Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/5fcLmlrVRML0QIW_52QiNifcgSU.roa
File: 5fcLmlrVRML0QIW_52QiNifcgSU.roa (raw, json)
Hash identifier: xbWTOp9BC7PvmFNK7FfZZombfyvFKxHlrAr88D8ddiM=
Subject key identifier: E5:F7:0B:9A:5A:D5:44:C2:F4:40:85:BF:E7:64:22:36:27:DC:81:25
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01837F24226E276F130295401866259C6094
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/5fcLmlrVRML0QIW_52QiNifcgSU.roa
Signing time: Tue 27 Sep 2022 13:30:17 +0000
ROA not before: Tue 27 Sep 2022 13:30:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 141.11.103.0/24 maxlen: 24
141.11.0.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7f:24:22:6e:27:6f:13:02:95:40:18:66:25:9c:60:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 27 13:30:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5f70b9a5ad544c2f44085bfe764223627dc8125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:16:4c:8f:e3:ca:0a:a8:83:08:0e:2c:51:16:
74:3f:63:66:f1:ac:9d:ca:07:41:06:61:db:37:ae:
5a:65:18:71:ad:c8:8c:6c:0b:b0:97:3a:04:ea:31:
48:bd:7e:c3:3c:2b:d4:96:ff:b1:a2:52:37:94:24:
da:55:7a:c1:1a:68:0b:fc:35:6b:72:9b:ae:7f:5b:
2b:7e:07:cf:b1:4b:0a:5c:01:55:57:f8:56:6e:5d:
b2:30:0b:06:ed:14:39:58:30:e8:60:94:51:36:d5:
b9:79:ef:5b:12:0d:f9:38:43:90:7a:60:15:fd:1b:
59:15:37:f6:68:83:59:98:79:df:19:3d:ff:e5:5f:
28:22:c2:4b:4a:f1:e6:bb:c0:3c:5f:d4:9e:99:b3:
43:cb:ea:95:a7:97:4d:2b:8c:dd:84:8b:b6:a3:4f:
55:74:94:be:7d:d3:82:3d:f8:74:90:e2:5d:fc:b7:
c8:9b:bd:06:c2:2a:c9:9a:b5:44:48:ba:56:e2:01:
dc:60:83:9c:7a:9e:1b:c1:3f:53:91:31:7a:5f:34:
02:af:e5:c1:16:be:33:a8:7c:bb:28:0f:93:68:61:
f3:92:77:51:61:5e:bc:63:95:da:ef:fb:c9:53:c1:
b4:ea:2d:67:2e:1c:91:45:3f:7d:89:1a:b4:0e:de:
8b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F7:0B:9A:5A:D5:44:C2:F4:40:85:BF:E7:64:22:36:27:DC:81:25
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/5fcLmlrVRML0QIW_52QiNifcgSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0/24
141.11.28.0/24
141.11.103.0/24
141.11.243.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:d6:96:d6:19:92:e0:b8:d3:b7:a7:fc:e3:44:00:04:e9:07:
0e:2a:6a:fe:e7:6d:57:ff:2d:0c:91:cb:fb:6f:cf:47:ce:d2:
0d:5a:fa:c0:02:c6:4c:cc:ec:71:df:7a:08:ef:65:a3:ad:2e:
68:12:46:ee:06:1d:96:0e:ed:a8:da:13:dd:47:aa:dc:04:c8:
a7:b3:8b:18:1b:ab:33:e6:a4:e2:c8:ba:b6:79:6f:a1:66:2b:
de:e7:3e:a3:27:e8:43:25:00:e5:e8:93:4c:a9:bb:3f:84:1c:
a4:30:af:b2:64:ec:51:68:e9:9b:42:63:bc:ee:8c:ca:19:50:
3d:c7:4e:c2:b5:57:7c:91:8d:64:5a:68:59:cd:89:61:f3:52:
da:c6:17:35:a7:ec:ff:00:fe:79:f2:df:11:6d:36:50:59:59:
6b:da:3e:a6:bf:1f:81:11:c9:7c:46:28:25:08:16:de:eb:29:
ec:dc:f9:76:a6:cc:83:67:5e:b8:6e:b5:fe:b1:87:e1:8f:5c:
18:7e:29:34:27:71:e5:fd:28:8d:2b:07:eb:ba:90:3e:31:db:
2e:86:3e:de:45:f0:27:53:39:5c:f4:f5:9d:b0:96:ff:91:f2:
18:f4:22:81:72:5b:e4:04:2b:ed:c0:e8:8d:34:98:28:68:c2:
d6:e2:b7:0c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYN/JCJuJ28TApVAGGYlnGCUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIwOTI3MTMzMDE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWY3MGI5YTVhZDU0NGMyZjQ0MDg1YmZlNzY0MjIzNjI3ZGM4MTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghZMj+PKCqiDCA4sURZ0P2Nm8ayd
ygdBBmHbN65aZRhxrciMbAuwlzoE6jFIvX7DPCvUlv+xolI3lCTaVXrBGmgL/DVr
cpuuf1srfgfPsUsKXAFVV/hWbl2yMAsG7RQ5WDDoYJRRNtW5ee9bEg35OEOQemAV
/RtZFTf2aINZmHnfGT3/5V8oIsJLSvHmu8A8X9SembNDy+qVp5dNK4zdhIu2o09V
dJS+fdOCPfh0kOJd/LfIm70GwirJmrVESLpW4gHcYIOcep4bwT9TkTF6XzQCr+XB
Fr4zqHy7KA+TaGHzkndRYV68Y5Xa7/vJU8G06i1nLhyRRT99iRq0Dt6LawIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOX3C5pa1UTC9ECFv+dkIjYn3IElMB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvNWZjTG1sclZSTUwwUUlXXzUyUWlOaWZjZ1NVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAjQsAAwQA
jQscAwQAjQtnAwQAjQvzMA0GCSqGSIb3DQEBCwUAA4IBAQAM1pbWGZLguNO3p/zj
RAAE6QcOKmr+521X/y0Mkcv7b89HztINWvrAAsZMzOxx33oI72WjrS5oEkbuBh2W
Du2o2hPdR6rcBMins4sYG6sz5qTiyLq2eW+hZive5z6jJ+hDJQDl6JNMqbs/hByk
MK+yZOxRaOmbQmO87ozKGVA9x07CtVd8kY1kWmhZzYlh81Laxhc1p+z/AP558t8R
bTZQWVlr2j6mvx+BEcl8RiglCBbe6yns3Pl2psyDZ164brX+sYfhj1wYfik0J3Hl
/SiNKwfrupA+Mdsuhj7eRfAnUzlc9PWdsJb/kfIY9CKBclvkBCvtwOiNNJgoaMLW
4rcM
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org