Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/gneRwQaC9GijQQS2TFmrgVABFPU.roa
File: gneRwQaC9GijQQS2TFmrgVABFPU.roa (raw, json)
Hash identifier: 02kkxPWJWXY6N4SZRjoOml1pr8ByEekcnIvDl8szddQ=
Subject key identifier: 82:77:91:C1:06:82:F4:68:A3:41:04:B6:4C:59:AB:81:50:01:14:F5
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 05297D4C
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/gneRwQaC9GijQQS2TFmrgVABFPU.roa
Signing time: Mon 20 Jun 2022 12:28:44 +0000
ROA not before: Mon 20 Jun 2022 12:28:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8708
IP address blocks: 141.11.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86605132 (0x5297d4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jun 20 12:28:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=827791c10682f468a34104b64c59ab81500114f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ee:4b:b7:6d:b9:a4:64:5c:8b:19:12:9b:7f:
30:c9:70:e0:ab:60:fe:ca:1e:2a:70:d8:6e:50:a0:
f4:41:0c:03:6f:e1:76:3c:a4:87:a1:83:e1:46:7a:
f1:94:8b:4e:65:67:a3:f2:20:a7:2d:26:c2:57:d9:
7f:6b:87:56:61:fb:99:39:b1:9b:03:88:eb:1b:28:
73:89:ab:0d:1e:c3:d5:b4:02:99:1c:03:c2:32:a7:
e8:42:ad:fd:54:88:8a:b4:32:fc:a6:82:0b:04:3b:
87:8e:11:c4:3f:ec:67:7b:e2:3e:45:8a:a5:9c:c9:
df:62:0b:30:e4:d9:43:a8:25:17:c2:52:07:be:57:
c5:cf:db:af:c7:14:77:93:24:8e:8e:36:c7:79:ab:
1c:20:42:bc:cb:05:30:4b:2e:04:ff:3c:41:82:45:
11:c6:9b:d6:b5:d4:54:80:73:be:f6:ac:9f:b7:ea:
45:7a:8a:c3:6f:52:d0:f9:b0:2e:41:34:29:50:84:
9e:40:ec:ae:0e:91:7b:cf:af:f5:6b:9c:cf:7e:50:
3c:db:f4:e2:ff:a6:fe:8c:99:64:ea:ef:ca:2a:77:
86:32:94:46:fb:b0:94:e4:f8:ab:c1:7a:b7:48:c6:
73:95:3a:ca:a4:16:60:00:2a:2e:7c:5c:ab:b4:5d:
11:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:77:91:C1:06:82:F4:68:A3:41:04:B6:4C:59:AB:81:50:01:14:F5
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/gneRwQaC9GijQQS2TFmrgVABFPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.179.0/24
Signature Algorithm: sha256WithRSAEncryption
83:62:56:dc:af:0e:a3:4d:b0:53:da:85:1e:77:47:e7:7c:08:
2c:9d:d3:14:1d:cc:8f:c2:0a:d6:8d:46:51:ba:d0:6b:e7:24:
3c:06:79:13:24:81:8c:eb:54:01:3a:23:5c:5d:5f:c1:f6:99:
67:4f:e0:d3:30:9b:bf:17:0f:a0:f5:ad:72:6f:72:65:f8:be:
75:5b:3b:d9:9a:60:40:1b:21:e5:a7:8c:47:ee:31:77:b0:cf:
fd:b4:89:7c:9d:b6:fa:86:be:a8:cc:a6:2e:1d:f7:5d:5d:0e:
b6:b8:27:38:d7:ad:ff:02:67:d8:61:3a:b6:c1:cf:fb:71:d9:
ff:3a:a1:73:e9:e4:fd:b5:2d:4f:83:11:15:09:78:a5:79:89:
8e:22:91:69:db:33:f0:0a:c0:88:c4:75:4b:df:ef:06:97:e4:
a6:20:d4:76:07:ee:b3:bd:c5:11:e0:9d:5e:79:6d:19:0f:b9:
6c:8e:5f:44:a4:98:18:30:ec:ce:20:3d:34:fc:f3:77:75:52:
83:93:bd:9d:fc:b9:2a:54:30:91:cc:99:8b:30:b9:38:b4:ef:
e5:04:d2:b0:8b:96:e6:07:d3:bb:0b:c4:6b:e5:18:2a:17:1d:
eb:f4:91:e5:01:fa:22:91:e5:c6:de:c5:6b:38:95:ee:46:3c:
19:98:69:4c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBSl9TDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDYy
MDEyMjg0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODI3NzkxYzEwNjgy
ZjQ2OGEzNDEwNGI2NGM1OWFiODE1MDAxMTRmNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJDuS7dtuaRkXIsZEpt/MMlw4Ktg/soeKnDYblCg9EEMA2/h
djykh6GD4UZ68ZSLTmVno/Igpy0mwlfZf2uHVmH7mTmxmwOI6xsoc4mrDR7D1bQC
mRwDwjKn6EKt/VSIirQy/KaCCwQ7h44RxD/sZ3viPkWKpZzJ32ILMOTZQ6glF8JS
B75Xxc/br8cUd5Mkjo42x3mrHCBCvMsFMEsuBP88QYJFEcab1rXUVIBzvvasn7fq
RXqKw29S0PmwLkE0KVCEnkDsrg6Re8+v9Wucz35QPNv04v+m/oyZZOrvyip3hjKU
RvuwlOT4q8F6t0jGc5U6yqQWYAAqLnxcq7RdEZUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSCd5HBBoL0aKNBBLZMWauBUAEU9TAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L2duZVJ3UWFDOUdpalFRUzJURm1yZ1ZBQkZQVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI0LszANBgkqhkiG9w0BAQsFAAOC
AQEAg2JW3K8Oo02wU9qFHndH53wILJ3TFB3Mj8IK1o1GUbrQa+ckPAZ5EySBjOtU
ATojXF1fwfaZZ0/g0zCbvxcPoPWtcm9yZfi+dVs72ZpgQBsh5aeMR+4xd7DP/bSJ
fJ22+oa+qMymLh33XV0OtrgnONet/wJn2GE6tsHP+3HZ/zqhc+nk/bUtT4MRFQl4
pXmJjiKRadsz8ArAiMR1S9/vBpfkpiDUdgfus73FEeCdXnltGQ+5bI5fRKSYGDDs
ziA9NPzzd3VSg5O9nfy5KlQwkcyZizC5OLTv5QTSsIuW5gfTuwvEa+UYKhcd6/SR
5QH6IpHlxt7FaziV7kY8GZhpTA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:17 2023 by rpki-client on console-fra.rpki-client.org