Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ZxRzP0ROpTg8uFH9eI9X-FpFcX8.roa
File: ZxRzP0ROpTg8uFH9eI9X-FpFcX8.roa (raw, json)
Hash identifier: eSOBRRPxTmLVJqC+HKySO6Bz0fXmclVmu/v3cVThbCQ=
Subject key identifier: 67:14:73:3F:44:4E:A5:38:3C:B8:51:FD:78:8F:57:F8:5A:45:71:7F
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 02F833A3
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ZxRzP0ROpTg8uFH9eI9X-FpFcX8.roa
Signing time: Tue 08 Feb 2022 10:53:58 +0000
ROA not before: Tue 08 Feb 2022 10:53:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64267
IP address blocks: 141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.66.0/23 maxlen: 24
141.11.76.0/22 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.3.0/24 maxlen: 24
141.11.10.0/24 maxlen: 24
141.11.23.0/24 maxlen: 24
141.11.24.0/24 maxlen: 24
141.11.29.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49820579 (0x2f833a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Feb 8 10:53:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6714733f444ea5383cb851fd788f57f85a45717f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:30:67:22:28:3c:8f:99:bf:f1:28:f4:9e:a8:
dd:f1:02:6f:d6:ad:1e:e1:71:f1:d2:f3:db:e7:3b:
8b:52:c3:15:69:52:d7:9c:5b:f5:23:96:ed:16:f4:
64:e8:a7:5a:dd:c0:fc:52:71:58:95:f8:78:74:48:
11:db:32:d5:bb:88:f4:db:94:b6:f2:c5:31:81:b7:
9f:3d:59:0c:e4:9b:19:a6:ea:b3:15:cb:97:62:25:
2e:49:f2:7c:5f:d6:e8:01:46:03:f3:ce:ca:c7:f4:
a9:7c:aa:e8:a5:86:3d:5a:76:d5:58:5a:59:36:d8:
53:ed:fa:3f:b0:16:6d:15:85:c9:9c:5e:fe:73:ac:
cd:63:13:59:76:2a:ca:43:c7:4c:99:25:df:db:d8:
85:34:a2:4e:5d:57:7d:75:c3:e8:26:66:62:b2:bd:
7c:3f:5a:f8:0a:c4:3c:5a:45:f0:b8:9b:06:de:64:
bd:1e:31:3e:64:df:d8:01:f8:07:a5:3c:48:8d:46:
e2:19:e9:da:1d:e2:a7:61:89:2f:83:f2:c2:3e:df:
c2:83:ab:8b:51:aa:f9:44:33:fb:b1:13:82:2d:26:
ae:b8:a6:82:4d:da:7a:3f:70:d9:1d:ca:9d:58:07:
0b:af:e4:58:1f:6a:69:28:4d:da:11:a7:c7:bd:bb:
c1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:14:73:3F:44:4E:A5:38:3C:B8:51:FD:78:8F:57:F8:5A:45:71:7F
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ZxRzP0ROpTg8uFH9eI9X-FpFcX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.2.0/23
141.11.10.0/24
141.11.23.0-141.11.25.255
141.11.29.0/24
141.11.46.0/23
141.11.66.0/23
141.11.76.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:86:9b:0a:f9:e4:dc:40:67:9f:8e:26:5e:5c:63:09:a3:ac:
a9:4c:85:14:c1:02:02:97:e5:f1:98:c6:a9:35:7c:df:43:45:
9b:54:7d:72:9a:7b:07:f7:20:29:05:50:cf:b7:93:7f:ab:4e:
8a:40:a5:e6:63:41:76:08:c4:41:7d:cf:46:44:39:ae:e0:69:
0b:10:37:96:0e:f0:48:19:7d:0c:9b:38:c4:03:25:e2:ec:72:
5a:78:eb:1a:40:44:5d:5a:6c:62:bd:ac:3b:2d:6e:72:df:f5:
7f:55:c6:2b:c4:17:1d:5d:62:c6:fd:5b:1f:65:a0:e2:0f:c4:
f2:30:6f:42:a6:ad:6e:24:01:38:19:b0:93:0f:61:55:e2:3e:
fd:d5:b6:3d:82:90:89:83:1b:a2:d1:24:84:1b:b7:dc:7b:5c:
ce:20:c8:1f:c0:91:9e:f3:ec:06:37:b0:e0:07:d8:d6:79:5e:
c4:67:b6:84:ca:1d:64:81:83:f1:23:b8:ce:ad:2f:40:ff:da:
78:a7:3f:82:68:c6:c4:a6:c8:3b:d0:bd:a4:5c:70:a3:e2:f5:
69:7c:6e:10:d3:d9:99:66:82:6b:d6:63:2d:90:a3:15:31:e4:
e8:8f:8f:53:19:d5:d7:9d:de:46:cf:9f:8d:80:6f:6f:e0:af:
c2:85:16:fe
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgIEAvgzozANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDIw
ODEwNTM1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjcxNDczM2Y0NDRl
YTUzODNjYjg1MWZkNzg4ZjU3Zjg1YTQ1NzE3ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKgwZyIoPI+Zv/Eo9J6o3fECb9atHuFx8dLz2+c7i1LDFWlS
15xb9SOW7Rb0ZOinWt3A/FJxWJX4eHRIEdsy1buI9NuUtvLFMYG3nz1ZDOSbGabq
sxXLl2IlLknyfF/W6AFGA/POysf0qXyq6KWGPVp21VhaWTbYU+36P7AWbRWFyZxe
/nOszWMTWXYqykPHTJkl39vYhTSiTl1XfXXD6CZmYrK9fD9a+ArEPFpF8LibBt5k
vR4xPmTf2AH4B6U8SI1G4hnp2h3ip2GJL4Pywj7fwoOri1Gq+UQz+7ETgi0mrrim
gk3aej9w2R3KnVgHC6/kWB9qaShN2hGnx727wasCAwEAAaOCAjUwggIxMB0GA1Ud
DgQWBBRnFHM/RE6lODy4Uf14j1f4WkVxfzAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L1p4UnpQMFJPcFRnOHVGSDllSTlYLUZwRmNYOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBL
BggrBgEFBQcBBwEB/wQ8MDowOAQCAAEwMgMEAY0LAgMEAI0LCjAMAwQAjQsXAwQB
jQsYAwQAjQsdAwQBjQsuAwQBjQtCAwQCjQtMMA0GCSqGSIb3DQEBCwUAA4IBAQB8
hpsK+eTcQGefjiZeXGMJo6ypTIUUwQICl+XxmMapNXzfQ0WbVH1ymnsH9yApBVDP
t5N/q06KQKXmY0F2CMRBfc9GRDmu4GkLEDeWDvBIGX0MmzjEAyXi7HJaeOsaQERd
Wmxivaw7LW5y3/V/VcYrxBcdXWLG/VsfZaDiD8TyMG9Cpq1uJAE4GbCTD2FV4j79
1bY9gpCJgxui0SSEG7fce1zOIMgfwJGe8+wGN7DgB9jWeV7EZ7aEyh1kgYPxI7jO
rS9A/9p4pz+CaMbEpsg70L2kXHCj4vVpfG4Q09mZZoJr1mMtkKMVMeToj49TGdXX
nd5Gz5+NgG9v4K/ChRb+
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-fra.rpki-client.org