Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/3OV7n0kCQS_DyH886tXwn9jAjtk.roa
File: 3OV7n0kCQS_DyH886tXwn9jAjtk.roa (raw, json)
Hash identifier: CI4mCo1cghkH627l/xfDLf+hqUIz6IG7kNR/W1KFX+o=
Subject key identifier: DC:E5:7B:9F:49:02:41:2F:C3:C8:7F:3C:EA:D5:F0:9F:D8:C0:8E:D9
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 044ED68A
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/3OV7n0kCQS_DyH886tXwn9jAjtk.roa
Signing time: Tue 03 May 2022 10:00:23 +0000
ROA not before: Tue 03 May 2022 10:00:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 141.11.43.0/24 maxlen: 24
141.11.68.0/24 maxlen: 24
141.11.69.0/24 maxlen: 24
141.11.188.0/24 maxlen: 24
141.11.189.0/24 maxlen: 24
141.11.96.0/24 maxlen: 24
141.11.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72275594 (0x44ed68a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 3 10:00:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dce57b9f4902412fc3c87f3cead5f09fd8c08ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e7:bc:35:6f:b7:ed:53:29:a6:d9:6d:97:b8:
0a:9f:72:95:d3:5c:37:dc:14:f8:e7:3e:6d:ee:00:
47:d8:a0:54:1b:4b:35:8d:14:12:c3:25:1f:5d:eb:
07:2b:0d:1a:b2:e5:ef:c6:05:46:fb:5d:85:7a:df:
a9:82:6a:d2:dc:87:e8:76:b3:1c:a9:29:95:7f:4a:
3c:f5:da:81:9e:51:31:ac:28:f6:97:88:53:d1:66:
76:fe:5b:72:d0:79:a1:6b:6a:b6:3f:91:44:04:e1:
60:1b:be:a5:79:af:15:10:09:53:58:bd:1f:cf:13:
f7:0b:de:2d:82:33:cf:74:ba:29:61:b0:45:a7:e9:
0a:da:e7:14:9e:b1:dd:27:5b:c4:bf:96:11:ee:a7:
9c:b9:3e:d0:3e:67:71:5c:c5:19:8e:ab:49:17:b2:
95:f3:e4:df:70:fd:04:ac:b1:e0:2d:d8:82:9f:a4:
18:8d:58:ca:48:17:cb:6e:0a:d6:e7:bd:86:35:03:
6e:36:c8:1d:48:e3:7c:d9:4a:a2:5f:02:41:0e:03:
2d:83:a3:b3:ca:5b:bd:d2:b9:a3:39:75:63:2f:25:
bc:20:c9:72:6c:88:cd:d5:dc:da:80:d4:57:17:36:
29:f7:4d:52:27:fb:79:e8:aa:8d:be:89:29:ec:d6:
59:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E5:7B:9F:49:02:41:2F:C3:C8:7F:3C:EA:D5:F0:9F:D8:C0:8E:D9
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/3OV7n0kCQS_DyH886tXwn9jAjtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.27.0/24
141.11.43.0/24
141.11.68.0/23
141.11.96.0/24
141.11.188.0/23
Signature Algorithm: sha256WithRSAEncryption
40:48:73:9b:31:7f:96:96:d7:1f:2d:80:30:b7:99:93:59:8d:
42:9d:65:6e:12:df:e6:b2:66:88:15:95:1b:3f:ef:90:15:3b:
6d:db:8b:4b:81:d8:80:be:eb:d5:7d:d2:1e:e1:0d:80:93:bd:
74:3f:af:4c:27:d0:0b:b5:66:d0:54:11:a3:31:00:92:ed:3f:
c3:da:1a:48:e4:5b:16:f6:47:3a:25:61:12:48:ec:bb:e9:7c:
24:6d:bc:a7:f0:71:63:32:11:5e:42:8c:e0:e1:78:67:0c:b6:
de:51:0f:63:92:d9:04:c2:8b:a5:bb:cf:07:e2:82:de:37:41:
e1:7e:98:83:b6:27:8f:fe:00:cf:6f:20:49:67:e8:ba:41:a0:
cf:21:73:10:9c:02:5f:54:6a:9f:23:ac:c1:b9:c7:f1:df:f2:
87:f3:2a:36:30:15:5f:ba:9b:fe:73:f3:8e:3e:a0:b9:9b:92:
28:f2:a4:8e:9b:88:6c:9a:1b:bc:e3:ff:73:c8:f2:50:a8:b4:
f4:2e:8b:0a:85:a0:01:c0:14:f1:a8:ed:6c:e0:82:3b:65:4c:
da:fe:73:d9:90:d1:8f:6c:2e:1c:d9:b0:4c:cc:e5:a8:57:92:
aa:37:66:9e:34:8a:6a:e5:bf:31:a4:11:80:43:2e:f9:e5:30:
dc:ea:18:91
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEBE7WijANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDUw
MzEwMDAyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGNlNTdiOWY0OTAy
NDEyZmMzYzg3ZjNjZWFkNWYwOWZkOGMwOGVkOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALDnvDVvt+1TKabZbZe4Cp9yldNcN9wU+Oc+be4AR9igVBtL
NY0UEsMlH13rBysNGrLl78YFRvtdhXrfqYJq0tyH6HazHKkplX9KPPXagZ5RMawo
9peIU9Fmdv5bctB5oWtqtj+RRAThYBu+pXmvFRAJU1i9H88T9wveLYIzz3S6KWGw
RafpCtrnFJ6x3SdbxL+WEe6nnLk+0D5ncVzFGY6rSReylfPk33D9BKyx4C3Ygp+k
GI1YykgXy24K1ue9hjUDbjbIHUjjfNlKol8CQQ4DLYOjs8pbvdK5ozl1Yy8lvCDJ
cmyIzdXc2oDUVxc2KfdNUif7eeiqjb6JKezWWf8CAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBTc5XufSQJBL8PIfzzq1fCf2MCO2TAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
LzNPVjduMGtDUVNfRHlIODg2dFh3bjlqQWp0ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAI0LGwMEAI0LKwMEAY0LRAMEAI0L
YAMEAY0LvDANBgkqhkiG9w0BAQsFAAOCAQEAQEhzmzF/lpbXHy2AMLeZk1mNQp1l
bhLf5rJmiBWVGz/vkBU7bduLS4HYgL7r1X3SHuENgJO9dD+vTCfQC7Vm0FQRozEA
ku0/w9oaSORbFvZHOiVhEkjsu+l8JG28p/BxYzIRXkKM4OF4Zwy23lEPY5LZBMKL
pbvPB+KC3jdB4X6Yg7Ynj/4Az28gSWfoukGgzyFzEJwCX1RqnyOswbnH8d/yh/Mq
NjAVX7qb/nPzjj6guZuSKPKkjpuIbJobvOP/c8jyUKi09C6LCoWgAcAU8ajtbOCC
O2VM2v5z2ZDRj2wuHNmwTMzlqFeSqjdmnjSKauW/MaQRgEMu+eUw3OoYkQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:57 2025 by rpki-client