Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/y_0I9XreMTA_RsbXJXlf18Ob-mI.roa
File: y_0I9XreMTA_RsbXJXlf18Ob-mI.roa (raw, json)
Hash identifier: 8uqKTrUzNss9moD7OtfLfELG0cwDZOR4rUVxVghtIl0=
Subject key identifier: CB:FD:08:F5:7A:DE:31:30:3F:46:C6:D7:25:79:5F:D7:C3:9B:FA:62
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04B9C39D
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/y_0I9XreMTA_RsbXJXlf18Ob-mI.roa
Signing time: Wed 18 May 2022 08:35:16 +0000
ROA not before: Wed 18 May 2022 08:35:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 141.11.168.0/23 maxlen: 24
141.11.178.0/24 maxlen: 24
141.11.186.0/24 maxlen: 24
141.11.88.0/23 maxlen: 24
141.11.90.0/23 maxlen: 24
141.11.96.0/24 maxlen: 24
141.11.102.0/24 maxlen: 24
141.11.5.0/24 maxlen: 24
141.11.121.0/24 maxlen: 24
141.11.228.0/23 maxlen: 24
141.11.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79283101 (0x4b9c39d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 18 08:35:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbfd08f57ade31303f46c6d725795fd7c39bfa62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:67:62:24:87:97:89:6a:4c:cb:97:25:87:97:
1c:86:d4:c3:06:db:96:d0:99:4e:28:72:18:6c:0a:
06:b2:b0:78:96:f7:ed:8e:3d:c3:b7:ab:56:83:25:
05:1d:2f:77:97:48:ca:7a:11:80:ae:92:83:54:e1:
8c:41:a9:6c:e8:ac:2a:14:b2:0a:79:37:59:50:64:
f8:1e:6a:da:30:9e:1e:ff:96:bb:bb:e8:8b:41:76:
40:f9:f5:85:8b:07:9b:6d:2b:5e:a9:78:56:69:88:
4b:f0:68:db:68:90:ff:e5:ce:fe:65:11:63:72:d2:
47:c3:64:30:a7:cc:95:89:53:05:ca:02:11:35:be:
6d:6b:87:51:4b:d6:67:23:26:94:47:e5:d3:5f:73:
65:e2:25:ec:a4:09:e4:b5:ec:3e:49:b3:75:77:2e:
06:2d:00:4a:2a:dd:4c:62:13:54:fd:7e:bb:b1:34:
c5:64:d7:bc:84:4d:a0:c0:c5:30:c0:d2:eb:a6:8c:
86:a0:9e:7c:de:80:ea:f1:78:51:a8:ab:cf:98:f4:
ca:61:1f:5a:ad:b4:9d:4e:7f:00:d3:38:a1:0c:e8:
64:3c:ef:f9:ff:51:d3:b4:2f:5e:06:15:eb:01:62:
37:cf:cd:2f:10:3b:6d:6e:53:ba:d9:50:1a:c4:cc:
e6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FD:08:F5:7A:DE:31:30:3F:46:C6:D7:25:79:5F:D7:C3:9B:FA:62
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/y_0I9XreMTA_RsbXJXlf18Ob-mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
141.11.26.0/24
141.11.88.0/22
141.11.96.0/24
141.11.102.0/24
141.11.121.0/24
141.11.168.0/23
141.11.178.0/24
141.11.186.0/24
141.11.228.0/23
Signature Algorithm: sha256WithRSAEncryption
46:7b:9b:9f:f6:46:f3:50:b1:b4:b2:15:b0:ad:ef:80:52:7d:
c4:d8:93:bf:b1:1d:72:6d:ca:ea:da:95:5d:e3:44:ad:e3:07:
45:7e:21:2f:6b:30:73:cd:60:13:ee:73:47:75:ab:a8:7f:c8:
7e:3e:d4:41:60:ae:80:71:d3:15:1d:84:89:cf:0e:01:9d:f0:
b8:de:22:04:c5:d1:6f:8b:f0:68:9b:a9:10:68:7c:06:1d:52:
9e:03:f5:d9:bd:44:69:b9:f7:a4:17:cb:9a:92:61:bd:65:d0:
f6:31:17:cb:9f:95:4f:94:a1:6f:45:db:8f:77:5f:c3:d4:ff:
ac:5b:10:d4:c1:b8:e7:6e:4b:70:f7:b1:d2:7f:37:7d:e1:71:
bb:1b:2a:55:88:f6:86:22:44:3e:ee:d8:11:6e:bb:f4:42:98:
8c:89:76:04:dc:14:81:c6:c6:c1:3b:25:1e:99:a1:49:0e:6f:
06:3c:3f:16:61:f1:59:3e:3a:90:aa:b8:e1:c9:ad:1b:54:a1:
d5:a3:65:61:b8:42:ee:b8:03:79:c1:45:02:51:4f:04:e1:2c:
3f:f7:3f:9e:00:2a:3f:9c:ed:f5:f6:83:08:bf:b6:3f:38:3f:
0f:1c:f9:c2:3d:67:46:ae:08:7a:2f:ab:e3:b0:61:67:32:09:
01:1e:0c:6d
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIEBLnDnTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDUx
ODA4MzUxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2JmZDA4ZjU3YWRl
MzEzMDNmNDZjNmQ3MjU3OTVmZDdjMzliZmE2MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANBnYiSHl4lqTMuXJYeXHIbUwwbbltCZTihyGGwKBrKweJb3
7Y49w7erVoMlBR0vd5dIynoRgK6Sg1ThjEGpbOisKhSyCnk3WVBk+B5q2jCeHv+W
u7voi0F2QPn1hYsHm20rXql4VmmIS/Bo22iQ/+XO/mURY3LSR8NkMKfMlYlTBcoC
ETW+bWuHUUvWZyMmlEfl019zZeIl7KQJ5LXsPkmzdXcuBi0ASirdTGITVP1+u7E0
xWTXvIRNoMDFMMDS66aMhqCefN6A6vF4Uairz5j0ymEfWq20nU5/ANM4oQzoZDzv
+f9R07QvXgYV6wFiN8/NLxA7bW5TutlQGsTM5p8CAwEAAaOCAj8wggI7MB0GA1Ud
DgQWBBTL/Qj1et4xMD9GxtcleV/Xw5v6YjAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L3lfMEk5WHJlTVRBX1JzYlhKWGxmMThPYi1tSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBV
BggrBgEFBQcBBwEB/wRGMEQwQgQCAAEwPAMEAI0LBQMEAI0LGgMEAo0LWAMEAI0L
YAMEAI0LZgMEAI0LeQMEAY0LqAMEAI0LsgMEAI0LugMEAY0L5DANBgkqhkiG9w0B
AQsFAAOCAQEARnubn/ZG81CxtLIVsK3vgFJ9xNiTv7Edcm3K6tqVXeNEreMHRX4h
L2swc81gE+5zR3WrqH/Ifj7UQWCugHHTFR2Eic8OAZ3wuN4iBMXRb4vwaJupEGh8
Bh1SngP12b1Eabn3pBfLmpJhvWXQ9jEXy5+VT5Shb0Xbj3dfw9T/rFsQ1MG4525L
cPex0n83feFxuxsqVYj2hiJEPu7YEW679EKYjIl2BNwUgcbGwTslHpmhSQ5vBjw/
FmHxWT46kKq44cmtG1Sh1aNlYbhC7rgDecFFAlFPBOEsP/c/ngAqP5zt9faDCL+2
Pzg/Dxz5wj1nRq4Iei+r47BhZzIJAR4MbQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:11 2023 by rpki-client on console-ams.rpki-client.org