Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/2g7LShqnJE7Lb0-f2QL-OXaSwyo.roa
File: 2g7LShqnJE7Lb0-f2QL-OXaSwyo.roa (raw, json)
Hash identifier: vawwIopIQ3q3QVmNfOa53VrStctLBED8zQH2i1PSudw=
Subject key identifier: DA:0E:CB:4A:1A:A7:24:4E:CB:6F:4F:9F:D9:02:FE:39:76:92:C3:2A
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 041C4A29
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/2g7LShqnJE7Lb0-f2QL-OXaSwyo.roa
Signing time: Fri 22 Apr 2022 18:16:38 +0000
ROA not before: Fri 22 Apr 2022 18:16:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 141.11.71.0/24 maxlen: 24
141.11.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68962857 (0x41c4a29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 22 18:16:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da0ecb4a1aa7244ecb6f4f9fd902fe397692c32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:14:c2:b8:c1:6c:45:78:26:20:9b:53:51:d3:
aa:d8:78:44:8d:ec:11:a7:3e:3f:99:a9:e6:b1:5c:
e7:66:e8:80:07:9c:e9:bc:aa:23:2f:41:f0:af:fb:
5c:e1:5b:6d:c1:e2:bd:28:29:b4:51:2b:bd:14:cb:
45:f4:b5:6d:6f:b0:38:99:4d:3c:a5:8e:d8:87:0e:
bc:aa:4c:8c:28:59:4d:a6:9b:e0:51:bd:1a:a5:ec:
e6:a2:01:6c:d3:22:b8:ae:b4:4e:7d:59:d4:ed:99:
bf:c2:66:d5:e3:44:68:87:b8:eb:d9:5c:74:db:7f:
d8:c8:70:ca:bd:f4:53:35:99:ee:66:85:58:8f:4d:
ce:ef:7a:44:ca:61:cd:b9:8c:18:14:96:94:ea:f3:
fd:d6:c8:b0:d0:b8:23:a6:8d:0a:f0:78:2b:6f:ea:
2d:16:5f:41:6f:f5:27:99:3d:1e:78:96:34:ac:b6:
63:a1:50:bc:37:e5:58:33:0d:13:ea:a9:51:f3:bd:
3a:58:32:c0:24:f5:dc:c0:83:c1:b5:40:94:0f:be:
c2:e6:3d:62:1c:3e:4f:8b:53:eb:90:e8:9c:74:7c:
ba:73:6d:e8:9e:3a:e0:c5:5b:00:9a:67:8c:54:aa:
7d:48:c8:52:4a:58:e2:50:41:d5:62:b7:96:27:00:
b3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0E:CB:4A:1A:A7:24:4E:CB:6F:4F:9F:D9:02:FE:39:76:92:C3:2A
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/2g7LShqnJE7Lb0-f2QL-OXaSwyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.12.0/22
141.11.71.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:b7:2d:de:71:dc:1e:a8:d3:53:23:6a:83:96:ba:32:90:c0:
33:ca:a1:8a:de:2a:fe:cb:15:0c:b9:b4:82:19:9b:17:cd:1e:
de:c9:ee:c5:9f:79:09:b0:0b:f8:9d:d2:f7:35:70:6f:0d:6b:
f2:d4:20:79:b1:88:11:fd:6f:8c:86:dc:8a:89:5c:22:c1:fd:
61:ba:d2:1b:87:1b:d3:58:49:7f:00:ee:0e:d3:d2:c6:26:0c:
96:eb:7f:d4:e1:65:e0:8e:86:54:70:a3:89:52:ba:f1:56:45:
13:8d:7a:e6:2e:a8:56:97:39:39:d4:80:d8:2b:0f:0e:b9:fc:
2e:84:37:69:ac:f7:54:5f:b9:ae:39:24:f4:0c:83:78:e3:9d:
ae:1c:11:1e:7b:20:4f:a7:b7:6c:8b:3d:22:6c:94:63:52:af:
d3:a1:7f:90:e1:ce:95:8d:64:85:d0:79:e5:67:2f:42:df:b3:
e6:6e:c6:b5:a4:7b:64:2e:fe:9b:b6:8d:a7:40:fe:d2:a1:9e:
d1:9f:d2:7d:1a:1b:00:ce:7e:1d:06:31:cd:fd:c4:0c:c2:2d:
fd:94:4e:93:24:3c:67:04:3e:7f:a7:5c:0f:3d:ab:b6:07:39:
48:68:34:ff:d5:af:cc:a5:22:fe:5c:e4:ae:7e:b5:24:bf:8b:
d5:c4:c8:1a
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBBxKKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDQy
MjE4MTYzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGEwZWNiNGExYWE3
MjQ0ZWNiNmY0ZjlmZDkwMmZlMzk3NjkyYzMyYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKIUwrjBbEV4JiCbU1HTqth4RI3sEac+P5mp5rFc52bogAec
6byqIy9B8K/7XOFbbcHivSgptFErvRTLRfS1bW+wOJlNPKWO2IcOvKpMjChZTaab
4FG9GqXs5qIBbNMiuK60Tn1Z1O2Zv8Jm1eNEaIe469lcdNt/2Mhwyr30UzWZ7maF
WI9Nzu96RMphzbmMGBSWlOrz/dbIsNC4I6aNCvB4K2/qLRZfQW/1J5k9HniWNKy2
Y6FQvDflWDMNE+qpUfO9OlgywCT13MCDwbVAlA++wuY9Yhw+T4tT65DonHR8unNt
6J464MVbAJpnjFSqfUjIUkpY4lBB1WK3licAsz8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTaDstKGqckTstvT5/ZAv45dpLDKjAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
LzJnN0xTaHFuSkU3TGIwLWYyUUwtT1hhU3d5by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAo0LDAMEAI0LRzANBgkqhkiG9w0B
AQsFAAOCAQEATLct3nHcHqjTUyNqg5a6MpDAM8qhit4q/ssVDLm0ghmbF80e3snu
xZ95CbAL+J3S9zVwbw1r8tQgebGIEf1vjIbciolcIsH9YbrSG4cb01hJfwDuDtPS
xiYMlut/1OFl4I6GVHCjiVK68VZFE4165i6oVpc5OdSA2CsPDrn8LoQ3aaz3VF+5
rjkk9AyDeOOdrhwRHnsgT6e3bIs9ImyUY1Kv06F/kOHOlY1khdB55WcvQt+z5m7G
taR7ZC7+m7aNp0D+0qGe0Z/SfRobAM5+HQYxzf3EDMIt/ZROkyQ8ZwQ+f6dcDz2r
tgc5SGg0/9WvzKUi/lzkrn61JL+L1cTIGg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org