Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/3ayZ1s0o8FnWvxP_ijLY44MkmnE.roa
File: 3ayZ1s0o8FnWvxP_ijLY44MkmnE.roa (raw, json)
Hash identifier: HN0ExONgISgdkbJETIfi4prUAla5+Nu7VLRP0/zU4XU=
Subject key identifier: DD:AC:99:D6:CD:28:F0:59:D6:BF:13:FF:8A:32:D8:E3:83:24:9A:71
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 02FBE4F2
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/3ayZ1s0o8FnWvxP_ijLY44MkmnE.roa
Signing time: Tue 08 Feb 2022 19:19:56 +0000
ROA not before: Tue 08 Feb 2022 19:19:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 141.11.186.0/24 maxlen: 24
141.11.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50062578 (0x2fbe4f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Feb 8 19:19:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddac99d6cd28f059d6bf13ff8a32d8e383249a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:78:ff:f4:d5:c1:f0:24:86:e4:ec:47:3d:a8:
ff:14:11:bd:be:77:0f:a3:5c:cb:11:92:0a:a6:dc:
f2:69:6a:52:89:46:b1:61:7e:5f:f1:d1:4d:79:63:
53:16:61:8e:4b:5b:2c:e8:b9:ef:52:cf:76:22:67:
77:36:b3:bd:b2:ac:bd:f0:a4:91:0a:84:b3:fa:00:
55:5c:0a:85:25:05:de:39:e3:77:82:19:77:3a:94:
12:29:41:5f:ee:94:32:3b:e4:6b:e4:6c:30:08:1e:
bc:dc:5e:f4:68:a3:43:d8:27:7e:68:f6:9e:0b:28:
b9:3f:67:a3:54:bb:94:60:83:e8:b6:1b:51:69:fd:
6b:d8:26:a4:cb:79:db:ac:25:71:6d:4c:62:99:2d:
1a:01:c8:ab:75:b9:3f:fc:ac:63:ef:8e:20:2c:05:
c6:ef:ff:09:41:ce:db:01:61:7f:23:03:71:e5:3c:
2f:d3:0b:45:f9:e6:55:a4:e5:c8:5e:3d:2e:ba:e3:
e7:ab:96:c0:8f:72:f7:37:a8:91:29:a5:a8:d9:b5:
ea:a3:f6:b2:34:ea:63:a8:54:10:67:af:60:66:be:
6a:80:ac:f0:03:ee:9c:6d:f1:a4:fe:6f:ee:8b:35:
ac:24:47:a4:eb:2c:47:90:47:77:fb:29:1e:3c:04:
97:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AC:99:D6:CD:28:F0:59:D6:BF:13:FF:8A:32:D8:E3:83:24:9A:71
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/3ayZ1s0o8FnWvxP_ijLY44MkmnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.186.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:ae:97:80:ed:c3:06:81:de:4b:85:a0:34:50:62:a0:55:84:
e4:9b:d8:35:a0:6a:63:7f:9d:10:a9:d3:40:95:74:cc:29:67:
0e:fc:3b:74:20:d8:48:d0:55:be:a1:d8:86:3b:92:03:21:3c:
64:9b:41:19:f4:b5:3e:9f:58:d6:c8:fb:dd:0c:8b:ba:c0:59:
92:22:47:29:9d:8b:7d:76:ff:aa:07:d5:6c:40:d1:83:b4:5f:
df:ee:62:90:34:33:df:46:ac:4b:80:4d:6c:d1:aa:71:9b:75:
a7:a3:f7:a5:3c:0f:7d:49:7b:37:fc:df:59:d0:f1:eb:18:09:
10:fd:e5:33:fa:1b:31:cb:e8:e5:cd:74:ff:f7:c9:45:15:ef:
57:21:e2:75:bd:6e:bb:58:9e:07:3c:50:17:a5:97:4c:3e:7e:
42:b5:72:dd:6a:85:01:82:89:f0:e3:a4:7b:3d:ef:bf:74:b0:
00:06:f2:87:af:74:fd:3a:79:e0:f8:f0:cb:85:1a:76:3e:ed:
ac:93:37:b9:2e:55:86:d6:3e:3b:57:af:a8:fe:12:a4:7c:b5:
fe:23:2c:4c:ef:22:e2:d2:97:84:bc:c4:bc:ee:4a:c5:68:a9:
99:43:05:be:5c:39:9e:1d:15:0f:01:ed:dc:44:5e:3f:e2:84:
a4:1d:46:8c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAvvk8jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDIw
ODE5MTk1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGRhYzk5ZDZjZDI4
ZjA1OWQ2YmYxM2ZmOGEzMmQ4ZTM4MzI0OWE3MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIh4//TVwfAkhuTsRz2o/xQRvb53D6NcyxGSCqbc8mlqUolG
sWF+X/HRTXljUxZhjktbLOi571LPdiJndzazvbKsvfCkkQqEs/oAVVwKhSUF3jnj
d4IZdzqUEilBX+6UMjvka+RsMAgevNxe9GijQ9gnfmj2ngsouT9no1S7lGCD6LYb
UWn9a9gmpMt526wlcW1MYpktGgHIq3W5P/ysY++OICwFxu//CUHO2wFhfyMDceU8
L9MLRfnmVaTlyF49Lrrj56uWwI9y9zeokSmlqNm16qP2sjTqY6hUEGevYGa+aoCs
8APunG3xpP5v7os1rCRHpOssR5BHd/spHjwEl30CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTdrJnWzSjwWda/E/+KMtjjgySacTAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
LzNheVoxczBvOEZuV3Z4UF9pakxZNDRNa21uRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAY0LujANBgkqhkiG9w0BAQsFAAOC
AQEAba6XgO3DBoHeS4WgNFBioFWE5JvYNaBqY3+dEKnTQJV0zClnDvw7dCDYSNBV
vqHYhjuSAyE8ZJtBGfS1Pp9Y1sj73QyLusBZkiJHKZ2LfXb/qgfVbEDRg7Rf3+5i
kDQz30asS4BNbNGqcZt1p6P3pTwPfUl7N/zfWdDx6xgJEP3lM/obMcvo5c10//fJ
RRXvVyHidb1uu1ieBzxQF6WXTD5+QrVy3WqFAYKJ8OOkez3vv3SwAAbyh690/Tp5
4Pjwy4Uadj7trJM3uS5VhtY+O1evqP4SpHy1/iMsTO8i4tKXhLzEvO5KxWipmUMF
vlw5nh0VDwHt3EReP+KEpB1GjA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:46:18 2025 by rpki-client