Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/oaCFdo8uTyFbzyTjodf1vfS98wM.roa
File: oaCFdo8uTyFbzyTjodf1vfS98wM.roa (raw, json)
Hash identifier: xHFANzLAE9Kt4LsA/Gpa7/1WKqSG9liz5FUrRPe5H4c=
Subject key identifier: A1:A0:85:76:8F:2E:4F:21:5B:CF:24:E3:A1:D7:F5:BD:F4:BD:F3:03
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 018451E93BE34EEA7EE2FD809DBD2E6E2B44
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/oaCFdo8uTyFbzyTjodf1vfS98wM.roa
Signing time: Mon 07 Nov 2022 11:45:50 +0000
ROA not before: Mon 07 Nov 2022 11:45:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.11.44.0/22 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.42.0/24 maxlen: 24
141.11.41.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.10.0/23 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.22.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.33.0/24 maxlen: 24
141.11.32.0/24 maxlen: 24
141.11.160.0/24 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.189.0/24 maxlen: 24
141.11.187.0/24 maxlen: 24
141.11.94.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:51:e9:3b:e3:4e:ea:7e:e2:fd:80:9d:bd:2e:6e:2b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 7 11:45:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1a085768f2e4f215bcf24e3a1d7f5bdf4bdf303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:11:c3:56:6f:00:e0:91:03:5c:2d:05:9b:d4:
8f:dc:a9:f0:99:bf:a5:f2:55:09:74:ed:8d:e8:07:
49:86:4b:f1:b8:00:e1:89:49:eb:1d:af:cd:f9:64:
14:fd:40:86:f5:0a:74:c4:44:03:91:45:8e:fe:10:
07:37:8f:24:59:a5:0d:50:a0:a4:9b:f5:79:48:f1:
8f:ac:12:63:89:08:23:44:a2:c3:09:83:c1:78:6a:
28:27:a6:74:90:0a:d0:7d:1b:67:2f:6f:16:0d:de:
ca:b2:3d:08:1d:7b:73:f1:7b:0b:f9:2a:4e:bb:a5:
73:6d:88:74:b7:63:63:c8:d6:40:83:ae:99:1f:66:
0c:eb:9f:19:1b:86:5b:1a:8d:ed:c4:32:81:5c:e4:
79:1b:39:2f:2c:0b:3f:a7:b4:c1:13:bc:63:13:a6:
e2:b7:f7:1c:e1:df:ff:3f:4c:36:c2:c7:a5:d7:84:
33:30:5a:49:3a:67:45:b9:b8:f9:b6:3f:3b:ca:b4:
42:68:44:dd:2d:8e:f8:f0:c5:40:fb:16:86:b2:ff:
a1:c9:b8:c6:5e:77:c9:e7:ee:35:ce:a1:43:34:15:
99:d4:76:05:37:c2:75:99:f3:2c:de:82:49:ae:7b:
86:3f:c3:21:dd:d9:be:a9:e5:07:17:21:51:88:ab:
5e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A0:85:76:8F:2E:4F:21:5B:CF:24:E3:A1:D7:F5:BD:F4:BD:F3:03
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/oaCFdo8uTyFbzyTjodf1vfS98wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.2.0/24
141.11.10.0/23
141.11.17.0-141.11.18.255
141.11.22.0/24
141.11.25.0/24
141.11.31.0-141.11.33.255
141.11.39.0/24
141.11.41.0-141.11.42.255
141.11.44.0/22
141.11.94.0/23
141.11.160.0/24
141.11.176.0/24
141.11.182.0/23
141.11.187.0/24
141.11.189.0/24
Signature Algorithm: sha256WithRSAEncryption
37:6a:49:24:46:da:70:df:ea:9a:8a:e4:a6:63:c5:75:3f:d2:
4a:45:cd:4e:7e:c2:96:0b:fa:59:f2:9d:e7:e5:cd:dd:57:b9:
a5:aa:e4:23:95:aa:13:bc:a8:00:02:e7:34:b1:4d:79:0d:0a:
90:54:ec:53:8a:bb:b7:cb:12:0a:73:7d:2c:ec:03:a4:d3:b4:
8d:ac:25:a0:c5:d2:d0:ce:f0:98:07:4a:1e:06:85:3d:55:b0:
f6:f7:38:8b:19:f1:86:2a:cf:b7:7d:06:25:dd:53:d4:55:45:
ac:58:de:47:a5:23:4a:fc:f4:52:b9:32:ea:6b:1a:0b:26:cc:
c8:12:be:33:01:f9:dc:69:87:ec:88:ce:ed:9d:d0:2e:8b:07:
d8:b9:be:55:ea:a3:fd:53:8e:00:37:b4:5f:c2:df:e3:b2:9c:
72:ab:a7:21:a2:b0:4c:2e:d3:44:57:a0:35:e8:c2:0f:f2:27:
7f:6b:d7:97:b0:0a:9b:9e:a0:9a:fd:04:5e:5b:2e:3a:1b:54:
c6:e7:12:5b:19:25:fd:92:70:22:b4:a1:02:32:76:32:12:73:
91:a8:a4:67:62:4d:ad:0b:90:d3:04:d8:95:54:5c:d4:95:18:
1e:33:6d:1f:ed:6c:d7:cb:50:d0:aa:a9:58:6b:b2:a0:84:78:
45:28:fb:6b
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgISAYRR6TvjTup+4v2Anb0ubitEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIxMTA3MTE0NTUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWEwODU3NjhmMmU0ZjIxNWJjZjI0ZTNhMWQ3ZjViZGY0YmRmMzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hHDVm8A4JEDXC0Fm9SP3Knwmb+l
8lUJdO2N6AdJhkvxuADhiUnrHa/N+WQU/UCG9Qp0xEQDkUWO/hAHN48kWaUNUKCk
m/V5SPGPrBJjiQgjRKLDCYPBeGooJ6Z0kArQfRtnL28WDd7Ksj0IHXtz8XsL+SpO
u6VzbYh0t2NjyNZAg66ZH2YM658ZG4ZbGo3txDKBXOR5GzkvLAs/p7TBE7xjE6bi
t/cc4d//P0w2wsel14QzMFpJOmdFubj5tj87yrRCaETdLY748MVA+xaGsv+hybjG
XnfJ5+41zqFDNBWZ1HYFN8J1mfMs3oJJrnuGP8Mh3dm+qeUHFyFRiKteHwIDAQAB
o4ICdjCCAnIwHQYDVR0OBBYEFKGghXaPLk8hW88k46HX9b30vfMDMB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvb2FDRmRvOHVUeUZienlUam9kZjF2ZlM5OHdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMEAI0LAgME
AY0LCjAMAwQAjQsRAwQAjQsSAwQAjQsWAwQAjQsZMAwDBACNCx8DBAGNCyADBACN
CycwDAMEAI0LKQMEAI0LKgMEAo0LLAMEAY0LXgMEAI0LoAMEAI0LsAMEAY0LtgME
AI0LuwMEAI0LvTANBgkqhkiG9w0BAQsFAAOCAQEAN2pJJEbacN/qmorkpmPFdT/S
SkXNTn7Clgv6WfKd5+XN3Ve5parkI5WqE7yoAALnNLFNeQ0KkFTsU4q7t8sSCnN9
LOwDpNO0jawloMXS0M7wmAdKHgaFPVWw9vc4ixnxhirPt30GJd1T1FVFrFjeR6Uj
Svz0Urky6msaCybMyBK+MwH53GmH7IjO7Z3QLosH2Lm+Veqj/VOOADe0X8Lf47Kc
cqunIaKwTC7TRFegNejCD/Inf2vXl7AKm56gmv0EXlsuOhtUxucSWxkl/ZJwIrSh
AjJ2MhJzkaikZ2JNrQuQ0wTYlVRc1JUYHjNtH+1s18tQ0KqpWGuyoIR4RSj7aw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:17 2023 by rpki-client on console-fra.rpki-client.org