Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/aI9Tu3CywmEl9fmSxhshKuVfINo.roa
File: aI9Tu3CywmEl9fmSxhshKuVfINo.roa (raw, json)
Hash identifier: ALcEhmfL87j8nVE0xCnw+XCQmaQMQbuH+pVIpGpaxMc=
Subject key identifier: 68:8F:53:BB:70:B2:C2:61:25:F5:F9:92:C6:1B:21:2A:E5:5F:20:DA
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 02F2CB59
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/aI9Tu3CywmEl9fmSxhshKuVfINo.roa
Signing time: Mon 07 Feb 2022 09:27:57 +0000
ROA not before: Mon 07 Feb 2022 09:27:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209181
IP address blocks: 141.11.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49466201 (0x2f2cb59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Feb 7 09:27:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=688f53bb70b2c26125f5f992c61b212ae55f20da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:31:1a:37:8c:71:01:d3:cb:fb:24:05:14:8e:
93:8a:29:30:3c:18:12:91:72:45:6c:cc:03:34:2e:
77:a5:ec:e8:74:c5:1e:8d:ca:67:dc:64:15:ea:e2:
cd:68:93:57:5e:a6:0b:f0:00:90:90:0e:25:53:ce:
0d:d0:d3:0e:07:55:55:b5:2d:d0:40:7e:17:81:58:
a6:4a:c8:ac:d6:ce:6e:2d:3b:27:f1:34:d6:e7:0d:
8f:35:7b:2e:91:c5:0f:54:c9:86:2f:6e:81:1a:f4:
b9:3f:ab:72:d0:d3:00:fc:89:d3:de:64:97:bf:c4:
84:0e:6b:99:70:7f:f1:4d:9a:ad:3d:01:35:c7:18:
f8:c5:98:5b:ea:b8:6a:f7:4e:37:19:6d:f3:4c:d4:
01:a2:49:c8:40:0b:74:ba:b3:ba:d4:1c:65:ef:53:
24:23:64:12:d7:33:e3:cb:c1:8f:f0:a4:4a:fe:ea:
3c:54:a1:5a:7c:13:b5:35:ac:24:40:66:c5:ff:45:
38:7e:af:c7:2a:08:94:15:a1:f3:64:16:cb:28:95:
4f:32:8d:30:47:2a:39:46:4d:40:f2:35:72:38:2e:
d3:6e:52:fd:26:54:5a:60:c4:f9:c1:0c:03:06:b4:
0f:aa:34:c9:ef:48:44:e3:e1:8c:d7:2e:a0:2f:cb:
5b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8F:53:BB:70:B2:C2:61:25:F5:F9:92:C6:1B:21:2A:E5:5F:20:DA
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/aI9Tu3CywmEl9fmSxhshKuVfINo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.41.0/24
Signature Algorithm: sha256WithRSAEncryption
75:d8:7d:b7:d2:2e:7a:5e:59:f1:62:89:15:b1:b0:59:50:f4:
4e:98:b4:57:b7:ad:39:0d:2d:d7:b9:a1:32:19:d4:36:69:6c:
51:a7:02:af:63:f4:9e:2c:ee:35:b8:c1:f3:c0:91:35:bb:14:
dc:bc:70:51:0f:6b:2c:c2:0e:03:5e:90:ba:c7:99:e7:ad:bc:
95:c0:07:99:a6:ec:a5:ac:f8:d3:98:7d:23:ca:47:1e:9e:e6:
79:36:da:69:80:7c:ab:52:f9:6b:01:d7:8d:62:8f:5f:6d:33:
e8:8c:da:43:bb:4c:76:8d:c2:37:85:82:07:96:d0:f0:80:f5:
7d:0e:d0:13:aa:e2:45:9f:56:fe:be:66:f0:c0:d3:b8:8a:c8:
1c:6e:6d:03:59:b2:70:e6:74:f0:76:ed:4d:d6:34:0d:5f:e2:
58:03:3b:1a:7d:7d:2b:d7:70:d8:f0:e3:f4:c0:e2:ab:d9:da:
cc:e9:fa:1c:f3:9a:7c:36:7f:95:1b:ac:be:fa:15:87:9d:6f:
c6:41:72:86:f0:1d:24:64:4b:ef:2f:0e:cc:5c:01:b6:52:75:
4a:0c:94:bc:09:ee:8c:d9:f6:d0:22:8a:d5:49:50:1c:c7:fc:
82:8a:dd:90:9f:ba:98:ce:78:dc:2a:7c:8e:f6:eb:f9:93:0b:
6b:3f:31:5f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAvLLWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDIw
NzA5Mjc1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjg4ZjUzYmI3MGIy
YzI2MTI1ZjVmOTkyYzYxYjIxMmFlNTVmMjBkYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJAxGjeMcQHTy/skBRSOk4opMDwYEpFyRWzMAzQud6Xs6HTF
Ho3KZ9xkFerizWiTV16mC/AAkJAOJVPODdDTDgdVVbUt0EB+F4FYpkrIrNbObi07
J/E01ucNjzV7LpHFD1TJhi9ugRr0uT+rctDTAPyJ095kl7/EhA5rmXB/8U2arT0B
NccY+MWYW+q4avdONxlt80zUAaJJyEALdLqzutQcZe9TJCNkEtcz48vBj/CkSv7q
PFShWnwTtTWsJEBmxf9FOH6vxyoIlBWh82QWyyiVTzKNMEcqOUZNQPI1cjgu025S
/SZUWmDE+cEMAwa0D6o0ye9IROPhjNcuoC/LW9MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRoj1O7cLLCYSX1+ZLGGyEq5V8g2jAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L2FJOVR1M0N5d21FbDlmbVN4aHNoS3VWZklOby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI0LKTANBgkqhkiG9w0BAQsFAAOC
AQEAddh9t9Iuel5Z8WKJFbGwWVD0Tpi0V7etOQ0t17mhMhnUNmlsUacCr2P0nizu
NbjB88CRNbsU3LxwUQ9rLMIOA16QuseZ5628lcAHmabspaz405h9I8pHHp7meTba
aYB8q1L5awHXjWKPX20z6IzaQ7tMdo3CN4WCB5bQ8ID1fQ7QE6riRZ9W/r5m8MDT
uIrIHG5tA1mycOZ08HbtTdY0DV/iWAM7Gn19K9dw2PDj9MDiq9nazOn6HPOafDZ/
lRusvvoVh51vxkFyhvAdJGRL7y8OzFwBtlJ1SgyUvAnujNn20CKK1UlQHMf8gord
kJ+6mM543Cp8jvbr+ZMLaz8xXw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org