Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/H06lQlgD_tb7sehzt9apxWqbbvo.roa
File: H06lQlgD_tb7sehzt9apxWqbbvo.roa (raw, json)
Hash identifier: aBFLNHMEKZaHQ57ltC+4pgbg+l5300b/qsYzQHSrI9U=
Subject key identifier: 1F:4E:A5:42:58:03:FE:D6:FB:B1:E8:73:B7:D6:A9:C5:6A:9B:6E:FA
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0181D2E0FB54E286802A4D6CECB39531E33D
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/H06lQlgD_tb7sehzt9apxWqbbvo.roa
Signing time: Wed 06 Jul 2022 09:39:28 +0000
ROA not before: Wed 06 Jul 2022 09:39:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 141.11.74.0/23 maxlen: 24
141.11.86.0/23 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.4.0/24 maxlen: 24
141.11.234.0/23 maxlen: 24
141.11.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d2:e0:fb:54:e2:86:80:2a:4d:6c:ec:b3:95:31:e3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 6 09:39:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f4ea5425803fed6fbb1e873b7d6a9c56a9b6efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0c:6d:ca:23:7b:1e:95:16:bf:94:ac:a7:8b:
e7:c0:af:00:82:9e:da:30:74:2d:5d:d9:9d:25:cf:
ce:84:e0:e7:11:13:df:90:14:4b:40:bb:8c:18:96:
8b:e6:be:9f:a0:e4:f6:d2:8e:fb:6d:02:0c:04:ed:
42:69:80:2f:58:3c:77:47:8c:51:c4:2f:6b:50:1d:
ab:dd:5e:7f:75:29:80:c9:08:54:ea:b0:76:e1:73:
fc:94:6a:d9:a9:dc:59:f1:28:07:83:cf:94:6f:3e:
dc:97:17:01:ab:bf:99:58:91:95:40:66:07:46:97:
9b:02:da:0f:a0:c1:7c:8c:9d:a3:88:df:3d:86:cd:
64:c6:bb:47:ee:b1:ad:9e:3c:56:c3:e5:d7:f7:7a:
2f:5a:0c:5a:20:1e:11:59:a6:40:b3:3d:09:1e:ed:
b7:3e:70:87:2c:ad:0b:54:83:2c:d2:05:ff:94:83:
76:e3:86:43:3a:f2:bd:53:a8:04:b2:fe:63:de:3f:
fe:01:c2:b1:b1:74:fe:78:2a:80:6c:3a:9c:b3:54:
dd:e1:f4:ed:86:41:6c:b1:e2:81:5b:1c:6b:ad:58:
6c:2b:b9:f4:07:30:c5:8e:c6:67:9a:a0:8b:23:26:
fc:1a:a7:d9:ba:4f:af:03:dc:8e:04:18:2b:57:55:
d8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4E:A5:42:58:03:FE:D6:FB:B1:E8:73:B7:D6:A9:C5:6A:9B:6E:FA
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/H06lQlgD_tb7sehzt9apxWqbbvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
141.11.4.0/24
141.11.74.0/23
141.11.86.0/23
141.11.144.0/21
141.11.234.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:2d:bf:93:e2:aa:be:ca:ef:bf:bb:e8:4c:69:54:8e:23:86:
cc:10:dc:bf:49:c0:2c:61:f2:54:d2:29:65:8e:ff:35:5c:b2:
e2:af:f2:17:53:86:8d:87:a5:e8:58:bc:2a:85:a3:a4:fb:26:
fb:d7:a7:bb:ef:83:08:af:0c:5b:81:7f:cc:29:d8:67:fe:3c:
12:7d:26:30:a3:d6:a0:63:f0:c7:d3:96:9a:13:98:25:92:c9:
ca:61:47:b9:7a:27:a3:a8:b9:12:a8:d5:54:fd:34:e0:52:98:
79:91:3a:11:fa:a7:e4:6b:7c:93:d3:e0:ad:84:81:8f:b4:cf:
6c:11:50:a3:8a:f8:6e:48:07:06:9b:7b:c6:ef:d0:8a:d7:19:
d0:82:f0:55:e2:7f:29:52:63:b2:75:14:c6:19:3a:c5:26:c6:
74:21:76:53:61:93:02:fa:4e:94:ab:60:b8:c0:0c:66:ba:37:
29:09:b2:49:45:76:31:9f:04:3e:ed:72:f8:7b:49:c0:32:b7:
e6:ed:01:2b:4f:1b:db:7d:7c:35:0a:05:4d:0d:7c:04:37:77:
ae:53:1a:65:0c:fb:7f:42:3a:73:6c:5d:7c:b5:b0:6e:21:85:
2e:87:be:d1:a0:52:67:ec:ce:a8:61:9f:ee:ba:08:55:08:3e:
51:8b:ba:de
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYHS4PtU4oaAKk1s7LOVMeM9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIwNzA2MDkzOTI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjRlYTU0MjU4MDNmZWQ2ZmJiMWU4NzNiN2Q2YTljNTZhOWI2ZWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAxtyiN7HpUWv5Ssp4vnwK8Agp7a
MHQtXdmdJc/OhODnERPfkBRLQLuMGJaL5r6foOT20o77bQIMBO1CaYAvWDx3R4xR
xC9rUB2r3V5/dSmAyQhU6rB24XP8lGrZqdxZ8SgHg8+Ubz7clxcBq7+ZWJGVQGYH
RpebAtoPoMF8jJ2jiN89hs1kxrtH7rGtnjxWw+XX93ovWgxaIB4RWaZAsz0JHu23
PnCHLK0LVIMs0gX/lIN244ZDOvK9U6gEsv5j3j/+AcKxsXT+eCqAbDqcs1Td4fTt
hkFsseKBWxxrrVhsK7n0BzDFjsZnmqCLIyb8GqfZuk+vA9yOBBgrV1XYWQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFB9OpUJYA/7W+7Hoc7fWqcVqm276MB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvSDA2bFFsZ0RfdGI3c2VoenQ5YXB4V3FiYnZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAjQsBAwQA
jQsEAwQBjQtKAwQBjQtWAwQDjQuQAwQBjQvqMA0GCSqGSIb3DQEBCwUAA4IBAQAa
Lb+T4qq+yu+/u+hMaVSOI4bMENy/ScAsYfJU0illjv81XLLir/IXU4aNh6XoWLwq
haOk+yb716e774MIrwxbgX/MKdhn/jwSfSYwo9agY/DH05aaE5glksnKYUe5eiej
qLkSqNVU/TTgUph5kToR+qfka3yT0+CthIGPtM9sEVCjivhuSAcGm3vG79CK1xnQ
gvBV4n8pUmOydRTGGTrFJsZ0IXZTYZMC+k6Uq2C4wAxmujcpCbJJRXYxnwQ+7XL4
e0nAMrfm7QErTxvbfXw1CgVNDXwEN3euUxplDPt/QjpzbF18tbBuIYUuh77RoFJn
7M6oYZ/uughVCD5Ri7re
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:40 2025 by rpki-client