Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/MUibMSp6vWpA6shwLboFco6nh4I.roa
File: MUibMSp6vWpA6shwLboFco6nh4I.roa (raw, json)
Hash identifier: VK7KiQGI2Lmz7T9ZybH8A5zkfriOFLmPrqUqiCHE/4c=
Subject key identifier: 31:48:9B:31:2A:7A:BD:6A:40:EA:C8:70:2D:BA:05:72:8E:A7:87:82
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 02C7BB38
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/MUibMSp6vWpA6shwLboFco6nh4I.roa
Signing time: Thu 27 Jan 2022 10:09:08 +0000
ROA not before: Thu 27 Jan 2022 10:09:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 141.11.40.0/24 maxlen: 24
141.11.43.0/24 maxlen: 24
141.11.68.0/24 maxlen: 24
141.11.69.0/24 maxlen: 24
141.11.188.0/24 maxlen: 24
141.11.189.0/24 maxlen: 24
141.11.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46644024 (0x2c7bb38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jan 27 10:09:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31489b312a7abd6a40eac8702dba05728ea78782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:61:1e:da:9f:c2:2e:1d:92:fa:fe:46:9d:da:
8f:df:4d:34:c2:f7:66:74:f0:d7:15:e5:71:32:63:
5a:c1:f8:60:ee:46:6d:df:ce:ff:d3:1c:a1:05:25:
7b:b9:49:d0:d4:e8:7a:0e:75:07:2e:10:a9:b4:74:
27:90:b2:59:4c:04:ad:02:e9:05:0e:23:e5:88:43:
e1:75:3f:51:24:0f:3f:15:ac:fe:70:be:f2:d5:be:
40:f3:be:d3:53:26:7e:aa:37:13:06:25:f4:c8:d0:
1d:bd:98:6d:99:d5:32:b9:bd:2f:26:d0:f5:40:cd:
67:d9:d5:a8:99:df:ef:cb:5e:a5:b8:23:f8:c2:1e:
54:6e:76:76:8e:65:65:b6:27:c6:14:41:5a:5e:4c:
c2:be:2a:9d:3c:2c:a0:f9:80:15:16:fb:51:b9:b9:
5c:d8:63:39:93:37:48:db:40:8a:56:46:02:d6:9b:
89:b5:d7:a1:77:66:78:40:56:3f:ef:de:f9:8e:4a:
fd:5e:d7:0b:d4:8c:a8:6a:29:9f:9e:a8:79:ee:39:
c0:51:95:45:64:6e:f8:af:c9:f9:31:7a:fd:55:28:
b3:aa:d1:b1:7f:86:18:6d:4a:5f:43:15:01:61:0a:
a8:ea:78:1c:d5:49:75:7b:37:ce:dc:9f:71:d6:30:
d6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:48:9B:31:2A:7A:BD:6A:40:EA:C8:70:2D:BA:05:72:8E:A7:87:82
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/MUibMSp6vWpA6shwLboFco6nh4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.40.0/24
141.11.43.0/24
141.11.68.0/23
141.11.188.0/23
141.11.247.0/24
Signature Algorithm: sha256WithRSAEncryption
97:3c:f6:52:58:7a:8c:64:ef:51:0b:fe:db:99:34:f5:39:c6:
43:68:e7:0a:4c:b2:2d:b0:7c:31:65:1e:61:cb:24:2b:02:60:
da:26:19:46:bf:45:b8:61:97:5d:ee:5f:4c:8c:c5:22:bf:95:
b2:28:c3:d5:03:5e:c9:80:be:5a:c0:1b:b0:89:f0:e6:01:cd:
ad:0e:60:86:35:8b:44:48:fe:53:8a:44:f0:dd:c8:1f:4f:7b:
67:f2:ef:78:be:41:ba:cd:ee:88:cb:24:9e:07:27:a1:b2:c7:
98:fd:b3:2d:b1:cd:3b:40:7c:3d:76:28:ea:e4:9a:bd:f6:5b:
28:f2:33:9d:a0:e2:5a:76:93:0b:da:f4:a1:3e:b9:2f:14:af:
2e:cb:2e:fc:2f:d9:68:d5:49:76:39:73:89:8d:56:e5:9e:c4:
96:36:4b:e4:77:ca:e6:04:50:03:a6:10:50:0b:05:94:f5:3e:
3f:d8:22:de:02:df:0f:cf:e3:05:37:4a:1e:ba:d3:e5:17:57:
33:8d:07:74:b0:eb:d8:45:62:6f:20:65:34:5b:6a:54:40:3c:
79:0a:25:2f:bb:fe:e4:27:79:87:7b:d1:bc:78:ef:f6:8c:69:
07:b1:e9:66:06:25:52:c3:3a:15:ba:8e:00:e3:19:cc:80:6d:
54:44:13:7a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEAse7ODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDEy
NzEwMDkwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzE0ODliMzEyYTdh
YmQ2YTQwZWFjODcwMmRiYTA1NzI4ZWE3ODc4MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANRhHtqfwi4dkvr+Rp3aj99NNML3ZnTw1xXlcTJjWsH4YO5G
bd/O/9McoQUle7lJ0NToeg51By4QqbR0J5CyWUwErQLpBQ4j5YhD4XU/USQPPxWs
/nC+8tW+QPO+01Mmfqo3EwYl9MjQHb2YbZnVMrm9LybQ9UDNZ9nVqJnf78tepbgj
+MIeVG52do5lZbYnxhRBWl5Mwr4qnTwsoPmAFRb7Ubm5XNhjOZM3SNtAilZGAtab
ibXXoXdmeEBWP+/e+Y5K/V7XC9SMqGopn56oee45wFGVRWRu+K/J+TF6/VUos6rR
sX+GGG1KX0MVAWEKqOp4HNVJdXs3ztyfcdYw1mkCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBQxSJsxKnq9akDqyHAtugVyjqeHgjAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L01VaWJNU3A2dldwQTZzaHdMYm9GY282bmg0SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAI0LKAMEAI0LKwMEAY0LRAMEAY0L
vAMEAI0L9zANBgkqhkiG9w0BAQsFAAOCAQEAlzz2Ulh6jGTvUQv+25k09TnGQ2jn
CkyyLbB8MWUeYcskKwJg2iYZRr9FuGGXXe5fTIzFIr+VsijD1QNeyYC+WsAbsInw
5gHNrQ5ghjWLREj+U4pE8N3IH097Z/LveL5Bus3uiMskngcnobLHmP2zLbHNO0B8
PXYo6uSavfZbKPIznaDiWnaTC9r0oT65LxSvLssu/C/ZaNVJdjlziY1W5Z7EljZL
5HfK5gRQA6YQUAsFlPU+P9gi3gLfD8/jBTdKHrrT5RdXM40HdLDr2EVibyBlNFtq
VEA8eQolL7v+5Cd5h3vRvHjv9oxpB7HpZgYlUsM6FbqOAOMZzIBtVEQTeg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-fra.rpki-client.org