Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/YAmOrmt-FnNtxR-8tIH7ekexm9o.roa
File: YAmOrmt-FnNtxR-8tIH7ekexm9o.roa (raw, json)
Hash identifier: yY6A9JMTS62emQ775qyUACaTnJN2dIpEMbQdI+jOZs8=
Subject key identifier: 60:09:8E:AE:6B:7E:16:73:6D:C5:1F:BC:B4:81:FB:7A:47:B1:9B:DA
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 018202DFFDC1BAC0BD8A0E8F680916F79F49
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/YAmOrmt-FnNtxR-8tIH7ekexm9o.roa
Signing time: Fri 15 Jul 2022 17:20:10 +0000
ROA not before: Fri 15 Jul 2022 17:20:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399641
IP address blocks: 141.11.177.0/24 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:02:df:fd:c1:ba:c0:bd:8a:0e:8f:68:09:16:f7:9f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 15 17:20:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60098eae6b7e16736dc51fbcb481fb7a47b19bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:70:f6:ae:9c:c4:d7:72:bb:47:f2:ec:36:7c:
72:99:8e:a1:91:a4:07:49:6b:b8:19:d5:d5:2a:f4:
99:e0:77:ef:a9:91:af:78:f3:da:b3:c7:e3:f9:d1:
26:80:b0:47:ac:a1:d5:4a:5a:56:64:35:be:db:23:
80:b7:d9:ad:4c:ed:fd:3f:fc:db:37:24:f9:96:38:
6a:5c:55:0f:25:86:b0:dc:e2:f2:14:96:c4:1e:04:
99:3c:a4:bc:8e:e9:d8:52:ea:a8:a8:99:80:a6:73:
2c:2b:8c:b7:33:62:f4:13:ce:53:dd:4f:62:88:b2:
20:1a:c2:71:e5:51:b0:cf:1a:f1:8b:a2:34:a8:cb:
c6:63:1f:f5:82:0e:ee:73:f3:5a:34:fa:76:6c:9b:
dc:8e:30:88:8b:b4:6e:ae:27:32:ff:d0:57:37:74:
2e:99:e2:23:d0:de:ff:ff:b6:97:e5:26:64:0f:37:
18:d9:1c:c2:80:45:e3:78:08:e8:ee:ab:cc:c7:72:
a7:70:8a:7f:17:64:40:ba:a0:6c:c7:5b:c6:9f:8c:
64:18:03:43:c4:e0:95:2a:c6:46:79:15:73:62:35:
5e:3f:26:de:67:c2:b6:0f:59:a3:fc:e0:3e:cc:e3:
29:85:bf:c4:5b:de:fa:81:9f:27:10:a7:75:7c:da:
40:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:09:8E:AE:6B:7E:16:73:6D:C5:1F:BC:B4:81:FB:7A:47:B1:9B:DA
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/YAmOrmt-FnNtxR-8tIH7ekexm9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.30.0/24
141.11.176.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:ac:b9:e2:81:13:e8:30:39:35:9f:7e:51:c2:42:be:85:db:
31:1e:b0:2e:e4:6a:eb:e1:45:ae:6e:f0:c3:6f:33:b3:6b:72:
58:62:3f:61:de:40:25:70:2f:ea:21:a6:51:5e:35:51:9f:38:
34:2a:9d:10:ef:61:6f:fe:c2:8c:72:92:bd:f3:39:dc:91:0f:
6e:52:ad:74:3f:c7:8d:79:bb:25:2e:84:0d:30:b9:f1:46:c3:
ef:be:5f:c6:3a:21:f6:f3:ad:c1:f0:86:83:cf:a8:27:04:ae:
2f:d8:b4:b4:10:08:51:a1:72:f4:d0:68:a2:d3:c6:d6:dc:9d:
dc:a0:f7:99:45:d1:86:06:4f:bf:2d:be:86:45:bd:94:31:9e:
2e:d1:e2:0e:40:eb:35:8f:c6:b3:be:b6:62:dd:6e:9b:9a:16:
bc:49:ad:30:27:ff:28:aa:9a:be:95:0b:1f:18:3d:f4:6b:bf:
8a:f4:c2:03:6b:2d:17:4e:15:59:a4:05:c9:74:af:65:0b:a8:
8b:e4:8d:1d:15:c3:8e:b3:c4:8d:4a:84:f5:d5:cd:7a:ce:1d:
12:9b:07:c8:3a:71:3b:fd:2b:2e:c0:8a:9d:fe:dd:03:ab:01:
20:69:d4:51:71:b1:71:03:9c:81:cb:f8:25:dd:05:a5:29:3e:
de:b6:c4:32
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYIC3/3BusC9ig6PaAkW959JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIwNzE1MTcyMDEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDA5OGVhZTZiN2UxNjczNmRjNTFmYmNiNDgxZmI3YTQ3YjE5YmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3D2rpzE13K7R/LsNnxymY6hkaQH
SWu4GdXVKvSZ4HfvqZGvePPas8fj+dEmgLBHrKHVSlpWZDW+2yOAt9mtTO39P/zb
NyT5ljhqXFUPJYaw3OLyFJbEHgSZPKS8junYUuqoqJmApnMsK4y3M2L0E85T3U9i
iLIgGsJx5VGwzxrxi6I0qMvGYx/1gg7uc/NaNPp2bJvcjjCIi7Ruricy/9BXN3Qu
meIj0N7//7aX5SZkDzcY2RzCgEXjeAjo7qvMx3KncIp/F2RAuqBsx1vGn4xkGAND
xOCVKsZGeRVzYjVePybeZ8K2D1mj/OA+zOMphb/EW976gZ8nEKd1fNpAKQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGAJjq5rfhZzbcUfvLSB+3pHsZvaMB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvWUFtT3JtdC1Gbk50eFItOHRJSDdla2V4bTlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjQseAwQB
jQuwMA0GCSqGSIb3DQEBCwUAA4IBAQA/rLnigRPoMDk1n35RwkK+hdsxHrAu5Grr
4UWubvDDbzOza3JYYj9h3kAlcC/qIaZRXjVRnzg0Kp0Q72Fv/sKMcpK98znckQ9u
Uq10P8eNebslLoQNMLnxRsPvvl/GOiH2863B8IaDz6gnBK4v2LS0EAhRoXL00Gii
08bW3J3coPeZRdGGBk+/Lb6GRb2UMZ4u0eIOQOs1j8azvrZi3W6bmha8Sa0wJ/8o
qpq+lQsfGD30a7+K9MIDay0XThVZpAXJdK9lC6iL5I0dFcOOs8SNSoT11c16zh0S
mwfIOnE7/SsuwIqd/t0DqwEgadRRcbFxA5yBy/gl3QWlKT7etsQy
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org