Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/i9hRZ7kI07Hayvj0INE7j84IFmU.roa
File: i9hRZ7kI07Hayvj0INE7j84IFmU.roa (raw, json)
Hash identifier: ftbLoBimVsVUPYt98GaS8fxcZA8AuwymctqvyR9pdI0=
Subject key identifier: 8B:D8:51:67:B9:08:D3:B1:DA:CA:F8:F4:20:D1:3B:8F:CE:08:16:65
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 03D7C0D6
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/i9hRZ7kI07Hayvj0INE7j84IFmU.roa
Signing time: Tue 12 Apr 2022 13:14:20 +0000
ROA not before: Tue 12 Apr 2022 13:14:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 141.11.80.0/22 maxlen: 24
141.11.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64471254 (0x3d7c0d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 12 13:14:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8bd85167b908d3b1dacaf8f420d13b8fce081665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:75:f2:f4:b4:91:c0:a5:8c:40:c1:9a:83:79:
fb:68:4a:6e:89:fc:f1:ff:f5:de:6f:c2:90:14:28:
a9:27:e4:db:d5:ce:4e:55:ca:f0:58:93:aa:e3:51:
a3:a8:51:c5:a0:7b:24:60:ea:12:06:d1:2a:77:63:
d2:dd:81:40:16:1c:6f:31:c1:1b:7a:6f:46:1f:72:
e0:d4:56:75:c0:c6:a6:42:3f:4d:45:84:95:50:4a:
22:18:36:2d:c4:65:82:73:99:c6:51:11:51:36:c2:
5f:b8:f4:6d:cc:a2:0c:d6:3d:d2:22:4a:9d:54:cd:
ec:91:86:74:67:f1:36:0a:a5:32:db:cc:ce:fb:bb:
6e:93:8d:3b:68:3b:9c:d6:34:9e:98:47:cd:df:fc:
22:6b:aa:03:57:b9:c0:0c:3a:de:45:a1:93:b2:e1:
8d:a0:f5:4e:4e:ab:55:9c:ae:03:b3:68:68:fb:19:
2d:17:4b:af:48:24:c7:57:cf:ff:6e:ba:9e:f5:21:
97:ab:fe:11:12:0f:83:81:68:13:dc:32:34:7d:e0:
81:23:8d:b4:b6:d2:a7:80:9e:ed:47:9a:ec:62:b1:
9b:6b:af:95:81:44:c8:26:ce:16:49:c1:a3:05:7a:
2e:c1:59:74:3b:6e:e0:af:8f:3f:05:fb:35:b5:16:
2c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D8:51:67:B9:08:D3:B1:DA:CA:F8:F4:20:D1:3B:8F:CE:08:16:65
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/i9hRZ7kI07Hayvj0INE7j84IFmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.32.0/22
141.11.80.0/22
Signature Algorithm: sha256WithRSAEncryption
85:d0:03:01:15:c7:c0:ed:e0:f6:3f:76:51:51:2d:1d:fa:0e:
d0:f1:da:9c:57:a7:b8:0a:d4:c4:1e:4c:bb:52:d9:6d:68:18:
cd:0a:2b:0d:e7:ef:2b:67:63:d8:4e:9f:5a:7d:15:9a:dc:9c:
dd:7a:76:dd:5c:b4:0a:eb:06:d7:ba:6f:b4:e1:4a:ad:1f:f8:
dd:20:d3:ec:65:12:19:d4:f4:2e:0d:20:91:e9:c2:1d:6d:01:
ba:a5:22:3c:d2:ed:b7:15:aa:4a:93:57:ff:f8:0f:50:3b:04:
d0:55:61:a1:67:3a:37:61:92:55:61:8b:9b:43:0f:40:ad:64:
03:3b:f1:98:d2:fc:c1:cb:0f:0a:bf:ab:c0:d8:dc:e7:6e:59:
fc:b7:5b:8b:b5:3c:62:db:b6:c8:d3:2d:44:76:78:17:0d:d4:
c6:b0:ad:1e:a0:de:35:5d:82:e0:14:9f:c3:b3:5c:7d:21:cc:
dd:cf:69:ff:3c:41:a8:4e:46:12:65:9a:4a:ff:d3:b5:e5:c0:
64:49:6b:25:f8:8c:66:aa:dc:e2:f5:69:a3:47:6b:08:8d:b4:
a2:e9:59:2a:d6:b8:56:0e:b3:46:c5:2f:74:dd:94:ca:5c:ba:
23:10:f1:9c:34:90:bc:af:0b:39:e0:66:11:88:1b:be:5f:2e:
15:c8:2e:84
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEA9fA1jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDQx
MjEzMTQyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGJkODUxNjdiOTA4
ZDNiMWRhY2FmOGY0MjBkMTNiOGZjZTA4MTY2NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANR18vS0kcCljEDBmoN5+2hKbon88f/13m/CkBQoqSfk29XO
TlXK8FiTquNRo6hRxaB7JGDqEgbRKndj0t2BQBYcbzHBG3pvRh9y4NRWdcDGpkI/
TUWElVBKIhg2LcRlgnOZxlERUTbCX7j0bcyiDNY90iJKnVTN7JGGdGfxNgqlMtvM
zvu7bpONO2g7nNY0nphHzd/8ImuqA1e5wAw63kWhk7LhjaD1Tk6rVZyuA7NoaPsZ
LRdLr0gkx1fP/266nvUhl6v+ERIPg4FoE9wyNH3ggSONtLbSp4Ce7Uea7GKxm2uv
lYFEyCbOFknBowV6LsFZdDtu4K+PPwX7NbUWLHMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSL2FFnuQjTsdrK+PQg0TuPzggWZTAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L2k5aFJaN2tJMDdIYXl2ajBJTkU3ajg0SUZtVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAo0LIAMEAo0LUDANBgkqhkiG9w0B
AQsFAAOCAQEAhdADARXHwO3g9j92UVEtHfoO0PHanFenuArUxB5Mu1LZbWgYzQor
DefvK2dj2E6fWn0Vmtyc3Xp23Vy0CusG17pvtOFKrR/43SDT7GUSGdT0Lg0gkenC
HW0BuqUiPNLttxWqSpNX//gPUDsE0FVhoWc6N2GSVWGLm0MPQK1kAzvxmNL8wcsP
Cr+rwNjc525Z/Ldbi7U8Ytu2yNMtRHZ4Fw3UxrCtHqDeNV2C4BSfw7NcfSHM3c9p
/zxBqE5GEmWaSv/TteXAZElrJfiMZqrc4vVpo0drCI20oulZKta4Vg6zRsUvdN2U
yly6IxDxnDSQvK8LOeBmEYgbvl8uFcguhA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org