Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/SNb0bB0SvMwfTXj6-vkEWxfJD68.roa
File: SNb0bB0SvMwfTXj6-vkEWxfJD68.roa (raw, json)
Hash identifier: DrEV3NefeuGTE7QKamYKeDtMfmRiYUcn0RKUrEzAgrA=
Subject key identifier: 48:D6:F4:6C:1D:12:BC:CC:1F:4D:78:FA:FA:F9:04:5B:17:C9:0F:AF
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 05174528
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/SNb0bB0SvMwfTXj6-vkEWxfJD68.roa
Signing time: Tue 14 Jun 2022 17:17:45 +0000
ROA not before: Tue 14 Jun 2022 17:17:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19437
IP address blocks: 141.11.112.0/21 maxlen: 24
141.11.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85411112 (0x5174528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jun 14 17:17:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48d6f46c1d12bccc1f4d78fafaf9045b17c90faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9b:84:99:f5:b3:f0:fe:50:88:3d:1d:c8:50:
96:5b:a2:ed:01:cb:09:8a:ae:4c:8f:98:6c:26:5a:
73:ac:c8:99:6c:8a:2f:90:03:3f:ce:c1:74:b7:dc:
a4:9a:66:7b:f6:bd:0c:22:3d:7d:4b:01:6c:70:25:
24:25:46:10:65:56:da:62:64:c6:50:cd:db:77:d9:
d7:6a:65:00:b0:d5:5d:02:a8:f1:4c:65:3d:5c:ae:
1f:bd:bf:f4:ff:b9:6d:09:8c:ec:30:f4:bc:2e:8b:
2b:61:0a:23:8a:da:00:72:27:8a:61:11:c1:02:e3:
90:36:d3:d1:8e:da:49:0e:f8:a6:6b:54:af:4b:3d:
66:6f:67:f0:aa:28:8f:aa:49:99:1d:dd:01:94:2e:
02:6c:0f:f2:c5:25:bb:2e:45:b2:ab:dc:2a:9e:bb:
f5:59:e1:f4:6f:aa:42:10:e5:92:93:a1:17:93:26:
b4:12:bc:92:21:62:94:76:7a:8b:f3:28:81:2c:15:
21:51:cd:ed:08:d8:9b:8e:32:66:c2:4f:b3:dc:cc:
cd:dc:fd:fe:9d:3c:e9:8b:b2:ec:a1:2d:d4:17:51:
43:f5:1b:e3:35:1f:bc:8d:94:ac:18:01:a5:f4:e9:
4c:69:ea:60:d5:02:c5:8b:fe:16:ee:c0:40:a9:4c:
ee:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D6:F4:6C:1D:12:BC:CC:1F:4D:78:FA:FA:F9:04:5B:17:C9:0F:AF
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/SNb0bB0SvMwfTXj6-vkEWxfJD68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.112.0-141.11.120.255
Signature Algorithm: sha256WithRSAEncryption
8f:e7:ff:ad:3d:6a:1a:44:ad:e2:1c:6b:42:7d:28:d9:b7:a6:
d0:84:48:b4:b3:ec:46:95:f8:c1:00:21:68:a4:42:df:0f:43:
52:c5:e4:8f:76:3b:8c:ba:60:74:50:5e:66:15:c3:ef:ef:50:
c9:98:be:4e:23:c0:aa:00:30:95:81:27:b0:d4:53:a6:d3:77:
3c:20:45:10:57:7d:13:c2:d1:d7:87:96:67:5c:c8:35:dc:5d:
dd:21:e8:66:69:f5:7e:44:2b:f5:57:67:6f:e5:c6:5a:75:c4:
5a:45:b8:cc:31:f2:ed:62:2e:18:60:ca:07:8f:14:ee:e8:2b:
96:70:1c:81:d1:ad:e4:ce:2d:d7:88:dd:9f:db:a9:59:27:2c:
1a:fd:53:1e:90:92:a5:67:fe:ee:af:60:74:c8:3c:15:c2:39:
46:7a:17:a8:9a:3e:33:ff:29:8f:1a:e1:e8:cc:d7:41:04:fb:
26:f4:5e:77:b5:8f:76:29:66:6c:28:cd:4a:56:db:55:c7:16:
28:c8:36:8e:d7:12:45:20:fb:eb:1c:ca:af:52:58:6d:ca:dc:
c8:5f:91:42:fd:b9:f4:c1:da:52:14:0b:09:73:fe:93:02:6f:
96:f2:0f:db:ac:2a:69:9d:9c:c4:57:fd:fe:2e:eb:d2:8c:26:
c7:e0:9b:c3
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEBRdFKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDYx
NDE3MTc0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDhkNmY0NmMxZDEy
YmNjYzFmNGQ3OGZhZmFmOTA0NWIxN2M5MGZhZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJmbhJn1s/D+UIg9HchQllui7QHLCYquTI+YbCZac6zImWyK
L5ADP87BdLfcpJpme/a9DCI9fUsBbHAlJCVGEGVW2mJkxlDN23fZ12plALDVXQKo
8UxlPVyuH72/9P+5bQmM7DD0vC6LK2EKI4raAHInimERwQLjkDbT0Y7aSQ74pmtU
r0s9Zm9n8Kooj6pJmR3dAZQuAmwP8sUluy5FsqvcKp679Vnh9G+qQhDlkpOhF5Mm
tBK8kiFilHZ6i/MogSwVIVHN7QjYm44yZsJPs9zMzdz9/p086Yuy7KEt1BdRQ/Ub
4zUfvI2UrBgBpfTpTGnqYNUCxYv+Fu7AQKlM7mECAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBRI1vRsHRK8zB9NePr6+QRbF8kPrzAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L1NOYjBiQjBTdk13ZlRYajYtdmtFV3hmSkQ2OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQEjQtwAwQAjQt4MA0GCSqGSIb3
DQEBCwUAA4IBAQCP5/+tPWoaRK3iHGtCfSjZt6bQhEi0s+xGlfjBACFopELfD0NS
xeSPdjuMumB0UF5mFcPv71DJmL5OI8CqADCVgSew1FOm03c8IEUQV30TwtHXh5Zn
XMg13F3dIehmafV+RCv1V2dv5cZadcRaRbjMMfLtYi4YYMoHjxTu6CuWcByB0a3k
zi3XiN2f26lZJywa/VMekJKlZ/7ur2B0yDwVwjlGeheomj4z/ymPGuHozNdBBPsm
9F53tY92KWZsKM1KVttVxxYoyDaO1xJFIPvrHMqvUlhtytzIX5FC/bn0wdpSFAsJ
c/6TAm+W8g/brCppnZzEV/3+LuvSjCbH4JvD
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-fra.rpki-client.org