Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/_ecHpePs_D9tAB-2QP_DE4jZHSQ.roa
File: _ecHpePs_D9tAB-2QP_DE4jZHSQ.roa (raw, json)
Hash identifier: OBnMgAhkJnTcdHBjpyX/4K4EpZM7sz+Yu9rzQYfBkVM=
Subject key identifier: FD:E7:07:A5:E3:EC:FC:3F:6D:00:1F:B6:40:FF:C3:13:88:D9:1D:24
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 018470A9214FA16F7E9FAEA2822563B18DC0
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/_ecHpePs_D9tAB-2QP_DE4jZHSQ.roa
Signing time: Sun 13 Nov 2022 11:04:03 +0000
ROA not before: Sun 13 Nov 2022 11:04:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 141.11.168.0/23 maxlen: 24
141.11.88.0/23 maxlen: 24
141.11.90.0/23 maxlen: 24
141.11.96.0/24 maxlen: 24
141.11.102.0/24 maxlen: 24
141.11.5.0/24 maxlen: 24
141.11.228.0/23 maxlen: 24
141.11.26.0/24 maxlen: 24
141.11.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:70:a9:21:4f:a1:6f:7e:9f:ae:a2:82:25:63:b1:8d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 13 11:04:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fde707a5e3ecfc3f6d001fb640ffc31388d91d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:72:96:28:5a:a5:de:95:a5:2e:2b:66:2c:f2:
3b:b6:33:07:a0:fb:c8:12:39:35:3d:d6:26:19:dd:
ab:c7:e2:a9:b9:24:93:85:19:d9:b4:08:bb:55:b8:
cd:af:98:98:9c:51:15:a3:39:ea:64:2e:65:52:e9:
0e:22:7c:5c:60:36:a0:dd:86:bb:ed:81:d6:f9:a7:
83:9a:90:99:90:1f:f6:10:8e:cc:82:b0:11:ae:fb:
20:5c:6a:a9:bb:61:f0:5e:c8:de:27:f5:2b:64:da:
79:42:5b:46:53:eb:ef:62:9c:8e:bd:9a:15:fc:7c:
43:91:80:87:b0:8f:67:55:8d:a9:bf:7c:45:ba:c8:
97:08:45:69:74:95:36:b9:2b:ae:aa:88:81:ff:f4:
66:1b:ad:6d:3e:bc:4b:89:ee:4b:2d:38:9a:ca:d6:
ba:a3:c0:54:cc:14:2d:e7:be:a6:14:b3:fa:1e:45:
a0:d5:42:a2:0a:e1:e3:9d:72:6e:1c:58:c2:9c:03:
c0:ef:74:17:f0:57:f4:3e:0e:d5:01:fd:ea:93:41:
c9:2f:5b:6a:f4:77:c6:82:86:f2:f9:af:f8:8f:bc:
3d:07:78:2e:8c:e4:3e:c7:11:1a:7c:f9:93:f5:2b:
7f:21:4c:07:60:56:cf:ae:06:61:a1:61:69:f0:54:
ee:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E7:07:A5:E3:EC:FC:3F:6D:00:1F:B6:40:FF:C3:13:88:D9:1D:24
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/_ecHpePs_D9tAB-2QP_DE4jZHSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
141.11.26.0/24
141.11.34.0/24
141.11.88.0/22
141.11.96.0/24
141.11.102.0/24
141.11.168.0/23
141.11.228.0/23
Signature Algorithm: sha256WithRSAEncryption
87:c5:a8:d3:07:6f:87:14:29:ba:18:ca:bc:83:d5:91:68:8a:
63:99:8c:5f:cb:a6:bc:5b:94:b8:82:3c:bb:5f:ac:03:02:19:
8d:82:0c:96:66:5c:ec:e1:3e:48:58:10:59:a8:62:1a:9e:d3:
25:b2:ab:5c:e7:cb:d1:7f:28:25:0e:69:a1:81:c2:94:37:e4:
94:5e:0a:9d:0f:4d:a0:5e:db:c5:f8:4a:c9:ce:5e:14:76:3c:
90:af:dc:98:24:2f:9c:26:45:8e:01:62:a0:4f:30:56:90:c9:
bd:57:bf:54:6f:17:27:e6:d2:12:15:7c:db:b0:84:3d:d4:1b:
e4:5b:85:c4:e0:08:6e:74:a6:50:1e:c8:eb:d0:a5:db:4b:94:
42:6f:f7:d4:16:0d:08:05:9e:93:6d:32:b9:80:2b:f3:1e:d5:
47:9e:ca:24:fd:62:b3:12:a5:00:9e:e1:a7:99:34:28:81:82:
01:2d:eb:f7:9d:b7:c8:be:83:fa:95:cb:09:af:1d:71:3f:35:
71:93:c6:25:a1:c0:5a:03:06:b6:a4:f2:8d:24:17:88:25:c8:
1e:2c:21:1f:36:c8:4a:17:11:da:48:cf:56:d8:57:f8:03:29:
30:5d:97:c9:2e:88:c2:34:43:5b:99:93:c4:d0:43:87:5b:94:
f1:07:65:e0
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYRwqSFPoW9+n66igiVjsY3AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIxMTEzMTEwNDAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGU3MDdhNWUzZWNmYzNmNmQwMDFmYjY0MGZmYzMxMzg4ZDkxZDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXKWKFql3pWlLitmLPI7tjMHoPvI
Ejk1PdYmGd2rx+KpuSSThRnZtAi7VbjNr5iYnFEVoznqZC5lUukOInxcYDag3Ya7
7YHW+aeDmpCZkB/2EI7MgrARrvsgXGqpu2HwXsjeJ/UrZNp5QltGU+vvYpyOvZoV
/HxDkYCHsI9nVY2pv3xFusiXCEVpdJU2uSuuqoiB//RmG61tPrxLie5LLTiayta6
o8BUzBQt576mFLP6HkWg1UKiCuHjnXJuHFjCnAPA73QX8Ff0Pg7VAf3qk0HJL1tq
9HfGgoby+a/4j7w9B3gujOQ+xxEafPmT9St/IUwHYFbPrgZhoWFp8FTuDQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFP3nB6Xj7Pw/bQAftkD/wxOI2R0kMB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvX2VjSHBlUHNfRDl0QUItMlFQX0RFNGpaSFNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAjQsFAwQA
jQsaAwQAjQsiAwQCjQtYAwQAjQtgAwQAjQtmAwQBjQuoAwQBjQvkMA0GCSqGSIb3
DQEBCwUAA4IBAQCHxajTB2+HFCm6GMq8g9WRaIpjmYxfy6a8W5S4gjy7X6wDAhmN
ggyWZlzs4T5IWBBZqGIantMlsqtc58vRfyglDmmhgcKUN+SUXgqdD02gXtvF+ErJ
zl4UdjyQr9yYJC+cJkWOAWKgTzBWkMm9V79Ubxcn5tISFXzbsIQ91BvkW4XE4Ahu
dKZQHsjr0KXbS5RCb/fUFg0IBZ6TbTK5gCvzHtVHnsok/WKzEqUAnuGnmTQogYIB
Lev3nbfIvoP6lcsJrx1xPzVxk8YlocBaAwa2pPKNJBeIJcgeLCEfNshKFxHaSM9W
2Ff4AykwXZfJLojCNENbmZPE0EOHW5TxB2Xg
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-fra.rpki-client.org