Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/1CTeLFbHkOg0gXwdmh7lOfwunts.roa
File: 1CTeLFbHkOg0gXwdmh7lOfwunts.roa (raw, json)
Hash identifier: QVuPnTS+kVG5nQNLulRPLGdYsmK/lyB1xWr3iSeg8L8=
Subject key identifier: D4:24:DE:2C:56:C7:90:E8:34:81:7C:1D:9A:1E:E5:39:FC:2E:9E:DB
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04AF090A
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/1CTeLFbHkOg0gXwdmh7lOfwunts.roa
Signing time: Tue 17 May 2022 10:04:30 +0000
ROA not before: Tue 17 May 2022 10:04:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209181
IP address blocks: 141.11.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78579978 (0x4af090a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 17 10:04:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d424de2c56c790e834817c1d9a1ee539fc2e9edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f8:5b:a8:85:df:f0:23:e9:2b:5a:44:3e:5d:
5d:76:a2:68:4d:ef:94:f0:dd:4b:30:52:fc:6a:3d:
4c:d3:d3:f5:fa:8d:95:21:f3:60:6d:34:f5:59:70:
67:d7:7e:d7:3e:94:d7:5b:7a:39:22:3f:d1:2c:94:
b6:cb:24:14:d9:66:08:d2:b3:eb:24:90:98:46:d5:
a6:b2:d9:d9:19:7e:7b:59:5e:6f:cc:b7:96:d3:9d:
95:e1:1e:63:f5:4c:6f:5e:8e:d1:0e:fb:a7:b5:06:
aa:e1:f1:bd:81:ef:f1:10:bb:11:5c:36:17:f3:60:
7c:fd:9a:ea:bc:ce:f3:1a:00:65:10:02:b9:ea:5b:
08:4b:09:7a:70:35:82:97:93:cb:a3:c2:d4:84:8e:
1f:e3:da:64:1c:3c:c4:0b:bd:26:cc:d8:75:04:ac:
76:96:f4:51:cb:f5:24:ee:07:c0:dc:30:06:8a:4d:
71:fd:e8:ec:78:b8:c1:9e:f6:b3:50:9b:b7:9b:cc:
28:18:31:36:5e:f2:b1:3b:ac:a2:94:61:55:1b:63:
7e:91:a1:f4:f1:fa:bb:aa:a0:3c:58:e3:dc:61:ef:
8b:49:3a:09:1e:e8:58:fd:71:a1:4e:7c:61:0b:0e:
3c:86:c0:34:5f:36:e8:47:d0:00:c2:01:ec:ec:ba:
b7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:24:DE:2C:56:C7:90:E8:34:81:7C:1D:9A:1E:E5:39:FC:2E:9E:DB
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/1CTeLFbHkOg0gXwdmh7lOfwunts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.41.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ae:70:92:57:8b:4e:a2:bc:27:0c:ad:bc:e9:5b:71:f6:fe:
90:05:15:9c:ce:50:e7:f5:f2:1f:01:9f:d8:ce:60:cb:1c:3e:
05:cb:c0:a8:4b:6e:b0:1f:a5:59:dd:bf:c2:72:4f:76:db:e1:
62:12:58:04:b8:e0:4b:9b:ff:3d:b3:e8:a8:fd:54:62:82:9f:
65:39:ec:5f:63:cf:9e:32:be:23:a8:16:0e:0e:2d:c8:98:62:
7b:41:44:7c:81:86:7e:08:17:e7:08:e3:8b:2e:fa:39:2a:45:
87:0c:34:d1:ef:10:33:ac:7d:cf:38:1c:1e:1c:47:aa:1d:d6:
a2:22:9e:5c:c2:07:1b:b8:fa:4b:0d:fd:c6:7c:c0:6e:c3:75:
1c:70:18:cc:54:80:72:24:d5:0c:8c:3c:0f:e6:ae:78:95:67:
37:9e:f0:68:ef:e3:da:aa:d0:12:26:15:62:50:67:f2:31:63:
e7:49:63:ab:be:dd:fe:1b:21:09:45:29:7d:40:d5:f8:73:ca:
40:9b:60:15:1c:6e:2d:e4:f0:29:e2:0d:5c:ed:93:cf:e6:c1:
92:cb:07:f2:87:dc:b5:27:1f:db:75:1d:b4:6d:91:af:77:ee:
78:a9:9e:c2:37:f2:f1:67:41:c9:a2:8a:19:b2:d3:42:07:5a:
f8:c9:91:59
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBK8JCjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDUx
NzEwMDQzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDQyNGRlMmM1NmM3
OTBlODM0ODE3YzFkOWExZWU1MzlmYzJlOWVkYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM74W6iF3/Aj6StaRD5dXXaiaE3vlPDdSzBS/Go9TNPT9fqN
lSHzYG009VlwZ9d+1z6U11t6OSI/0SyUtsskFNlmCNKz6ySQmEbVprLZ2Rl+e1le
b8y3ltOdleEeY/VMb16O0Q77p7UGquHxvYHv8RC7EVw2F/NgfP2a6rzO8xoAZRAC
uepbCEsJenA1gpeTy6PC1ISOH+PaZBw8xAu9JszYdQSsdpb0Ucv1JO4HwNwwBopN
cf3o7Hi4wZ72s1Cbt5vMKBgxNl7ysTusopRhVRtjfpGh9PH6u6qgPFjj3GHvi0k6
CR7oWP1xoU58YQsOPIbANF826EfQAMIB7Oy6tykCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTUJN4sVseQ6DSBfB2aHuU5/C6e2zAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
LzFDVGVMRmJIa09nMGdYd2RtaDdsT2Z3dW50cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI0LKTANBgkqhkiG9w0BAQsFAAOC
AQEAX65wkleLTqK8JwytvOlbcfb+kAUVnM5Q5/XyHwGf2M5gyxw+BcvAqEtusB+l
Wd2/wnJPdtvhYhJYBLjgS5v/PbPoqP1UYoKfZTnsX2PPnjK+I6gWDg4tyJhie0FE
fIGGfggX5wjjiy76OSpFhww00e8QM6x9zzgcHhxHqh3WoiKeXMIHG7j6Sw39xnzA
bsN1HHAYzFSAciTVDIw8D+aueJVnN57waO/j2qrQEiYVYlBn8jFj50ljq77d/hsh
CUUpfUDV+HPKQJtgFRxuLeTwKeINXO2Tz+bBkssH8ofctScf23UdtG2Rr3fueKme
wjfy8WdByaKKGbLTQgda+MmRWQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:21:22 2025 by rpki-client