Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/VMQseDQcybvlPqhgw-4Zd7K07bY.roa
File: VMQseDQcybvlPqhgw-4Zd7K07bY.roa (raw, json)
Hash identifier: Wy8hz7RnWd4dX31ITHgqdJJL7DQOon3TrkRRfZjxXuM=
Subject key identifier: 54:C4:2C:78:34:1C:C9:BB:E5:3E:A8:60:C3:EE:19:77:B2:B4:ED:B6
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0181CE2A470565212CE0C851B9F16E6C9632
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/VMQseDQcybvlPqhgw-4Zd7K07bY.roa
Signing time: Tue 05 Jul 2022 11:41:25 +0000
ROA not before: Tue 05 Jul 2022 11:41:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 141.11.74.0/23 maxlen: 24
141.11.86.0/23 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.234.0/23 maxlen: 24
141.11.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ce:2a:47:05:65:21:2c:e0:c8:51:b9:f1:6e:6c:96:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 5 11:41:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54c42c78341cc9bbe53ea860c3ee1977b2b4edb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:99:2f:3d:1e:61:08:6d:e1:ea:5b:c3:fb:a3:
e5:74:87:f1:f1:86:39:cd:5f:9f:9d:ae:8d:38:d1:
4e:f8:a3:a7:19:b3:fa:1a:3b:20:bd:32:18:38:40:
8b:43:55:3c:42:70:88:a1:1c:80:24:f8:a8:95:bc:
7d:28:7a:66:ed:40:ae:a2:eb:d2:8c:03:7f:88:43:
5c:7b:16:c3:ba:ec:1a:39:e3:3c:3f:e1:28:51:fc:
ab:84:d0:79:33:f9:ad:57:69:05:85:35:55:08:c2:
e2:69:b6:b1:64:49:14:cb:88:5c:a9:13:26:28:16:
7c:b5:6d:4a:ed:67:6c:2e:81:c1:4a:91:e6:26:56:
e6:49:6d:00:df:6c:8b:22:21:35:90:e7:43:12:58:
42:7e:ad:a5:18:ca:5b:13:f9:dc:d4:6e:77:0a:07:
36:ea:17:1a:1e:52:aa:39:1a:5a:15:fd:fa:12:9a:
4d:3e:03:d9:a1:dc:29:2c:59:72:3f:19:5b:0a:14:
e7:8a:25:a8:d2:de:4d:de:15:8f:4b:fc:7c:39:b2:
ec:2f:7d:2a:4a:82:cd:92:9e:0d:02:6b:4a:9a:5f:
f6:99:7d:1a:df:cf:e0:72:a1:a3:96:ba:5d:7e:fb:
60:76:64:64:ba:1d:25:7d:7f:91:ed:36:41:42:78:
c9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C4:2C:78:34:1C:C9:BB:E5:3E:A8:60:C3:EE:19:77:B2:B4:ED:B6
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/VMQseDQcybvlPqhgw-4Zd7K07bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
141.11.74.0/23
141.11.86.0/23
141.11.144.0/21
141.11.234.0/23
Signature Algorithm: sha256WithRSAEncryption
36:c2:39:78:f6:4b:a8:bb:bd:4e:7e:56:2a:27:d1:ac:78:29:
bd:45:7e:d2:41:65:14:57:39:4d:5d:a4:ca:f4:e1:5a:d3:2b:
50:d4:b0:82:20:de:d4:bc:7c:2a:11:d3:b9:87:2a:3b:8b:63:
d9:48:d9:ae:5f:69:cc:ca:a9:cf:74:fc:11:7f:0a:86:3f:24:
f6:a8:2b:82:a7:53:14:59:90:08:f1:a0:35:61:bd:2a:c7:b3:
e7:5d:8c:f4:09:63:45:c7:69:39:80:00:04:f3:4a:c9:96:cc:
35:93:5e:e5:1a:6e:9d:22:3d:28:c1:77:4c:5b:7b:93:20:f7:
a5:bd:5b:c6:e2:1d:25:27:d2:9f:95:8a:64:19:49:f7:e1:38:
82:23:4b:3d:d9:51:b9:33:4d:32:4f:18:65:db:3a:07:2b:2a:
1c:82:97:2b:41:e8:97:8f:27:92:d7:21:23:de:97:40:a2:0b:
81:b6:f3:b0:84:00:90:9b:bb:ba:e3:ce:01:b6:39:aa:ab:23:
90:b5:71:e5:a9:41:10:d7:31:35:3c:d7:b1:99:25:08:f0:44:
65:e2:95:54:f3:3e:72:bf:de:cf:c7:34:57:a6:a8:70:be:61:
b5:04:58:06:5d:8c:77:91:d5:ca:a8:59:aa:88:e3:bd:c0:83:
56:a1:80:68
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYHOKkcFZSEs4MhRufFubJYyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIwNzA1MTE0MTI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGM0MmM3ODM0MWNjOWJiZTUzZWE4NjBjM2VlMTk3N2IyYjRlZGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJkvPR5hCG3h6lvD+6PldIfx8YY5
zV+fna6NONFO+KOnGbP6GjsgvTIYOECLQ1U8QnCIoRyAJPiolbx9KHpm7UCuouvS
jAN/iENcexbDuuwaOeM8P+EoUfyrhNB5M/mtV2kFhTVVCMLiabaxZEkUy4hcqRMm
KBZ8tW1K7WdsLoHBSpHmJlbmSW0A32yLIiE1kOdDElhCfq2lGMpbE/nc1G53Cgc2
6hcaHlKqORpaFf36EppNPgPZodwpLFlyPxlbChTniiWo0t5N3hWPS/x8ObLsL30q
SoLNkp4NAmtKml/2mX0a38/gcqGjlrpdfvtgdmRkuh0lfX+R7TZBQnjJGQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFFTELHg0HMm75T6oYMPuGXeytO22MB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvVk1Rc2VEUWN5YnZsUHFoZ3ctNFpkN0swN2JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAjQsBAwQB
jQtKAwQBjQtWAwQDjQuQAwQBjQvqMA0GCSqGSIb3DQEBCwUAA4IBAQA2wjl49kuo
u71OflYqJ9GseCm9RX7SQWUUVzlNXaTK9OFa0ytQ1LCCIN7UvHwqEdO5hyo7i2PZ
SNmuX2nMyqnPdPwRfwqGPyT2qCuCp1MUWZAI8aA1Yb0qx7PnXYz0CWNFx2k5gAAE
80rJlsw1k17lGm6dIj0owXdMW3uTIPelvVvG4h0lJ9KflYpkGUn34TiCI0s92VG5
M00yTxhl2zoHKyocgpcrQeiXjyeS1yEj3pdAoguBtvOwhACQm7u6484BtjmqqyOQ
tXHlqUEQ1zE1PNexmSUI8ERl4pVU8z5yv97PxzRXpqhwvmG1BFgGXYx3kdXKqFmq
iOO9wINWoYBo
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:53 2024 by rpki-client on console-fra.rpki-client.org