Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/aLdMi8IcJ6-ZG1NUk_quCa5gTEo.roa
File: aLdMi8IcJ6-ZG1NUk_quCa5gTEo.roa (raw, json)
Hash identifier: 7fxjAUQnFtdimhGe0iXDjo6PmKPybdj+ihiq4wwovqw=
Subject key identifier: 68:B7:4C:8B:C2:1C:27:AF:99:1B:53:54:93:FA:AE:09:AE:60:4C:4A
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0184347F03466052D800C7DCED67D1029BE1
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/aLdMi8IcJ6-ZG1NUk_quCa5gTEo.roa
Signing time: Tue 01 Nov 2022 18:40:49 +0000
ROA not before: Tue 01 Nov 2022 18:40:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 141.11.220.0/22 maxlen: 24
141.11.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:34:7f:03:46:60:52:d8:00:c7:dc:ed:67:d1:02:9b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 1 18:40:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68b74c8bc21c27af991b535493faae09ae604c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:aa:0d:f1:73:7a:04:c0:fe:b5:8d:4f:aa:a9:
14:ca:07:8e:5f:ea:9b:4d:56:49:68:91:cc:e0:09:
62:1a:17:e7:cd:41:51:41:e2:7e:03:1b:89:32:95:
12:9d:08:c5:5f:0e:5e:a1:b4:00:7f:d3:a2:c6:88:
b9:4e:30:ee:96:35:48:e0:cb:fb:cb:ca:63:5f:f9:
00:e8:12:23:83:16:9d:29:4a:a0:ff:0c:e5:93:ad:
81:1b:b9:68:d1:b6:41:30:91:dc:5c:ad:5f:eb:3a:
2b:b4:86:1f:65:78:de:d4:aa:ca:20:ce:7c:07:02:
2f:a0:22:72:2d:b8:95:97:43:d3:ad:64:39:4c:1e:
d5:ab:b4:5d:ce:aa:91:61:7b:c2:05:f7:df:69:9d:
a5:aa:16:a7:93:05:5b:5c:e9:81:ca:ae:bd:fb:2d:
c3:5b:d1:c7:4b:38:76:07:78:ba:d9:9a:c8:aa:fa:
62:29:ea:cc:fc:11:e9:e3:3c:b3:a4:bb:9d:b8:61:
a6:4c:df:2f:3f:d6:6c:07:80:21:8b:3b:a5:b5:6a:
21:bf:97:d9:d8:a1:93:fe:3b:c5:fe:c5:ad:09:37:
a9:0e:db:0d:62:af:73:8f:ba:9d:c1:d5:3a:50:0a:
d4:57:28:f2:b7:7e:40:30:57:5d:1d:07:7f:2b:38:
5c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B7:4C:8B:C2:1C:27:AF:99:1B:53:54:93:FA:AE:09:AE:60:4C:4A
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/aLdMi8IcJ6-ZG1NUk_quCa5gTEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.144.0/22
141.11.220.0/22
Signature Algorithm: sha256WithRSAEncryption
14:ea:9d:bd:ba:81:26:f1:11:28:f1:fc:e6:4b:45:e1:42:39:
97:4f:9c:dd:a8:63:aa:21:98:a3:5f:36:c5:31:40:9e:05:e4:
f9:52:33:ee:b4:72:52:5d:84:c3:07:3a:42:14:1a:ba:3b:fb:
eb:92:cd:9a:0b:cc:73:05:fb:9f:4f:2f:a9:69:c8:3e:ee:3b:
67:58:44:89:40:1b:df:6e:cb:5a:f4:71:8d:c3:b5:9a:1c:28:
e4:20:0b:66:20:06:59:26:92:c3:47:30:95:86:66:cc:47:6d:
d4:fc:93:36:39:7a:ca:ad:7a:5b:d7:64:0f:16:6a:cd:84:10:
cc:3d:22:53:e8:59:c2:a7:6e:7d:09:3b:b0:12:34:87:c4:26:
32:40:f6:aa:5d:9f:19:42:a4:17:55:99:36:c7:07:1a:8b:c7:
5e:94:e2:1d:f8:35:29:49:51:05:9c:7c:dc:51:b9:bf:b4:00:
d8:d9:64:92:10:89:60:26:25:8b:db:15:d7:4f:01:87:54:99:
4a:5b:66:c7:54:2a:20:e2:31:09:44:f6:b8:b1:6a:12:86:34:
32:67:fc:75:d6:bb:70:cb:27:53:ce:08:ce:0e:b7:32:34:13:
89:f0:bb:82:e0:cb:34:71:0a:46:bc:a4:9f:d6:c1:f0:de:58:
a7:28:8a:4a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYQ0fwNGYFLYAMfc7WfRApvhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIxMTAxMTg0MDQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGI3NGM4YmMyMWMyN2FmOTkxYjUzNTQ5M2ZhYWUwOWFlNjA0YzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKoN8XN6BMD+tY1PqqkUygeOX+qb
TVZJaJHM4AliGhfnzUFRQeJ+AxuJMpUSnQjFXw5eobQAf9Oixoi5TjDuljVI4Mv7
y8pjX/kA6BIjgxadKUqg/wzlk62BG7lo0bZBMJHcXK1f6zortIYfZXje1KrKIM58
BwIvoCJyLbiVl0PTrWQ5TB7Vq7RdzqqRYXvCBfffaZ2lqhankwVbXOmByq69+y3D
W9HHSzh2B3i62ZrIqvpiKerM/BHp4zyzpLuduGGmTN8vP9ZsB4AhizultWohv5fZ
2KGT/jvF/sWtCTepDtsNYq9zj7qdwdU6UArUVyjyt35AMFddHQd/Kzhc6QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGi3TIvCHCevmRtTVJP6rgmuYExKMB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvYUxkTWk4SWNKNi1aRzFOVWtfcXVDYTVnVEVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCjQuQAwQC
jQvcMA0GCSqGSIb3DQEBCwUAA4IBAQAU6p29uoEm8REo8fzmS0XhQjmXT5zdqGOq
IZijXzbFMUCeBeT5UjPutHJSXYTDBzpCFBq6O/vrks2aC8xzBfufTy+pacg+7jtn
WESJQBvfbsta9HGNw7WaHCjkIAtmIAZZJpLDRzCVhmbMR23U/JM2OXrKrXpb12QP
FmrNhBDMPSJT6FnCp259CTuwEjSHxCYyQPaqXZ8ZQqQXVZk2xwcai8delOId+DUp
SVEFnHzcUbm/tADY2WSSEIlgJiWL2xXXTwGHVJlKW2bHVCog4jEJRPa4sWoShjQy
Z/x11rtwyydTzgjODrcyNBOJ8LuC4Ms0cQpGvKSf1sHw3linKIpK
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org