCicZixmAPAMB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvNXVTc1g0bzJrLThjQzUwVmtLSnhtTEdZQThBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAjQsAAwQA
jQscAwQAjQt8AwQAjQvzMA0GCSqGSIb3DQEBCwUAA4IBAQB5YlTBX00WRTEpqDQS
MyZ9w4akGOLQydcm2VCY3AF37Bxj+hPmvf0NjXiXvxeC/Og+rEfdtLxBZqBnvBNc
sO0dHPxWc9Pq3ZwxBp9MQBMLXpk/FYKhdLKnjvIaUjpC8H2D6wpPhWBaHKlVnKsi
gIlW5GnqP+wWm+u3e0LlmfINLsLA5GO9bA4lLOwlkF75HjRhMANiRXU6ScHsx3XS
AIeoSauVA49O3YSXonk+QAaDT6PHPHXULF+fzCP4mOc10LmPgAM4K5ILE4qacZn2
JvpRttIr40stvfKGjF8RiB3X6EruJaY78IFVQxho7lCwrbYlJ1fvpPtz60b8kX9C
DO/P
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org