Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/BVmAmZrpZdM1b7Fwpd06m5e6dmc.roa
File: BVmAmZrpZdM1b7Fwpd06m5e6dmc.roa (raw, json)
Hash identifier: zDVJM2qJ5fyGLVaQp4h+g+DdgZK/xYz6ZEK16DgsWMU=
Subject key identifier: 05:59:80:99:9A:E9:65:D3:35:6F:B1:70:A5:DD:3A:9B:97:BA:76:67
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04132931
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/BVmAmZrpZdM1b7Fwpd06m5e6dmc.roa
Signing time: Fri 22 Apr 2022 09:44:15 +0000
ROA not before: Fri 22 Apr 2022 09:44:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137443
IP address blocks: 141.11.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68364593 (0x4132931)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 22 09:44:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=055980999ae965d3356fb170a5dd3a9b97ba7667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a7:89:80:45:b4:2f:27:27:e4:1d:13:52:00:
02:54:ea:7b:30:c6:05:ab:74:20:ed:45:e7:89:94:
e6:a0:cc:2e:55:9a:86:f1:59:32:8e:ca:4f:de:22:
2f:8f:c9:57:17:c2:a2:77:02:07:52:44:b7:dd:05:
52:d6:f5:18:86:62:32:90:6a:e2:1f:9c:1f:90:53:
6a:95:20:38:ae:44:77:f3:32:98:b0:df:5b:e4:d4:
1e:1a:d8:e0:75:55:20:fe:2a:44:b5:0c:96:7d:81:
05:22:da:a6:38:57:c8:c0:09:1e:d8:ff:29:c2:95:
18:ef:74:55:a9:51:56:73:40:60:fc:11:2d:3d:10:
dc:37:18:c8:66:0c:b5:37:37:0f:5b:5d:63:1c:a7:
2b:3e:63:78:f3:46:d5:ed:11:40:98:cc:d8:33:58:
fa:3e:a2:f8:e7:f2:e4:f4:bd:1d:c8:ea:30:5d:f4:
ef:35:b3:38:25:74:55:67:4f:27:22:e5:f3:aa:2b:
2f:dd:77:1b:0f:91:27:47:ed:dd:6f:2b:6d:c1:c1:
fe:ff:47:cd:eb:77:33:0e:b0:d5:ba:e8:7c:c0:42:
da:d4:d8:81:b6:bb:0c:f1:15:b1:1d:c6:84:3f:f1:
47:fc:25:1e:9d:ca:83:19:39:17:66:5c:f8:61:b7:
38:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:59:80:99:9A:E9:65:D3:35:6F:B1:70:A5:DD:3A:9B:97:BA:76:67
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/BVmAmZrpZdM1b7Fwpd06m5e6dmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.98.0/24
Signature Algorithm: sha256WithRSAEncryption
15:29:fb:5f:d1:6a:62:80:1f:67:c2:fd:32:08:f5:dc:e9:6e:
aa:a2:4c:bc:bd:b1:f9:69:d2:5b:24:8f:c1:75:3a:e6:bc:9f:
81:a5:00:9a:7d:bc:31:13:b5:48:ac:7d:2d:de:2c:14:63:78:
9a:7e:98:22:e4:b9:d5:4e:69:3f:9f:33:79:ce:c0:dc:5e:49:
35:c8:13:56:01:2d:30:b4:ef:60:02:c8:e7:51:ce:1c:91:c9:
2d:b3:4f:3f:42:c0:b2:ff:60:7d:6a:aa:ca:14:16:fd:1e:f7:
44:3d:13:2e:1a:d7:fe:4f:b1:4e:d2:a0:56:a7:96:25:a7:e1:
d9:c9:15:01:92:a4:88:92:d4:39:f5:4f:39:94:1a:33:0a:ff:
12:cc:3e:2e:c5:59:a6:b6:61:07:a2:82:63:bf:6e:90:9b:1f:
b0:70:2d:d7:05:4d:99:56:57:99:a0:0d:3b:55:b7:f3:8c:a7:
5f:0c:2f:75:0c:ed:29:0d:7b:87:be:ec:d5:fc:cf:30:77:5d:
85:ab:7e:ba:c1:1c:cf:e0:7d:15:4e:73:70:bf:c3:d5:2a:ab:
9d:df:76:17:74:bd:60:03:4a:e9:c2:a6:6c:b3:51:ad:45:b5:
f7:03:de:69:12:a5:3f:0c:a1:69:8b:f0:34:4d:d6:2c:8f:10:
e8:27:32:d2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBBMpMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDQy
MjA5NDQxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDU1OTgwOTk5YWU5
NjVkMzM1NmZiMTcwYTVkZDNhOWI5N2JhNzY2NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIKniYBFtC8nJ+QdE1IAAlTqezDGBat0IO1F54mU5qDMLlWa
hvFZMo7KT94iL4/JVxfConcCB1JEt90FUtb1GIZiMpBq4h+cH5BTapUgOK5Ed/My
mLDfW+TUHhrY4HVVIP4qRLUMln2BBSLapjhXyMAJHtj/KcKVGO90ValRVnNAYPwR
LT0Q3DcYyGYMtTc3D1tdYxynKz5jePNG1e0RQJjM2DNY+j6i+Ofy5PS9HcjqMF30
7zWzOCV0VWdPJyLl86orL913Gw+RJ0ft3W8rbcHB/v9Hzet3Mw6w1brofMBC2tTY
gba7DPEVsR3GhD/xR/wlHp3Kgxk5F2Zc+GG3OBECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQFWYCZmull0zVvsXCl3Tqbl7p2ZzAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L0JWbUFtWnJwWmRNMWI3RndwZDA2bTVlNmRtYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI0LYjANBgkqhkiG9w0BAQsFAAOC
AQEAFSn7X9FqYoAfZ8L9Mgj13OluqqJMvL2x+WnSWySPwXU65ryfgaUAmn28MRO1
SKx9Ld4sFGN4mn6YIuS51U5pP58zec7A3F5JNcgTVgEtMLTvYALI51HOHJHJLbNP
P0LAsv9gfWqqyhQW/R73RD0TLhrX/k+xTtKgVqeWJafh2ckVAZKkiJLUOfVPOZQa
Mwr/Esw+LsVZprZhB6KCY79ukJsfsHAt1wVNmVZXmaANO1W384ynXwwvdQztKQ17
h77s1fzPMHddhat+usEcz+B9FU5zcL/D1Sqrnd92F3S9YANK6cKmbLNRrUW19wPe
aRKlPwyhaYvwNE3WLI8Q6Ccy0g==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org