Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/GFR-6hNFDzDM0LyICdh7NadQo1w.roa
File: GFR-6hNFDzDM0LyICdh7NadQo1w.roa (raw, json)
Hash identifier: +tjVKPKYa3sckLdfDf+C2uZn1mpMPEtlD3ChlqrYS6E=
Subject key identifier: 18:54:7E:EA:13:45:0F:30:CC:D0:BC:88:09:D8:7B:35:A7:50:A3:5C
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0486FFE2
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/GFR-6hNFDzDM0LyICdh7NadQo1w.roa
Signing time: Tue 10 May 2022 10:13:03 +0000
ROA not before: Tue 10 May 2022 10:13:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59432
IP address blocks: 141.11.72.0/23 maxlen: 24
141.11.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75956194 (0x486ffe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 10 10:13:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18547eea13450f30ccd0bc8809d87b35a750a35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:de:fa:57:3a:f9:98:00:6e:85:ef:b6:b5:37:
68:ae:bd:5f:11:e8:1d:85:01:3d:3f:f6:1b:94:47:
8d:a7:d8:4b:01:29:8c:83:90:54:80:94:84:33:e0:
2e:40:ee:ed:47:51:ed:50:44:93:9f:26:00:e6:34:
4e:fd:2f:01:ec:bb:71:e6:f5:e6:25:f1:89:20:83:
8a:4e:16:84:5a:fd:f8:b4:af:69:2b:75:30:24:f6:
2d:67:b1:38:e7:6d:5c:8e:9c:e5:7e:36:c0:ee:a9:
57:f5:ae:1b:6d:38:4a:6d:17:60:fc:85:9b:24:b9:
8e:2e:15:ed:e1:34:59:0b:64:88:de:ab:3d:05:b3:
1e:59:2f:cd:33:d1:b0:7f:c6:08:ab:a9:0d:13:b4:
2d:f3:86:38:b0:55:67:f3:1f:4d:88:dc:79:58:3c:
1f:d5:b6:12:40:17:36:f1:e5:f9:8e:82:c6:08:65:
81:3d:7a:6d:97:ba:64:9d:34:e5:62:c2:b5:12:ea:
7c:e0:1a:1d:8c:d7:a2:77:fc:ba:eb:1f:bc:2d:f6:
a4:20:ca:23:5c:39:15:68:57:c2:ba:24:4a:e5:87:
76:72:d1:8d:8b:6a:e2:97:97:b1:c6:ee:54:c9:8e:
9a:71:48:7b:ab:2e:46:f5:bc:46:df:f8:da:72:32:
fc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:54:7E:EA:13:45:0F:30:CC:D0:BC:88:09:D8:7B:35:A7:50:A3:5C
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/GFR-6hNFDzDM0LyICdh7NadQo1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.72.0/23
141.11.224.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:46:7a:0c:43:fb:5e:23:92:0a:0b:48:03:43:f4:1e:91:78:
96:b9:0c:80:1f:20:af:83:f0:29:bf:ed:ce:79:8d:76:0f:e8:
c3:aa:05:d0:24:ce:9d:6b:5f:67:0a:3a:17:0a:3a:87:c6:2e:
1d:db:30:94:f4:e5:0f:85:de:02:d7:b7:09:8b:e8:a2:2e:9d:
db:4b:04:27:f9:8e:95:77:98:e6:1f:2e:7e:2e:56:12:97:36:
f6:2a:00:e6:8a:18:23:3f:ab:28:f8:fe:1f:00:b0:6a:58:4d:
fc:0d:9c:74:e3:d4:09:40:b7:ac:e6:86:92:a9:32:c0:a3:21:
dc:75:78:81:38:d3:07:94:60:53:95:44:ae:b2:ac:39:6e:b4:
b9:19:79:bf:1c:38:ee:b5:10:aa:c9:da:f0:21:ea:73:15:2c:
eb:ea:2c:f8:0f:1c:16:b9:6e:ed:c8:eb:a2:c8:91:88:ca:43:
d8:e2:85:69:c0:5d:00:1c:04:4a:69:0c:ce:ef:a7:85:58:f6:
61:52:e0:7c:55:63:d8:fa:c0:91:93:a1:fd:07:2d:44:85:ec:
ee:ae:a3:89:85:6b:ab:5b:78:ac:ae:a2:d0:90:de:4a:cd:e9:
d7:87:94:21:1f:4e:0e:ab:31:71:bd:47:15:12:53:6f:c6:0e:
72:a7:48:c0
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBIb/4jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDUx
MDEwMTMwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTg1NDdlZWExMzQ1
MGYzMGNjZDBiYzg4MDlkODdiMzVhNzUwYTM1YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIPe+lc6+ZgAboXvtrU3aK69XxHoHYUBPT/2G5RHjafYSwEp
jIOQVICUhDPgLkDu7UdR7VBEk58mAOY0Tv0vAey7ceb15iXxiSCDik4WhFr9+LSv
aSt1MCT2LWexOOdtXI6c5X42wO6pV/WuG204Sm0XYPyFmyS5ji4V7eE0WQtkiN6r
PQWzHlkvzTPRsH/GCKupDRO0LfOGOLBVZ/MfTYjceVg8H9W2EkAXNvHl+Y6Cxghl
gT16bZe6ZJ005WLCtRLqfOAaHYzXonf8uusfvC32pCDKI1w5FWhXwrokSuWHdnLR
jYtq4peXscbuVMmOmnFIe6suRvW8Rt/42nIy/LsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQYVH7qE0UPMMzQvIgJ2Hs1p1CjXDAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L0dGUi02aE5GRHpETTBMeUlDZGg3TmFkUW8xdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAY0LSAMEAo0L4DANBgkqhkiG9w0B
AQsFAAOCAQEAXUZ6DEP7XiOSCgtIA0P0HpF4lrkMgB8gr4PwKb/tznmNdg/ow6oF
0CTOnWtfZwo6Fwo6h8YuHdswlPTlD4XeAte3CYvooi6d20sEJ/mOlXeY5h8ufi5W
Epc29ioA5ooYIz+rKPj+HwCwalhN/A2cdOPUCUC3rOaGkqkywKMh3HV4gTjTB5Rg
U5VErrKsOW60uRl5vxw47rUQqsna8CHqcxUs6+os+A8cFrlu7cjrosiRiMpD2OKF
acBdABwESmkMzu+nhVj2YVLgfFVj2PrAkZOh/QctRIXs7q6jiYVrq1t4rK6i0JDe
Ss3p14eUIR9ODqsxcb1HFRJTb8YOcqdIwA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:20 2025 by rpki-client