Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Dl9sJy_kleKAjFeAp8s9yLFAlVU.roa
File: Dl9sJy_kleKAjFeAp8s9yLFAlVU.roa (raw, json)
Hash identifier: a9TkktGa/C/MDhq3ccjq1p6xr4HV2jHF4EuMBwiQr7s=
Subject key identifier: 0E:5F:6C:27:2F:E4:95:E2:80:8C:57:80:A7:CB:3D:C8:B1:40:95:55
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01828E15611F4B0F7105B00DC0BAABB84B43
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Dl9sJy_kleKAjFeAp8s9yLFAlVU.roa
Signing time: Thu 11 Aug 2022 18:05:41 +0000
ROA not before: Thu 11 Aug 2022 18:05:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.11.44.0/22 maxlen: 24
141.11.40.0/22 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.42.0/24 maxlen: 24
141.11.41.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.0.0/24 maxlen: 24
141.11.10.0/23 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.22.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.37.0/24 maxlen: 24
141.11.33.0/24 maxlen: 24
141.11.35.0/24 maxlen: 24
141.11.32.0/24 maxlen: 24
141.11.152.0/22 maxlen: 24
141.11.160.0/24 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8e:15:61:1f:4b:0f:71:05:b0:0d:c0:ba:ab:b8:4b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Aug 11 18:05:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e5f6c272fe495e2808c5780a7cb3dc8b1409555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b9:cd:75:7c:8c:fd:d0:e0:22:5a:44:19:08:
a4:a8:52:20:a9:47:ae:b3:d1:19:93:ee:3b:29:db:
94:a1:f7:cc:21:2a:68:d9:33:36:c3:96:15:28:18:
87:93:76:a0:45:c6:2d:e6:a4:d3:da:2b:9e:81:2c:
ac:f8:ba:1e:f3:8d:89:a0:1c:27:90:e9:8c:7c:57:
f6:79:16:64:c5:c6:fe:3b:a3:e7:94:c6:67:58:93:
0a:51:35:6f:12:80:bf:69:11:40:28:fb:7c:ba:fa:
b0:15:b6:c4:10:79:e6:04:e0:44:60:48:2d:9f:fc:
b4:d9:cc:0a:9d:38:44:49:af:98:ac:1a:4d:5c:11:
09:25:50:61:94:f2:19:07:91:1f:5c:26:66:38:45:
62:ee:ff:01:7e:b6:70:93:97:52:9d:85:f3:3b:f5:
3f:d3:d6:fb:c8:66:a0:4c:20:d1:65:4b:eb:7e:78:
5b:4b:2c:70:95:aa:53:2a:c1:4c:48:b6:9b:78:be:
af:77:6b:f4:5b:e8:d2:18:5f:06:36:18:8a:c2:fe:
b9:63:ee:50:dd:48:db:3c:c5:a5:aa:55:70:ad:40:
46:ff:28:74:14:65:38:a1:55:22:ba:b0:34:f5:c6:
a6:9e:68:e4:bc:e4:57:12:55:be:2e:65:fb:bc:28:
ee:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5F:6C:27:2F:E4:95:E2:80:8C:57:80:A7:CB:3D:C8:B1:40:95:55
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Dl9sJy_kleKAjFeAp8s9yLFAlVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0-141.11.2.255
141.11.10.0/23
141.11.17.0-141.11.18.255
141.11.21.0-141.11.22.255
141.11.25.0/24
141.11.28.0/24
141.11.31.0-141.11.33.255
141.11.35.0/24
141.11.37.0/24
141.11.39.0-141.11.47.255
141.11.99.0/24
141.11.152.0/22
141.11.160.0/24
141.11.176.0/24
141.11.182.0/23
Signature Algorithm: sha256WithRSAEncryption
33:e4:61:1d:d7:bc:7b:35:29:69:47:15:fa:07:91:0a:29:cd:
28:f2:63:9e:62:45:99:6e:20:1c:ae:f5:f9:fb:a6:95:37:04:
00:55:5a:ad:63:aa:2d:de:34:28:9f:2b:65:a2:ee:19:9f:fd:
92:e4:28:c0:23:bd:ac:15:fd:bb:9c:e9:99:dd:1b:f8:ef:ba:
ab:77:b3:5c:b1:18:66:76:ff:c2:9b:e8:fe:6a:05:5c:2b:65:
3c:21:f3:fe:5c:40:82:b1:3e:68:ca:80:85:70:64:5e:75:16:
d1:0a:a7:f1:82:5b:87:01:36:55:cd:17:c2:9d:5e:44:47:74:
65:a0:98:e2:8d:b4:46:d3:5c:f6:a9:83:1d:ce:5e:a0:38:90:
86:ff:28:ea:17:35:49:b4:a3:65:28:54:53:e5:8c:71:2f:4c:
12:7e:ff:3c:40:45:e2:f8:29:89:ed:a9:8d:fd:07:19:30:29:
e6:e5:5e:e9:70:49:1d:43:99:5b:c0:48:02:5a:cd:5a:7c:b0:
70:cc:4c:cb:6a:86:3a:de:13:02:ac:0f:84:71:59:7e:1e:fd:
98:6a:33:b0:bd:71:43:83:25:c9:db:ea:21:9f:19:af:49:c9:
0c:a8:06:2d:26:63:cc:80:37:25:af:90:62:27:b8:10:5a:32:
b4:69:f2:38
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgISAYKOFWEfSw9xBbANwLqruEtDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIwODExMTgwNTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTVmNmMyNzJmZTQ5NWUyODA4YzU3ODBhN2NiM2RjOGIxNDA5NTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7nNdXyM/dDgIlpEGQikqFIgqUeu
s9EZk+47KduUoffMISpo2TM2w5YVKBiHk3agRcYt5qTT2iuegSys+Loe842JoBwn
kOmMfFf2eRZkxcb+O6PnlMZnWJMKUTVvEoC/aRFAKPt8uvqwFbbEEHnmBOBEYEgt
n/y02cwKnThESa+YrBpNXBEJJVBhlPIZB5EfXCZmOEVi7v8BfrZwk5dSnYXzO/U/
09b7yGagTCDRZUvrfnhbSyxwlapTKsFMSLabeL6vd2v0W+jSGF8GNhiKwv65Y+5Q
3UjbPMWlqlVwrUBG/yh0FGU4oVUiurA09camnmjkvORXElW+LmX7vCjulwIDAQAB
o4ICiTCCAoUwHQYDVR0OBBYEFA5fbCcv5JXigIxXgKfLPcixQJVVMB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvRGw5c0p5X2tsZUtBakZlQXA4czl5TEZBbFZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGeBggrBgEFBQcBBwEB/wSBjjCBizCBiAQCAAEwgYEwCwMD
AI0LAwQAjQsCAwQBjQsKMAwDBACNCxEDBACNCxIwDAMEAI0LFQMEAI0LFgMEAI0L
GQMEAI0LHDAMAwQAjQsfAwQBjQsgAwQAjQsjAwQAjQslMAwDBACNCycDBASNCyAD
BACNC2MDBAKNC5gDBACNC6ADBACNC7ADBAGNC7YwDQYJKoZIhvcNAQELBQADggEB
ADPkYR3XvHs1KWlHFfoHkQopzSjyY55iRZluIByu9fn7ppU3BABVWq1jqi3eNCif
K2Wi7hmf/ZLkKMAjvawV/buc6ZndG/jvuqt3s1yxGGZ2/8Kb6P5qBVwrZTwh8/5c
QIKxPmjKgIVwZF51FtEKp/GCW4cBNlXNF8KdXkRHdGWgmOKNtEbTXPapgx3OXqA4
kIb/KOoXNUm0o2UoVFPljHEvTBJ+/zxAReL4KYntqY39BxkwKeblXulwSR1DmVvA
SAJazVp8sHDMTMtqhjreEwKsD4RxWX4e/ZhqM7C9cUODJcnb6iGfGa9JyQyoBi0m
Y8yANyWvkGInuBBaMrRp8jg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:53 2024 by rpki-client on console-fra.rpki-client.org