Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/NGS0wMMHeLMl6YYqPp_20JB8giA.roa
File: NGS0wMMHeLMl6YYqPp_20JB8giA.roa (raw, json)
Hash identifier: vF+kAEQiTGAIlXf7F27D4LE+iR/Wi8oLOyi95BNBn2w=
Subject key identifier: 34:64:B4:C0:C3:07:78:B3:25:E9:86:2A:3E:9F:F6:D0:90:7C:82:20
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0394B78E
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/NGS0wMMHeLMl6YYqPp_20JB8giA.roa
Signing time: Tue 22 Mar 2022 09:59:56 +0000
ROA not before: Tue 22 Mar 2022 09:59:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.11.44.0/22 maxlen: 24
141.11.43.0/24 maxlen: 24
141.11.40.0/22 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.42.0/24 maxlen: 24
141.11.41.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.80.0/20 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.0.0/24 maxlen: 24
141.11.10.0/23 maxlen: 24
141.11.16.0/24 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.22.0/24 maxlen: 24
141.11.19.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.20.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.26.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.37.0/24 maxlen: 24
141.11.36.0/22 maxlen: 24
141.11.38.0/24 maxlen: 24
141.11.33.0/24 maxlen: 24
141.11.32.0/22 maxlen: 24
141.11.35.0/24 maxlen: 24
141.11.34.0/24 maxlen: 24
141.11.168.0/21 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.184.0/21 maxlen: 24
141.11.192.0/19 maxlen: 24
141.11.128.0/19 maxlen: 24
141.11.224.0/20 maxlen: 24
141.11.240.0/21 maxlen: 24
141.11.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60077966 (0x394b78e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Mar 22 09:59:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3464b4c0c30778b325e9862a3e9ff6d0907c8220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:cc:19:4b:08:51:16:c0:18:57:af:1f:40:
70:07:f3:0f:85:1b:5f:88:c6:f7:97:23:f0:3c:a1:
0e:5c:06:61:6c:79:fe:0b:a2:a0:02:98:33:80:6b:
2f:c0:de:59:5d:10:19:27:11:1c:30:db:65:89:da:
aa:20:51:7e:4a:e5:92:fa:58:54:74:58:ca:da:7a:
6d:0b:84:4c:96:87:7c:9f:f6:84:3d:55:aa:5a:2b:
4b:9d:7c:23:a1:82:22:83:68:2e:a7:f3:18:72:f7:
b2:84:a1:af:34:b1:6e:56:4d:04:61:b6:06:74:2a:
26:86:2c:54:c1:f0:66:3b:75:e3:00:16:87:31:e9:
92:12:4c:1e:a1:b8:69:bb:d7:1d:68:b0:0a:d3:01:
15:de:52:b8:93:f3:d5:4b:f4:30:36:1f:88:6f:8e:
b4:85:74:9a:e8:53:bd:de:1b:55:c8:d7:17:65:ce:
a7:be:b3:25:b0:59:92:05:15:a9:8f:34:af:d8:16:
20:03:a8:f2:84:d2:7d:20:ed:2f:dc:d2:6c:f1:7e:
5b:90:88:61:53:b1:db:76:df:52:8a:67:3c:75:e4:
c3:82:75:fb:d1:c2:10:e5:53:9c:16:82:e4:ba:88:
e6:5e:d2:58:4d:f3:ee:1f:6b:fb:8c:9e:f1:2d:76:
4c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:64:B4:C0:C3:07:78:B3:25:E9:86:2A:3E:9F:F6:D0:90:7C:82:20
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/NGS0wMMHeLMl6YYqPp_20JB8giA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0-141.11.2.255
141.11.10.0/23
141.11.16.0-141.11.22.255
141.11.25.0-141.11.26.255
141.11.28.0/24
141.11.31.0-141.11.47.255
141.11.80.0/20
141.11.128.0/19
141.11.168.0-141.11.176.255
141.11.182.0-141.11.251.255
Signature Algorithm: sha256WithRSAEncryption
7f:97:c5:c4:c1:55:6b:a8:ec:24:d3:fa:a3:ab:36:d7:3e:bc:
8e:ff:a7:86:25:4d:0c:72:c7:2d:c1:f5:b4:43:6b:1d:77:71:
46:b0:ed:1b:64:c3:21:37:71:71:d0:19:8b:d7:e1:92:6b:30:
72:d1:0f:0e:be:03:20:91:48:81:ff:49:42:dd:75:e3:ca:91:
8a:b9:5e:48:3b:86:3d:b3:f9:cc:89:a8:a5:f4:11:13:99:cc:
fa:12:bd:61:86:01:0c:72:b6:4c:ac:23:fe:28:fb:e8:f8:90:
d1:c9:ab:02:5b:4b:f9:e7:15:bb:fe:e4:a1:ee:82:5d:1b:71:
91:17:89:94:9f:9a:4e:47:a3:94:4e:c3:5b:d3:52:32:8f:53:
59:81:77:64:d0:3b:49:06:bc:83:80:00:8e:f5:02:7b:66:92:
2e:cb:e5:fa:be:dd:62:f7:e3:e0:32:27:30:fd:dc:bd:a0:15:
09:c6:fe:45:97:cb:e4:50:5d:4c:62:00:bf:ac:04:78:13:ae:
c4:8d:2e:b1:62:40:4f:c3:41:f6:aa:78:7c:72:e8:90:81:34:
81:9d:81:01:0e:cb:77:67:ac:24:88:6c:44:d8:a0:ee:8c:03:
6a:e4:39:61:0c:05:93:17:47:0e:58:15:32:13:e8:73:18:65:
16:dc:03:e4
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIEA5S3jjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDMy
MjA5NTk1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzQ2NGI0YzBjMzA3
NzhiMzI1ZTk4NjJhM2U5ZmY2ZDA5MDdjODIyMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ4+zBlLCFEWwBhXrx9AcAfzD4UbX4jG95cj8DyhDlwGYWx5
/guioAKYM4BrL8DeWV0QGScRHDDbZYnaqiBRfkrlkvpYVHRYytp6bQuETJaHfJ/2
hD1VqlorS518I6GCIoNoLqfzGHL3soShrzSxblZNBGG2BnQqJoYsVMHwZjt14wAW
hzHpkhJMHqG4abvXHWiwCtMBFd5SuJPz1Uv0MDYfiG+OtIV0muhTvd4bVcjXF2XO
p76zJbBZkgUVqY80r9gWIAOo8oTSfSDtL9zSbPF+W5CIYVOx23bfUopnPHXkw4J1
+9HCEOVTnBaC5LqI5l7SWE3z7h9r+4ye8S12TNUCAwEAAaOCAm8wggJrMB0GA1Ud
DgQWBBQ0ZLTAwwd4syXphio+n/bQkHyCIDAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L05HUzB3TU1IZUxNbDZZWXFQcF8yMEpCOGdpQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
hAYIKwYBBQUHAQcBAf8EdTBzMHEEAgABMGswCwMDAI0LAwQAjQsCAwQBjQsKMAwD
BASNCxADBACNCxYwDAMEAI0LGQMEAI0LGgMEAI0LHDAMAwQAjQsfAwQEjQsgAwQE
jQtQAwQFjQuAMAwDBAONC6gDBACNC7AwDAMEAY0LtgMEAo0L+DANBgkqhkiG9w0B
AQsFAAOCAQEAf5fFxMFVa6jsJNP6o6s21z68jv+nhiVNDHLHLcH1tENrHXdxRrDt
G2TDITdxcdAZi9fhkmswctEPDr4DIJFIgf9JQt1148qRirleSDuGPbP5zImopfQR
E5nM+hK9YYYBDHK2TKwj/ij76PiQ0cmrAltL+ecVu/7koe6CXRtxkReJlJ+aTkej
lE7DW9NSMo9TWYF3ZNA7SQa8g4AAjvUCe2aSLsvl+r7dYvfj4DInMP3cvaAVCcb+
RZfL5FBdTGIAv6wEeBOuxI0usWJAT8NB9qp4fHLokIE0gZ2BAQ7Ld2esJIhsRNig
7owDauQ5YQwFkxdHDlgVMhPocxhlFtwD5A==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-fra.rpki-client.org