Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/MKKlgP0M1sOGpzAa86gnnGr9KFQ.roa
File: MKKlgP0M1sOGpzAa86gnnGr9KFQ.roa (raw, json)
Hash identifier: zkefI4f0C2R+24RMU/Q8beHLjJQ56prqth4JbwbJxS4=
Subject key identifier: 30:A2:A5:80:FD:0C:D6:C3:86:A7:30:1A:F3:A8:27:9C:6A:FD:28:54
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0183798390745C62D8379C3A1AD1B5E08CE8
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/MKKlgP0M1sOGpzAa86gnnGr9KFQ.roa
Signing time: Mon 26 Sep 2022 11:16:48 +0000
ROA not before: Mon 26 Sep 2022 11:16:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.11.44.0/22 maxlen: 24
141.11.40.0/22 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.42.0/24 maxlen: 24
141.11.41.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.10.0/23 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.22.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.33.0/24 maxlen: 24
141.11.32.0/24 maxlen: 24
141.11.160.0/24 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.189.0/24 maxlen: 24
141.11.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:79:83:90:74:5c:62:d8:37:9c:3a:1a:d1:b5:e0:8c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 26 11:16:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30a2a580fd0cd6c386a7301af3a8279c6afd2854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b1:6f:eb:63:53:76:29:09:03:88:11:72:b8:
e3:62:8f:ec:cd:82:14:b1:f5:3a:8f:d6:23:64:9e:
8f:61:16:4f:4f:2e:40:70:28:68:9e:d8:16:85:70:
5a:96:0d:a3:4f:57:d2:c3:51:55:38:0e:0a:27:4e:
5b:c7:d2:bf:da:72:07:fc:e5:7d:b8:c9:8c:26:cd:
6f:65:c5:ae:2f:82:3e:6b:59:bb:17:fd:b8:0d:7a:
9c:83:59:4e:f6:ae:3d:4d:32:e5:37:b2:58:c9:cb:
40:32:f0:45:50:34:f3:c3:5c:2c:50:6d:d1:98:1a:
46:0a:3f:73:23:97:b4:1e:da:a4:2d:b3:0b:e0:0a:
a7:e2:9d:56:42:20:fe:a1:b8:aa:92:7a:f4:4f:b0:
60:78:8e:4b:f8:6d:20:36:b8:8d:4c:d8:b2:e3:39:
e5:67:cc:f0:9f:6a:95:53:9b:02:dc:ed:80:a3:79:
d7:fc:d7:a5:64:b3:07:ad:e3:20:43:74:1f:d7:43:
c1:f9:c2:6c:02:14:02:a2:94:30:87:e4:9d:01:32:
a1:83:cb:95:d5:f8:ac:51:44:be:de:40:d8:76:9d:
42:69:92:ae:de:3f:8e:e2:dc:37:8f:6e:6b:8f:41:
9e:01:bf:e2:db:15:05:b3:9d:2e:e0:42:da:9c:99:
b2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A2:A5:80:FD:0C:D6:C3:86:A7:30:1A:F3:A8:27:9C:6A:FD:28:54
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/MKKlgP0M1sOGpzAa86gnnGr9KFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.2.0/24
141.11.10.0/23
141.11.17.0-141.11.18.255
141.11.22.0/24
141.11.25.0/24
141.11.31.0-141.11.33.255
141.11.39.0-141.11.47.255
141.11.160.0/24
141.11.176.0/24
141.11.182.0/23
141.11.187.0/24
141.11.189.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:3d:66:b2:62:9f:73:74:03:0a:c6:57:b9:2d:23:c8:7b:04:
56:89:b0:13:1e:1f:49:91:ac:f9:c9:f3:ae:90:27:50:18:72:
21:a9:0d:a8:cc:56:be:a2:ea:29:49:10:31:53:ca:55:4a:30:
2b:ef:36:1a:88:95:48:06:78:70:f6:80:56:23:b6:b1:a5:c2:
c1:99:2f:98:c4:51:85:8c:05:3f:68:0d:20:7d:41:37:d6:cb:
e4:b0:92:4c:39:c4:f3:66:48:cd:60:30:38:02:0d:73:12:96:
6d:98:a1:c9:8f:64:f6:e1:f4:9a:fc:c7:8a:ed:ca:9b:45:22:
f3:4f:54:7f:c6:c2:30:16:1b:91:24:e4:80:88:bb:8d:a2:b8:
cb:b5:43:e6:a9:8e:2d:8f:56:9e:e1:88:05:97:67:42:56:cb:
29:f6:f9:8c:85:7d:f6:54:02:f4:07:4e:a8:99:e9:1f:2b:8f:
e9:dc:97:03:3d:c4:84:36:65:67:d9:3b:f7:63:64:79:91:b2:
df:d8:a7:02:88:0f:fa:09:e0:ea:ac:ea:68:84:2b:86:9f:a5:
55:7e:99:c4:55:ca:5f:73:de:99:15:05:6b:8c:2b:4d:bd:b2:
47:7f:ba:45:62:3c:4f:21:a3:4a:b9:f4:76:62:18:f9:a9:38:
e2:be:e2:1f
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAYN5g5B0XGLYN5w6GtG14IzoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIwOTI2MTExNjQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGEyYTU4MGZkMGNkNmMzODZhNzMwMWFmM2E4Mjc5YzZhZmQyODU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbFv62NTdikJA4gRcrjjYo/szYIU
sfU6j9YjZJ6PYRZPTy5AcChontgWhXBalg2jT1fSw1FVOA4KJ05bx9K/2nIH/OV9
uMmMJs1vZcWuL4I+a1m7F/24DXqcg1lO9q49TTLlN7JYyctAMvBFUDTzw1wsUG3R
mBpGCj9zI5e0HtqkLbML4Aqn4p1WQiD+obiqknr0T7BgeI5L+G0gNriNTNiy4znl
Z8zwn2qVU5sC3O2Ao3nX/NelZLMHreMgQ3Qf10PB+cJsAhQCopQwh+SdATKhg8uV
1fisUUS+3kDYdp1CaZKu3j+O4tw3j25rj0GeAb/i2xUFs50u4ELanJmyVQIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFDCipYD9DNbDhqcwGvOoJ5xq/ShUMB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvTUtLbGdQME0xc09HcHpBYTg2Z25uR3I5S0ZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQAjQsCAwQB
jQsKMAwDBACNCxEDBACNCxIDBACNCxYDBACNCxkwDAMEAI0LHwMEAY0LIDAMAwQA
jQsnAwQEjQsgAwQAjQugAwQAjQuwAwQBjQu2AwQAjQu7AwQAjQu9MA0GCSqGSIb3
DQEBCwUAA4IBAQBbPWayYp9zdAMKxle5LSPIewRWibATHh9Jkaz5yfOukCdQGHIh
qQ2ozFa+ouopSRAxU8pVSjAr7zYaiJVIBnhw9oBWI7axpcLBmS+YxFGFjAU/aA0g
fUE31svksJJMOcTzZkjNYDA4Ag1zEpZtmKHJj2T24fSa/MeK7cqbRSLzT1R/xsIw
FhuRJOSAiLuNorjLtUPmqY4tj1ae4YgFl2dCVssp9vmMhX32VAL0B06omekfK4/p
3JcDPcSENmVn2Tv3Y2R5kbLf2KcCiA/6CeDqrOpohCuGn6VVfpnEVcpfc96ZFQVr
jCtNvbJHf7pFYjxPIaNKufR2Yhj5qTjivuIf
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:31 2025 by rpki-client