Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/O1mJCvnLIxoj3-A1tqMb_hrbMkg.roa
File: O1mJCvnLIxoj3-A1tqMb_hrbMkg.roa (raw, json)
Hash identifier: qxznGWYuVutdSM55Kkq3cad4hvR2ihfBhd3/w7nAE5s=
Subject key identifier: 3B:59:89:0A:F9:CB:23:1A:23:DF:E0:35:B6:A3:1B:FE:1A:DB:32:48
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 02E82F34
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/O1mJCvnLIxoj3-A1tqMb_hrbMkg.roa
Signing time: Thu 03 Feb 2022 14:04:08 +0000
ROA not before: Thu 03 Feb 2022 14:04:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 141.11.72.0/22 maxlen: 24
141.11.80.0/22 maxlen: 24
141.11.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48770868 (0x2e82f34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Feb 3 14:04:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b59890af9cb231a23dfe035b6a31bfe1adb3248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:46:e4:a3:43:f7:5a:46:6a:ce:77:71:8f:94:
1c:46:80:fb:be:ad:2e:dc:f9:e2:1a:df:b6:ba:d8:
46:68:f0:6d:aa:1c:de:ff:e3:3d:6c:c6:83:3d:1a:
f5:83:cd:c6:a8:6a:b1:94:70:f4:90:e1:b2:ca:e6:
21:ad:c3:4b:1d:74:87:14:38:5f:63:d3:68:34:01:
15:28:80:37:b5:b7:67:64:bf:f9:78:f6:70:29:f9:
ab:79:a0:a8:84:97:92:04:1e:e5:6a:e8:c3:16:1c:
67:db:16:be:fe:1e:02:4b:d3:05:f0:59:02:b7:99:
b7:0c:88:03:f5:74:cb:1e:c9:db:0f:0a:e5:fd:a6:
6c:22:a3:b0:2d:85:c1:b3:3b:42:1e:72:27:52:f8:
cf:f0:c0:89:05:cd:71:bb:cf:b4:b1:73:ac:ec:c0:
1d:2a:88:c3:c3:2b:bd:a1:11:ad:f3:04:9a:4d:dc:
d5:ac:9c:b0:96:bd:60:5d:0f:e2:3c:84:00:fb:46:
fd:82:49:2f:87:6a:c7:94:a8:21:06:3b:f6:56:ef:
4b:5b:fc:39:66:41:cb:82:6f:da:70:ad:3e:b4:20:
3e:ff:d5:c5:2e:27:df:49:16:2d:9d:b5:37:a4:cc:
93:14:c4:cf:36:b3:86:86:0c:6a:13:40:81:be:12:
e3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:59:89:0A:F9:CB:23:1A:23:DF:E0:35:B6:A3:1B:FE:1A:DB:32:48
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/O1mJCvnLIxoj3-A1tqMb_hrbMkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.32.0/22
141.11.72.0/22
141.11.80.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:e7:02:54:2e:5a:2f:39:8c:45:69:48:81:21:5d:2d:1d:da:
38:41:33:73:e7:79:d7:38:39:2f:ea:40:95:35:7e:cd:62:03:
28:d8:a1:af:82:db:09:ae:38:b4:ef:1b:45:83:0b:ac:d8:73:
d7:3a:cc:aa:fa:5a:45:51:ee:ea:ca:b6:c9:b2:ad:c6:43:82:
d8:4d:f7:fb:f2:39:1c:7e:41:44:b9:b6:30:da:c7:42:d8:45:
02:42:3c:56:77:ad:cb:44:1c:aa:81:b6:19:5b:99:ad:b6:34:
af:65:0c:c6:6d:f9:71:11:95:1a:da:d9:4a:78:9a:93:82:77:
30:08:0c:d1:2c:4d:c4:b0:35:cc:d7:50:28:94:08:4d:57:df:
e9:dd:7c:29:19:df:bb:de:fd:5e:2c:f3:7c:4d:03:33:83:5c:
d3:cf:0e:72:0e:57:52:13:37:53:14:5f:e7:ee:d0:fc:4f:67:
c0:06:2f:7e:20:06:10:72:6b:65:3f:33:d3:96:f3:1a:3d:86:
46:ab:cf:05:33:4a:47:fa:a0:ec:83:e1:ec:e6:87:09:51:fe:
b4:87:01:e6:29:a7:9d:42:09:e1:24:59:f6:77:30:2a:38:59:
b0:df:80:36:da:90:5b:f2:a6:7d:91:8b:e7:9f:68:60:93:e8:
2b:15:43:18
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEAugvNDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDIw
MzE0MDQwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2I1OTg5MGFmOWNi
MjMxYTIzZGZlMDM1YjZhMzFiZmUxYWRiMzI0ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALRG5KND91pGas53cY+UHEaA+76tLtz54hrftrrYRmjwbaoc
3v/jPWzGgz0a9YPNxqhqsZRw9JDhssrmIa3DSx10hxQ4X2PTaDQBFSiAN7W3Z2S/
+Xj2cCn5q3mgqISXkgQe5WrowxYcZ9sWvv4eAkvTBfBZAreZtwyIA/V0yx7J2w8K
5f2mbCKjsC2FwbM7Qh5yJ1L4z/DAiQXNcbvPtLFzrOzAHSqIw8MrvaERrfMEmk3c
1aycsJa9YF0P4jyEAPtG/YJJL4dqx5SoIQY79lbvS1v8OWZBy4Jv2nCtPrQgPv/V
xS4n30kWLZ21N6TMkxTEzzazhoYMahNAgb4S498CAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQ7WYkK+csjGiPf4DW2oxv+GtsySDAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L08xbUpDdm5MSXhvajMtQTF0cU1iX2hyYk1rZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAo0LIAMEAo0LSAMEAo0LUDANBgkq
hkiG9w0BAQsFAAOCAQEAe+cCVC5aLzmMRWlIgSFdLR3aOEEzc+d51zg5L+pAlTV+
zWIDKNihr4LbCa44tO8bRYMLrNhz1zrMqvpaRVHu6sq2ybKtxkOC2E33+/I5HH5B
RLm2MNrHQthFAkI8Vnety0QcqoG2GVuZrbY0r2UMxm35cRGVGtrZSniak4J3MAgM
0SxNxLA1zNdQKJQITVff6d18KRnfu979XizzfE0DM4Nc088Ocg5XUhM3UxRf5+7Q
/E9nwAYvfiAGEHJrZT8z05bzGj2GRqvPBTNKR/qg7IPh7OaHCVH+tIcB5imnnUIJ
4SRZ9ncwKjhZsN+ANtqQW/KmfZGL559oYJPoKxVDGA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org