Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/cdZgBF3-ySqIK6k-CElpt8CYa3k.roa
File: cdZgBF3-ySqIK6k-CElpt8CYa3k.roa (raw, json)
Hash identifier: Fj4Xq5KcRbCm+hOi712KkOGvuO7nveFyaOQv76U5kBQ=
Subject key identifier: 71:D6:60:04:5D:FE:C9:2A:88:2B:A9:3E:08:49:69:B7:C0:98:6B:79
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 039CBDAA
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/cdZgBF3-ySqIK6k-CElpt8CYa3k.roa
Signing time: Fri 25 Mar 2022 11:23:22 +0000
ROA not before: Fri 25 Mar 2022 11:23:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 141.11.160.0/24 maxlen: 24
141.11.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60603818 (0x39cbdaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Mar 25 11:23:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71d660045dfec92a882ba93e084969b7c0986b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0a:07:1d:d4:0c:d4:0a:b9:af:64:0d:78:5e:
d1:eb:33:fd:6e:dc:fb:15:d1:52:d8:e7:1b:32:b0:
01:36:d2:f9:5b:34:a1:bb:d7:ce:48:e4:b8:43:dc:
df:07:90:fc:7d:54:e4:73:c8:5a:21:1c:2a:cd:19:
32:36:7f:eb:2f:b0:23:ad:e7:7c:46:28:0a:a5:21:
04:ce:d9:62:94:4a:4c:fb:40:bf:44:c5:28:09:00:
98:f2:7e:fc:b6:9b:9d:56:62:02:1d:15:88:89:92:
21:10:0c:80:76:61:9f:36:a1:ac:33:28:b4:58:a6:
ea:03:b5:fa:a0:35:5d:89:39:e7:a4:f1:0e:c0:ec:
24:ce:e3:4b:b0:ef:28:29:a9:28:f1:1b:8b:32:b8:
f0:4d:f9:54:f1:2f:00:4c:29:9d:17:78:c9:35:0f:
27:90:4d:ee:9d:c0:f4:4e:76:56:ab:f5:99:13:a4:
32:db:45:f4:e6:9d:6b:ee:20:b5:cb:84:19:02:cf:
1f:4d:30:46:9b:8b:7d:8f:10:d6:8e:6f:77:f9:4d:
b2:3e:d2:b8:e5:d8:10:5c:a6:d8:24:0a:7f:5f:88:
1d:d0:37:e0:75:db:5e:a1:43:2b:a6:ec:08:34:6b:
7b:de:9a:97:73:cf:af:51:b7:4b:12:11:fa:92:f5:
67:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D6:60:04:5D:FE:C9:2A:88:2B:A9:3E:08:49:69:B7:C0:98:6B:79
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/cdZgBF3-ySqIK6k-CElpt8CYa3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.160.0/24
141.11.185.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:5a:a0:9d:ab:36:be:31:2a:62:14:4e:d2:ba:d6:25:37:48:
f1:02:98:93:69:b0:4a:b8:a0:e8:56:6c:ae:d0:12:84:68:8e:
39:d6:b5:c0:38:7e:9d:bd:fd:7c:c1:be:de:93:97:09:9e:fb:
00:1e:ab:0a:38:17:3c:2f:3a:12:7b:b3:e3:4c:00:c9:df:1e:
70:82:8f:3d:c6:33:e0:35:aa:d8:b4:0a:51:20:a4:9b:9a:35:
ff:bc:2c:48:de:e4:31:34:4b:1a:6b:48:c5:82:e4:8d:63:3e:
7a:3c:26:23:69:9c:87:8f:e1:99:4e:ac:4c:27:77:db:88:a1:
3e:db:6a:1e:0f:83:19:df:7b:56:c8:d6:11:7b:ad:59:63:3c:
60:c6:fc:40:51:26:0d:d2:0d:b9:91:97:e7:f6:56:fa:00:7e:
5c:58:54:a8:c6:7b:38:40:e8:a9:ed:fa:67:8e:94:9f:38:11:
e4:c2:14:7e:cb:56:8d:93:ca:79:b9:b3:0d:19:0c:81:8f:24:
7f:28:89:61:bd:7d:cc:dd:1d:46:b2:cf:58:fd:c1:8e:06:6e:
99:19:89:35:d5:9e:d8:35:66:dd:88:03:54:b2:33:f5:d1:c3:
b9:d1:b2:d9:50:1c:6d:62:d4:33:e9:a3:49:9d:9d:54:92:0d:
ca:58:cd:60
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEA5y9qjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDMy
NTExMjMyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzFkNjYwMDQ1ZGZl
YzkyYTg4MmJhOTNlMDg0OTY5YjdjMDk4NmI3OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK0KBx3UDNQKua9kDXhe0esz/W7c+xXRUtjnGzKwATbS+Vs0
obvXzkjkuEPc3weQ/H1U5HPIWiEcKs0ZMjZ/6y+wI63nfEYoCqUhBM7ZYpRKTPtA
v0TFKAkAmPJ+/LabnVZiAh0ViImSIRAMgHZhnzahrDMotFim6gO1+qA1XYk556Tx
DsDsJM7jS7DvKCmpKPEbizK48E35VPEvAEwpnRd4yTUPJ5BN7p3A9E52Vqv1mROk
MttF9Oada+4gtcuEGQLPH00wRpuLfY8Q1o5vd/lNsj7SuOXYEFym2CQKf1+IHdA3
4HXbXqFDK6bsCDRre96al3PPr1G3SxIR+pL1Z40CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRx1mAEXf7JKogrqT4ISWm3wJhreTAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L2NkWmdCRjMteVNxSUs2ay1DRWxwdDhDWWEzay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAI0LoAMEAI0LuTANBgkqhkiG9w0B
AQsFAAOCAQEAjlqgnas2vjEqYhRO0rrWJTdI8QKYk2mwSrig6FZsrtAShGiOOda1
wDh+nb39fMG+3pOXCZ77AB6rCjgXPC86Enuz40wAyd8ecIKPPcYz4DWq2LQKUSCk
m5o1/7wsSN7kMTRLGmtIxYLkjWM+ejwmI2mch4/hmU6sTCd324ihPttqHg+DGd97
VsjWEXutWWM8YMb8QFEmDdINuZGX5/ZW+gB+XFhUqMZ7OEDoqe36Z46UnzgR5MIU
fstWjZPKebmzDRkMgY8kfyiJYb19zN0dRrLPWP3BjgZumRmJNdWe2DVm3YgDVLIz
9dHDudGy2VAcbWLUM+mjSZ2dVJINyljNYA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-fra.rpki-client.org