Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/W7tjYPZyOeOJQun_BryKWbGO8rs.roa
File: W7tjYPZyOeOJQun_BryKWbGO8rs.roa (raw, json)
Hash identifier: jedGOH5waXrEICLl8OhVcswMh9W94tPSCfKowQciFlE=
Subject key identifier: 5B:BB:63:60:F6:72:39:E3:89:42:E9:FF:06:BC:8A:59:B1:8E:F2:BB
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0183837C0DCA17196C535F427F2A72AAC231
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/W7tjYPZyOeOJQun_BryKWbGO8rs.roa
Signing time: Wed 28 Sep 2022 09:44:48 +0000
ROA not before: Wed 28 Sep 2022 09:44:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 141.11.68.0/24 maxlen: 24
141.11.69.0/24 maxlen: 24
141.11.20.0/24 maxlen: 24
141.11.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:83:7c:0d:ca:17:19:6c:53:5f:42:7f:2a:72:aa:c2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 28 09:44:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bbb6360f67239e38942e9ff06bc8a59b18ef2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a3:5b:b7:67:27:68:c1:61:dc:22:d6:b4:dd:
b0:c2:21:d7:7e:9e:2a:b9:69:45:13:b1:c6:f9:a3:
fa:34:65:53:e8:85:ee:a6:58:38:00:e9:5d:58:5f:
58:90:48:34:eb:ed:19:f7:59:29:e4:dc:50:67:7d:
ee:e3:7b:f1:f1:7d:55:c7:27:7a:91:d1:7b:b1:e2:
c8:0d:38:f1:4a:c0:e4:a9:3d:77:48:4d:01:1b:5f:
52:1e:09:91:6e:dd:a2:db:8b:67:b6:a5:ab:73:92:
85:83:11:3e:f2:d1:58:94:f7:f4:05:65:ae:51:3e:
54:00:dc:c3:84:34:ba:0f:15:04:3e:61:d1:93:4f:
8f:da:aa:83:5b:f2:6f:f5:fb:a7:d4:06:13:bc:08:
81:7b:9f:32:5f:96:c1:d9:f3:fa:a0:ff:02:73:52:
d0:0c:26:de:91:5b:01:e8:45:a6:c5:bd:82:a5:e7:
71:0d:b9:d0:01:02:e6:c9:9c:d8:12:25:97:af:2d:
6f:8b:19:f1:a8:b1:52:64:ef:31:9d:48:b4:f5:ca:
fc:20:22:6d:9c:dc:10:51:5f:71:da:8f:3a:41:68:
5b:46:48:b1:30:5d:cc:75:11:4c:c1:d8:c1:58:99:
76:20:3e:bd:43:e8:92:a8:78:8e:c0:ca:68:66:13:
69:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BB:63:60:F6:72:39:E3:89:42:E9:FF:06:BC:8A:59:B1:8E:F2:BB
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/W7tjYPZyOeOJQun_BryKWbGO8rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.20.0/24
141.11.68.0/23
141.11.251.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:bc:2b:97:89:12:65:ae:9f:be:fb:81:4a:17:e0:60:a7:37:
2c:9c:e9:86:13:84:b7:78:3b:12:1f:f2:ac:d3:70:94:db:85:
69:e8:e2:08:27:60:bc:4d:19:fb:58:9d:e5:3a:0b:0e:32:31:
18:d0:09:59:e0:53:d4:e6:3e:ef:d8:c4:5d:62:59:fb:8f:02:
cd:d4:bb:2b:1c:50:85:69:ce:07:c5:c5:dd:78:63:ac:08:40:
17:88:c2:1a:72:7b:6c:84:83:de:c5:20:af:43:9d:87:5e:d4:
4e:2f:4b:17:a9:81:7b:a6:e9:77:96:d2:d2:cd:84:2d:4d:2e:
7a:11:e9:1d:4c:62:70:a6:50:d8:9f:a7:a9:be:47:70:5b:08:
f8:2d:c1:26:c0:a4:e0:2f:49:6c:4c:39:4f:17:5a:83:78:82:
7d:b6:77:03:af:17:39:1e:0e:34:e3:b6:fe:2a:bc:5d:33:c4:
5a:96:bf:5c:83:ee:f4:06:28:24:57:8d:07:06:aa:92:7d:0e:
e5:d1:e8:17:b8:5b:52:c6:bd:1c:ea:ce:2c:23:f8:c6:5c:d6:
6a:a1:27:e1:ab:08:a0:41:7e:4e:50:e2:1b:81:14:15:28:86:
fb:b6:73:42:83:be:46:f4:c0:85:60:5e:a3:15:38:de:68:c0:
67:96:39:ab
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYODfA3KFxlsU19CfypyqsIxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIwOTI4MDk0NDQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmJiNjM2MGY2NzIzOWUzODk0MmU5ZmYwNmJjOGE1OWIxOGVmMmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaNbt2cnaMFh3CLWtN2wwiHXfp4q
uWlFE7HG+aP6NGVT6IXuplg4AOldWF9YkEg06+0Z91kp5NxQZ33u43vx8X1Vxyd6
kdF7seLIDTjxSsDkqT13SE0BG19SHgmRbt2i24tntqWrc5KFgxE+8tFYlPf0BWWu
UT5UANzDhDS6DxUEPmHRk0+P2qqDW/Jv9fun1AYTvAiBe58yX5bB2fP6oP8Cc1LQ
DCbekVsB6EWmxb2CpedxDbnQAQLmyZzYEiWXry1vixnxqLFSZO8xnUi09cr8ICJt
nNwQUV9x2o86QWhbRkixMF3MdRFMwdjBWJl2ID69Q+iSqHiOwMpoZhNpXwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFu7Y2D2cjnjiULp/wa8ilmxjvK7MB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvVzd0allQWnlPZU9KUXVuX0JyeUtXYkdPOHJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAjQsUAwQB
jQtEAwQAjQv7MA0GCSqGSIb3DQEBCwUAA4IBAQAavCuXiRJlrp+++4FKF+Bgpzcs
nOmGE4S3eDsSH/Ks03CU24Vp6OIIJ2C8TRn7WJ3lOgsOMjEY0AlZ4FPU5j7v2MRd
Yln7jwLN1LsrHFCFac4HxcXdeGOsCEAXiMIacntshIPexSCvQ52HXtROL0sXqYF7
pul3ltLSzYQtTS56EekdTGJwplDYn6epvkdwWwj4LcEmwKTgL0lsTDlPF1qDeIJ9
tncDrxc5Hg4047b+KrxdM8Ralr9cg+70BigkV40HBqqSfQ7l0egXuFtSxr0c6s4s
I/jGXNZqoSfhqwigQX5OUOIbgRQVKIb7tnNCg75G9MCFYF6jFTjeaMBnljmr
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:49 2025 by rpki-client