Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/RU5YbGYdD7LM9dwpA5tXZKvq_CQ.roa
File: RU5YbGYdD7LM9dwpA5tXZKvq_CQ.roa (raw, json)
Hash identifier: F7hXrpxAZ5P616FRXZ/FLXR+qaFtkfX1YJPaMSe5JAQ=
Subject key identifier: 45:4E:58:6C:66:1D:0F:B2:CC:F5:DC:29:03:9B:57:64:AB:EA:FC:24
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 02FA142E
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/RU5YbGYdD7LM9dwpA5tXZKvq_CQ.roa
Signing time: Tue 08 Feb 2022 14:59:29 +0000
ROA not before: Tue 08 Feb 2022 14:59:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64267
IP address blocks: 141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.66.0/23 maxlen: 24
141.11.76.0/22 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.3.0/24 maxlen: 24
141.11.10.0/24 maxlen: 24
141.11.23.0/24 maxlen: 24
141.11.24.0/24 maxlen: 24
141.11.29.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.252.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49943598 (0x2fa142e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Feb 8 14:59:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=454e586c661d0fb2ccf5dc29039b5764abeafc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b0:62:0a:77:be:d2:35:14:45:ae:7d:f5:da:
0c:00:8d:14:5e:db:1b:25:95:c0:20:18:57:e9:1e:
f4:b4:b9:3f:9c:f6:b5:f0:49:46:a3:98:8f:39:43:
32:a9:84:8a:24:00:30:24:79:01:b3:36:c9:f5:57:
fc:88:4a:f1:6a:61:8a:5f:44:21:96:06:4e:7e:27:
e3:61:bb:dd:a8:53:bb:90:80:75:22:f2:eb:fc:cc:
7c:20:59:86:52:61:95:d6:44:c8:cd:46:ae:97:2c:
ba:fb:34:25:50:7a:29:2f:fc:52:a6:7a:26:b6:84:
d7:c4:b6:7b:52:88:19:9b:6f:ef:0e:aa:27:58:24:
da:4f:bf:55:1a:e9:34:99:5b:5d:eb:09:40:0a:37:
01:42:6d:a0:77:92:78:58:f3:72:13:f7:5e:0c:0e:
6a:12:72:6f:57:ee:88:85:18:40:ce:50:d7:d4:22:
94:4e:2b:dd:d7:4d:9a:8f:b5:56:1e:a4:ed:fa:7e:
d4:cd:9b:35:5e:a0:b7:bd:32:c3:21:0b:e9:c2:dc:
af:16:d7:1a:75:0e:53:47:4d:99:01:df:e2:32:a5:
00:47:d2:86:23:18:ab:e1:7e:21:2f:f1:46:1a:b9:
83:39:4b:cc:96:9f:93:8a:40:d0:a6:1d:f2:b5:0f:
1e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4E:58:6C:66:1D:0F:B2:CC:F5:DC:29:03:9B:57:64:AB:EA:FC:24
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/RU5YbGYdD7LM9dwpA5tXZKvq_CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.2.0/23
141.11.10.0/24
141.11.23.0-141.11.25.255
141.11.29.0/24
141.11.46.0/23
141.11.66.0/23
141.11.76.0/22
141.11.252.0/23
Signature Algorithm: sha256WithRSAEncryption
10:49:6e:39:f6:cb:02:ec:9b:44:75:ff:66:ef:82:4f:33:bd:
7e:3b:60:1a:9d:ce:e6:8b:01:0e:1a:fb:56:de:e0:a0:0b:6c:
8a:bb:e4:d3:68:dc:54:97:6f:6a:ba:b6:9d:ed:da:96:33:de:
b0:fc:ae:b8:2c:39:d0:fd:30:44:1c:69:d1:36:4a:91:aa:3c:
52:59:69:47:5d:2f:ff:10:d1:26:7f:e6:72:3f:88:62:d2:eb:
95:6b:ba:3f:45:01:21:ea:1f:cb:53:36:1c:89:70:d4:18:af:
cb:91:1f:62:12:68:18:61:26:01:2b:30:29:54:d6:af:96:9a:
22:af:af:7f:18:23:b8:45:22:76:13:0a:0a:45:fb:ca:d1:18:
9e:b2:5a:5a:89:21:33:e4:54:26:4b:3e:6e:fb:03:92:00:b8:
ec:43:ac:22:ca:a2:c9:91:59:07:02:2f:a0:3b:26:7f:50:3a:
34:f1:e7:b7:e3:82:f8:1e:03:5f:87:be:4c:08:94:87:c2:ff:
42:5a:9d:fc:d1:9b:b9:0a:42:f2:93:15:a1:13:c4:d3:c7:b7:
59:d3:ab:55:29:e1:c6:73:c7:79:22:d3:36:94:44:86:89:fa:
ab:d7:be:5f:90:b5:1f:89:87:ff:54:8a:9b:ea:ae:e7:cb:d9:
da:d1:3c:53
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIEAvoULjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDIw
ODE0NTkyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDU0ZTU4NmM2NjFk
MGZiMmNjZjVkYzI5MDM5YjU3NjRhYmVhZmMyNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKOwYgp3vtI1FEWuffXaDACNFF7bGyWVwCAYV+ke9LS5P5z2
tfBJRqOYjzlDMqmEiiQAMCR5AbM2yfVX/IhK8Wphil9EIZYGTn4n42G73ahTu5CA
dSLy6/zMfCBZhlJhldZEyM1Grpcsuvs0JVB6KS/8UqZ6JraE18S2e1KIGZtv7w6q
J1gk2k+/VRrpNJlbXesJQAo3AUJtoHeSeFjzchP3XgwOahJyb1fuiIUYQM5Q19Qi
lE4r3ddNmo+1Vh6k7fp+1M2bNV6gt70ywyEL6cLcrxbXGnUOU0dNmQHf4jKlAEfS
hiMYq+F+IS/xRhq5gzlLzJafk4pA0KYd8rUPHjsCAwEAAaOCAjswggI3MB0GA1Ud
DgQWBBRFTlhsZh0Pssz13CkDm1dkq+r8JDAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L1JVNVliR1lkRDdMTTlkd3BBNXRYWkt2cV9DUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBR
BggrBgEFBQcBBwEB/wRCMEAwPgQCAAEwOAMEAY0LAgMEAI0LCjAMAwQAjQsXAwQB
jQsYAwQAjQsdAwQBjQsuAwQBjQtCAwQCjQtMAwQBjQv8MA0GCSqGSIb3DQEBCwUA
A4IBAQAQSW459ssC7JtEdf9m74JPM71+O2Aanc7miwEOGvtW3uCgC2yKu+TTaNxU
l29qurad7dqWM96w/K64LDnQ/TBEHGnRNkqRqjxSWWlHXS//ENEmf+ZyP4hi0uuV
a7o/RQEh6h/LUzYciXDUGK/LkR9iEmgYYSYBKzApVNavlpoir69/GCO4RSJ2EwoK
RfvK0RieslpaiSEz5FQmSz5u+wOSALjsQ6wiyqLJkVkHAi+gOyZ/UDo08ee344L4
HgNfh75MCJSHwv9CWp380Zu5CkLykxWhE8TTx7dZ06tVKeHGc8d5ItM2lESGifqr
175fkLUfiYf/VIqb6q7ny9na0TxT
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org