Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/OGIquy7ninkWA3mhLVRz0FzSNBI.roa
File: OGIquy7ninkWA3mhLVRz0FzSNBI.roa (raw, json)
Hash identifier: hrNMUGtOjlebicywLSHiLUJxDjnLYW26TsAcIMViJMM=
Subject key identifier: 38:62:2A:BB:2E:E7:8A:79:16:03:79:A1:2D:54:73:D0:5C:D2:34:12
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 018434E00FF032DB12E2FB829986D2E99901
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/OGIquy7ninkWA3mhLVRz0FzSNBI.roa
Signing time: Tue 01 Nov 2022 20:26:50 +0000
ROA not before: Tue 01 Nov 2022 20:26:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400536
IP address blocks: 141.11.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:34:e0:0f:f0:32:db:12:e2:fb:82:99:86:d2:e9:99:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 1 20:26:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38622abb2ee78a79160379a12d5473d05cd23412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:60:8d:18:90:19:21:af:44:39:2e:73:03:1e:
35:38:de:de:19:3d:dd:33:db:5d:3a:e5:ea:14:2e:
b7:4d:32:d4:bb:13:f0:f4:06:d7:dd:f3:9d:4e:32:
db:8a:c7:cd:b0:df:a8:8e:d4:bb:9a:56:b9:8a:cf:
19:4f:c7:51:91:9e:c1:7a:83:b9:94:3e:d5:c8:9b:
4c:46:cf:46:22:02:2d:be:17:f5:c6:43:e6:f3:1f:
d7:47:e1:a4:25:c9:2c:89:37:bb:e8:ae:ed:e9:fd:
8b:9d:91:5a:85:77:b5:b5:bf:cc:08:aa:7a:70:2c:
b3:fd:f5:8d:85:4d:00:fa:80:28:76:0a:b6:ff:df:
d2:88:51:d0:65:74:ce:36:e5:cd:ff:27:b6:f3:e7:
91:f5:63:da:3a:fe:db:f7:c5:80:0e:44:0c:1a:d7:
d6:7e:6f:1d:46:03:ea:2d:88:7c:83:e1:34:a7:92:
13:8a:c2:79:8b:37:8f:e3:44:71:bd:c0:9a:ae:e6:
5c:b6:e9:75:57:b9:75:e6:6b:e9:33:3b:96:2b:3a:
dc:3e:de:d0:30:fc:10:5e:66:8b:6f:0d:d0:50:67:
07:d6:c5:1f:42:e8:fe:78:48:e3:57:01:53:49:f6:
8e:b8:1e:4f:8b:21:f3:e3:65:ac:2f:9b:94:b0:3e:
c6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:62:2A:BB:2E:E7:8A:79:16:03:79:A1:2D:54:73:D0:5C:D2:34:12
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/OGIquy7ninkWA3mhLVRz0FzSNBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.148.0/22
Signature Algorithm: sha256WithRSAEncryption
99:5d:e5:f6:d2:39:b8:d2:d5:23:03:30:54:65:d3:9f:bb:e4:
c0:33:dc:cb:36:ae:a9:84:4d:bb:19:60:f6:c3:99:0d:e8:56:
1d:09:e8:fb:e8:69:9a:20:28:cd:97:9d:0a:c8:7c:8b:98:ac:
39:35:81:07:84:91:f6:78:2f:b7:43:c7:80:77:8d:9f:fc:09:
09:6b:67:ff:9b:09:18:0f:16:b2:5f:82:a4:d5:1a:e3:a5:b9:
06:f3:b5:ad:66:03:5c:ba:2c:fd:25:72:1c:d5:f8:8f:d6:b9:
53:3f:4f:f4:8b:0e:af:43:12:4a:f8:67:e3:f4:94:52:25:b0:
5d:b7:67:b9:06:66:67:ed:e4:c5:22:d7:e6:82:9d:30:a1:ba:
c9:33:28:60:39:b5:5b:77:f5:b0:9f:fb:a3:a8:c0:72:73:24:
f6:a2:e7:65:76:74:85:44:35:ee:de:b7:45:e4:4e:c8:2b:b0:
cf:c5:3c:d8:f1:4d:a5:c0:b8:65:13:31:97:e2:0c:e9:ec:eb:
7c:77:4b:9c:68:1e:38:61:9d:e9:71:cf:fc:e2:d0:db:f1:8f:
f4:fd:9f:7a:d4:c4:0c:ff:31:e0:f4:48:f7:63:65:b6:76:34:
e8:5e:55:11:ff:76:26:be:b2:e8:7d:fd:d8:3a:9b:40:ac:41:
87:39:3a:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQ04A/wMtsS4vuCmYbS6ZkBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIxMTAxMjAyNjUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODYyMmFiYjJlZTc4YTc5MTYwMzc5YTEyZDU0NzNkMDVjZDIzNDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmCNGJAZIa9EOS5zAx41ON7eGT3d
M9tdOuXqFC63TTLUuxPw9AbX3fOdTjLbisfNsN+ojtS7mla5is8ZT8dRkZ7BeoO5
lD7VyJtMRs9GIgItvhf1xkPm8x/XR+GkJcksiTe76K7t6f2LnZFahXe1tb/MCKp6
cCyz/fWNhU0A+oAodgq2/9/SiFHQZXTONuXN/ye28+eR9WPaOv7b98WADkQMGtfW
fm8dRgPqLYh8g+E0p5ITisJ5izeP40RxvcCaruZctul1V7l15mvpMzuWKzrcPt7Q
MPwQXmaLbw3QUGcH1sUfQuj+eEjjVwFTSfaOuB5PiyHz42WsL5uUsD7G9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDhiKrsu54p5FgN5oS1Uc9Bc0jQSMB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvT0dJcXV5N25pbmtXQTNtaExWUnowRnpTTkJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjQuUMA0G
CSqGSIb3DQEBCwUAA4IBAQCZXeX20jm40tUjAzBUZdOfu+TAM9zLNq6phE27GWD2
w5kN6FYdCej76GmaICjNl50KyHyLmKw5NYEHhJH2eC+3Q8eAd42f/AkJa2f/mwkY
DxayX4Kk1RrjpbkG87WtZgNcuiz9JXIc1fiP1rlTP0/0iw6vQxJK+Gfj9JRSJbBd
t2e5BmZn7eTFItfmgp0wobrJMyhgObVbd/Wwn/ujqMBycyT2oudldnSFRDXu3rdF
5E7IK7DPxTzY8U2lwLhlEzGX4gzp7Ot8d0ucaB44YZ3pcc/84tDb8Y/0/Z961MQM
/zHg9Ej3Y2W2djToXlUR/3YmvrLoff3YOptArEGHOTql
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org