Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Xt2vHOBuxyYOfVMiXkOxfNLJ3JA.roa
File: Xt2vHOBuxyYOfVMiXkOxfNLJ3JA.roa (raw, json)
Hash identifier: RKLttq7wrZsmyFmaF/v9B5ZaLMVKmls0NMSqLGaHJv8=
Subject key identifier: 5E:DD:AF:1C:E0:6E:C7:26:0E:7D:53:22:5E:43:B1:7C:D2:C9:DC:90
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 018321F1E371E3959B7649DCCE30AE8155C4
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Xt2vHOBuxyYOfVMiXkOxfNLJ3JA.roa
Signing time: Fri 09 Sep 2022 11:10:43 +0000
ROA not before: Fri 09 Sep 2022 11:10:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211619
IP address blocks: 141.11.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:21:f1:e3:71:e3:95:9b:76:49:dc:ce:30:ae:81:55:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 9 11:10:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5eddaf1ce06ec7260e7d53225e43b17cd2c9dc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8f:58:2f:cc:3a:52:36:28:0e:e2:53:82:b7:
00:88:05:7c:e5:6b:d9:23:51:bd:8b:21:93:32:90:
ce:0a:b6:90:d7:a5:23:5b:d4:78:2c:e6:d9:70:ed:
c6:71:09:5f:47:83:e7:67:74:a0:e2:fc:55:57:c7:
81:b3:e7:43:c2:cf:6c:df:71:c9:c7:c4:35:de:dd:
04:15:d5:4b:8b:1c:82:2a:4f:a4:d4:bc:5e:2a:e0:
bf:f2:58:0f:aa:57:ed:ce:fc:fa:34:b3:77:5e:40:
09:ef:35:2a:f9:af:46:51:de:ce:b0:67:82:4f:7e:
da:39:50:5f:7c:9a:cd:5d:e7:d8:a7:e6:d4:a8:95:
a0:93:81:21:5a:d5:5c:e7:0c:e7:41:c9:20:86:c9:
38:e9:dd:21:56:ec:bd:8f:79:49:f3:89:04:ca:08:
28:8a:a6:52:dd:62:6a:f7:2d:b7:eb:cd:c9:8e:33:
2b:39:29:de:0a:c8:07:be:f8:68:b6:f4:5a:f9:1b:
2c:65:a3:0c:60:ad:31:c4:ec:91:f4:00:e2:b4:b3:
6a:18:b0:56:fc:c1:cf:74:0a:ee:ce:d6:30:03:65:
28:63:b1:d2:d5:54:3e:4f:d4:0b:29:6f:5d:6f:fc:
d0:45:75:52:3b:e5:6d:b1:f9:1e:88:5e:de:d7:e2:
a8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DD:AF:1C:E0:6E:C7:26:0E:7D:53:22:5E:43:B1:7C:D2:C9:DC:90
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Xt2vHOBuxyYOfVMiXkOxfNLJ3JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.35.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:2c:b4:bd:11:1f:b2:fd:6d:ef:95:e7:dd:32:1a:44:e1:60:
97:84:73:e0:62:e5:f3:8a:2d:9e:43:dc:df:d7:77:9c:db:91:
ca:d2:d1:69:ef:dd:c4:87:88:4c:dc:1d:28:d4:4d:59:83:c2:
2e:67:92:b2:4b:9f:5e:3a:ba:23:f7:c4:c2:24:0e:cd:0e:ef:
18:43:31:81:ea:7a:e1:f3:9f:cc:49:49:3c:8f:dc:1e:3e:ce:
a6:97:0a:2b:50:cf:66:c2:c6:7c:0a:1b:13:74:50:71:46:d5:
34:98:be:ff:da:77:01:75:b6:56:7b:28:ac:02:bf:83:f6:c1:
85:70:9c:50:db:68:04:00:e5:9c:67:a6:da:1f:d7:a0:ac:34:
20:c5:2c:5f:29:f1:94:df:6b:03:02:36:84:15:09:5a:5c:5a:
6f:fc:a1:f5:75:5d:2d:19:55:23:36:73:18:c6:20:86:5a:74:
6d:2e:86:b2:7b:92:c2:e5:4d:32:78:ef:77:4c:4d:e4:cf:4d:
85:b1:85:6b:ba:f3:1e:01:56:14:48:cd:da:ce:f7:b1:be:c2:
01:66:f0:df:00:ab:63:12:d9:46:4c:8b:b6:dd:da:47:8b:17:
31:90:9e:09:17:e0:9f:c1:6d:9e:6c:ed:71:62:56:e3:94:6e:
13:d5:a8:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYMh8eNx45WbdknczjCugVXEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIwOTA5MTExMDQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWRkYWYxY2UwNmVjNzI2MGU3ZDUzMjI1ZTQzYjE3Y2QyYzlkYzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI9YL8w6UjYoDuJTgrcAiAV85WvZ
I1G9iyGTMpDOCraQ16UjW9R4LObZcO3GcQlfR4PnZ3Sg4vxVV8eBs+dDws9s33HJ
x8Q13t0EFdVLixyCKk+k1LxeKuC/8lgPqlftzvz6NLN3XkAJ7zUq+a9GUd7OsGeC
T37aOVBffJrNXefYp+bUqJWgk4EhWtVc5wznQckghsk46d0hVuy9j3lJ84kEyggo
iqZS3WJq9y23683JjjMrOSneCsgHvvhotvRa+RssZaMMYK0xxOyR9ADitLNqGLBW
/MHPdAruztYwA2UoY7HS1VQ+T9QLKW9db/zQRXVSO+VtsfkeiF7e1+KoVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF7drxzgbscmDn1TIl5DsXzSydyQMB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvWHQydkhPQnV4eVlPZlZNaVhrT3hmTkxKM0pBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQsjMA0G
CSqGSIb3DQEBCwUAA4IBAQAuLLS9ER+y/W3vlefdMhpE4WCXhHPgYuXzii2eQ9zf
13ec25HK0tFp793Eh4hM3B0o1E1Zg8IuZ5KyS59eOroj98TCJA7NDu8YQzGB6nrh
85/MSUk8j9wePs6mlworUM9mwsZ8ChsTdFBxRtU0mL7/2ncBdbZWeyisAr+D9sGF
cJxQ22gEAOWcZ6baH9egrDQgxSxfKfGU32sDAjaEFQlaXFpv/KH1dV0tGVUjNnMY
xiCGWnRtLoaye5LC5U0yeO93TE3kz02FsYVruvMeAVYUSM3azvexvsIBZvDfAKtj
EtlGTIu23dpHixcxkJ4JF+CfwW2ebO1xYlbjlG4T1agb
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:43:48 2025 by rpki-client