Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/x-I4IbehC5_ceM-MHjX34MWzSsw.roa
File: x-I4IbehC5_ceM-MHjX34MWzSsw.roa (raw, json)
Hash identifier: ViPBE1fxD9GPLXgRDFUwTmECPxmx8akdfZ3wOWxu0xk=
Subject key identifier: C7:E2:38:21:B7:A1:0B:9F:DC:78:CF:8C:1E:35:F7:E0:C5:B3:4A:CC
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01841F682B4ACBCBD27149D24215D7E497C9
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/x-I4IbehC5_ceM-MHjX34MWzSsw.roa
Signing time: Fri 28 Oct 2022 16:23:51 +0000
ROA not before: Fri 28 Oct 2022 16:23:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 141.11.178.0/24 maxlen: 24
141.11.200.0/22 maxlen: 24
141.11.236.0/22 maxlen: 24
141.11.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1f:68:2b:4a:cb:cb:d2:71:49:d2:42:15:d7:e4:97:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Oct 28 16:23:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7e23821b7a10b9fdc78cf8c1e35f7e0c5b34acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:6d:0b:42:3e:5d:f2:80:f1:fc:05:81:10:
a4:b7:10:ca:77:76:6e:03:3c:ce:aa:d6:46:eb:9e:
4b:49:1d:e4:f7:c6:0b:c9:37:bd:ce:b9:b2:c7:0f:
59:ca:f8:e7:19:ee:9a:b4:c4:32:c8:47:79:01:a0:
77:82:00:12:e8:4a:99:74:ae:e7:88:da:46:1e:88:
b4:74:6e:b9:f4:9e:26:b2:8d:fb:18:79:cc:a2:bb:
53:b6:c7:a2:95:1e:f1:25:f0:af:da:1c:c0:bf:ea:
d2:0a:2a:1d:dc:5b:42:08:92:8a:02:9b:2c:4a:38:
c5:46:f0:49:29:ee:a1:54:b2:52:60:d6:5b:f5:10:
ae:78:c2:32:31:fb:a0:4d:df:f7:5b:3e:fd:e0:a6:
37:3d:d9:ec:8e:f8:ed:78:a3:18:33:3d:b1:ee:d3:
e7:9c:63:79:8d:65:de:c1:fe:93:ff:e5:a4:33:ab:
0e:4f:d0:91:7b:37:20:c0:62:fa:8c:2c:6b:a6:9d:
a1:49:a3:5f:40:e2:46:03:a3:bd:f5:be:48:f7:93:
17:09:2a:a1:f7:4c:cd:79:a2:75:fb:d5:fa:6d:cc:
c4:e7:2d:b1:e4:c7:a4:dd:93:f9:12:78:7c:92:5d:
0f:d9:32:2e:f8:57:89:9c:39:32:f3:92:cf:3d:82:
8d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E2:38:21:B7:A1:0B:9F:DC:78:CF:8C:1E:35:F7:E0:C5:B3:4A:CC
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/x-I4IbehC5_ceM-MHjX34MWzSsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.140.0/22
141.11.178.0/24
141.11.200.0/22
141.11.236.0/22
Signature Algorithm: sha256WithRSAEncryption
54:42:49:2a:d2:43:16:9d:7e:67:2a:9d:51:8d:26:5f:9e:41:
5e:77:8f:30:8f:11:6e:35:c5:c2:6a:f5:94:14:b4:95:59:9d:
71:a5:9d:c6:a3:17:50:57:1c:9b:e2:ea:5d:8c:54:66:08:10:
43:2a:dc:ab:86:84:72:29:7c:00:64:54:fd:55:87:19:cb:8d:
68:a4:86:33:9c:50:39:af:12:d0:54:55:12:5c:2b:23:c8:1d:
32:1d:4e:e0:a6:b6:7f:f2:95:56:ab:5c:40:93:49:70:d1:55:
c8:94:16:44:57:72:29:bb:11:61:93:3f:a2:79:0d:38:ab:9b:
b9:bb:32:e7:1d:26:9d:2d:5b:fb:14:30:73:51:f6:fe:e9:4a:
7e:62:c4:54:87:b1:ba:7c:2a:29:a3:95:5a:64:a1:12:af:9d:
71:80:f3:72:31:a5:50:cf:9a:01:34:12:c4:40:10:81:4d:3e:
d6:a7:7b:a9:78:ee:77:ad:0c:85:ab:b1:de:57:a3:13:1d:b4:
f2:9d:9f:e8:7e:a2:9f:b4:4e:be:21:f0:fa:52:9e:6f:b6:3a:
2f:37:b0:33:cc:47:8d:1e:f6:66:4a:6c:7b:48:f2:33:e8:15:
ab:ca:ef:ed:97:8e:8e:9b:6a:45:23:24:01:56:c6:ea:6b:91:
ee:c9:84:cc
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYQfaCtKy8vScUnSQhXX5JfJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIxMDI4MTYyMzUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2UyMzgyMWI3YTEwYjlmZGM3OGNmOGMxZTM1ZjdlMGM1YjM0YWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtudtC0I+XfKA8fwFgRCktxDKd3Zu
AzzOqtZG655LSR3k98YLyTe9zrmyxw9ZyvjnGe6atMQyyEd5AaB3ggAS6EqZdK7n
iNpGHoi0dG659J4mso37GHnMortTtseilR7xJfCv2hzAv+rSCiod3FtCCJKKApss
SjjFRvBJKe6hVLJSYNZb9RCueMIyMfugTd/3Wz794KY3PdnsjvjteKMYMz2x7tPn
nGN5jWXewf6T/+WkM6sOT9CRezcgwGL6jCxrpp2hSaNfQOJGA6O99b5I95MXCSqh
90zNeaJ1+9X6bczE5y2x5Mek3ZP5Enh8kl0P2TIu+FeJnDky85LPPYKN7wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFMfiOCG3oQuf3HjPjB419+DFs0rMMB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEveC1JNEliZWhDNV9jZU0tTUhqWDM0TVd6U3N3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCjQuMAwQA
jQuyAwQCjQvIAwQCjQvsMA0GCSqGSIb3DQEBCwUAA4IBAQBUQkkq0kMWnX5nKp1R
jSZfnkFed48wjxFuNcXCavWUFLSVWZ1xpZ3GoxdQVxyb4updjFRmCBBDKtyrhoRy
KXwAZFT9VYcZy41opIYznFA5rxLQVFUSXCsjyB0yHU7gprZ/8pVWq1xAk0lw0VXI
lBZEV3IpuxFhkz+ieQ04q5u5uzLnHSadLVv7FDBzUfb+6Up+YsRUh7G6fCopo5Va
ZKESr51xgPNyMaVQz5oBNBLEQBCBTT7Wp3upeO53rQyFq7HeV6MTHbTynZ/ofqKf
tE6+IfD6Up5vtjovN7AzzEeNHvZmSmx7SPIz6BWryu/tl46Om2pFIyQBVsbqa5Hu
yYTM
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:11 2023 by rpki-client on console-ams.rpki-client.org