Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/6qPu1GYAQWtbVkexkI5gcFuQ0bc.roa
File: 6qPu1GYAQWtbVkexkI5gcFuQ0bc.roa (raw, json)
Hash identifier: SVZ35UT3JMoIlmh+12p01tX9zQ3pnTT8ZWHByYjtq7k=
Subject key identifier: EA:A3:EE:D4:66:00:41:6B:5B:56:47:B1:90:8E:60:70:5B:90:D1:B7
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 02AE80BC
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/6qPu1GYAQWtbVkexkI5gcFuQ0bc.roa
Signing time: Mon 17 Jan 2022 18:12:41 +0000
ROA not before: Mon 17 Jan 2022 18:12:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 141.11.179.0/24 maxlen: 24
141.11.108.0/24 maxlen: 24
141.11.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44990652 (0x2ae80bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jan 17 18:12:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eaa3eed46600416b5b5647b1908e60705b90d1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:db:4a:dc:1d:62:e6:0f:3c:44:3e:6d:58:
86:f6:11:a2:1e:0b:fd:8c:70:36:a3:b5:34:34:45:
37:fa:7c:b4:a3:90:4b:b8:7e:7f:e2:8f:3a:56:68:
43:f4:6b:ca:5c:ab:6a:12:27:18:2b:84:5e:15:04:
1e:f4:aa:8a:28:e8:98:29:02:a4:9a:78:d0:59:85:
33:e9:d8:55:19:f2:af:05:05:7c:7e:f2:ba:19:ef:
a9:09:00:a5:95:9d:c4:1a:25:53:61:a2:0d:09:c2:
38:60:04:5d:93:e7:97:c6:90:fb:f1:ad:82:26:95:
ad:c8:28:e5:c8:2d:9f:54:cf:cc:57:c8:b4:27:b8:
d1:5a:21:eb:50:91:e6:ca:c3:dd:b0:7d:18:b5:f4:
cf:57:6e:d3:de:71:94:30:00:30:00:de:53:d7:6b:
95:f9:61:1a:cf:07:f5:06:aa:53:c2:a9:af:ba:9c:
9c:39:ef:0e:48:81:ed:c1:cc:b4:10:88:be:24:f0:
d3:c0:47:31:ea:c7:13:30:55:7a:ac:2a:3f:23:da:
4f:15:66:9c:d1:5a:2a:03:0a:af:9d:bc:ba:b0:7f:
c4:e8:40:5c:13:15:1b:e8:ff:11:fd:ca:b9:ce:c9:
8c:c6:f8:a5:b9:4f:da:45:06:9e:bc:02:f8:ad:2c:
7b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A3:EE:D4:66:00:41:6B:5B:56:47:B1:90:8E:60:70:5B:90:D1:B7
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/6qPu1GYAQWtbVkexkI5gcFuQ0bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.16.0/24
141.11.108.0/24
141.11.179.0/24
Signature Algorithm: sha256WithRSAEncryption
92:e7:0d:5c:ba:80:36:fd:5b:ab:9a:66:98:cc:88:2f:af:79:
9d:46:63:78:67:2a:60:5a:1c:bc:93:cd:94:60:da:2c:80:22:
76:05:8b:f0:ae:3e:43:92:80:ba:04:11:87:96:89:07:53:2b:
73:03:f4:ba:a6:5c:a6:7a:d0:d9:ee:63:05:40:7e:74:ef:49:
6e:e6:9d:c4:6e:bf:37:c8:98:87:b4:47:77:e7:0a:09:94:32:
88:6f:62:ae:d7:57:3f:a9:29:cf:e3:3d:e0:a3:11:4d:48:ae:
96:59:a8:21:45:a0:4b:3a:3f:33:cf:97:91:ee:1a:fa:58:7d:
58:92:93:87:57:a8:b3:2a:a6:7c:1f:06:be:c4:28:38:7f:6f:
c7:23:82:a3:f2:78:24:da:ca:b0:a4:79:18:c4:83:20:37:c5:
65:db:a5:1c:b1:64:4b:66:e1:23:f3:d5:95:31:c8:bf:cd:32:
13:98:39:23:82:97:3c:81:36:de:8c:61:47:9f:50:ad:31:18:
aa:6a:ff:8d:76:27:d9:0c:97:5d:3f:f8:50:8a:61:7b:b0:1d:
42:56:e1:f8:63:27:e8:e7:39:a4:18:2d:a2:62:fd:64:42:f0:
87:60:96:7e:7d:0d:1f:f3:2f:fb:f4:85:29:f0:b3:4c:75:f1:
cc:fa:c0:fa
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEAq6AvDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDEx
NzE4MTI0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWFhM2VlZDQ2NjAw
NDE2YjViNTY0N2IxOTA4ZTYwNzA1YjkwZDFiNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMHX20rcHWLmDzxEPm1YhvYRoh4L/YxwNqO1NDRFN/p8tKOQ
S7h+f+KPOlZoQ/RrylyrahInGCuEXhUEHvSqiijomCkCpJp40FmFM+nYVRnyrwUF
fH7yuhnvqQkApZWdxBolU2GiDQnCOGAEXZPnl8aQ+/GtgiaVrcgo5cgtn1TPzFfI
tCe40Voh61CR5srD3bB9GLX0z1du095xlDAAMADeU9drlflhGs8H9QaqU8Kpr7qc
nDnvDkiB7cHMtBCIviTw08BHMerHEzBVeqwqPyPaTxVmnNFaKgMKr528urB/xOhA
XBMVG+j/Ef3Kuc7JjMb4pblP2kUGnrwC+K0sewMCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBTqo+7UZgBBa1tWR7GQjmBwW5DRtzAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
LzZxUHUxR1lBUVd0YlZrZXhrSTVnY0Z1UTBiYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAI0LEAMEAI0LbAMEAI0LszANBgkq
hkiG9w0BAQsFAAOCAQEAkucNXLqANv1bq5pmmMyIL695nUZjeGcqYFocvJPNlGDa
LIAidgWL8K4+Q5KAugQRh5aJB1MrcwP0uqZcpnrQ2e5jBUB+dO9JbuadxG6/N8iY
h7RHd+cKCZQyiG9irtdXP6kpz+M94KMRTUiullmoIUWgSzo/M8+Xke4a+lh9WJKT
h1eosyqmfB8GvsQoOH9vxyOCo/J4JNrKsKR5GMSDIDfFZdulHLFkS2bhI/PVlTHI
v80yE5g5I4KXPIE23oxhR59QrTEYqmr/jXYn2QyXXT/4UIphe7AdQlbh+GMn6Oc5
pBgtomL9ZELwh2CWfn0NH/Mv+/SFKfCzTHXxzPrA+g==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org