Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Y_zWR8O97nOAtQyB7SPY4Gw1zI0.roa
File: Y_zWR8O97nOAtQyB7SPY4Gw1zI0.roa (raw, json)
Hash identifier: Nzk5mlRStDzsuGewiq1J6kQ0zCBjxQOP3u2F5Tw5e1M=
Subject key identifier: 63:FC:D6:47:C3:BD:EE:73:80:B5:0C:81:ED:23:D8:E0:6C:35:CC:8D
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0182C5BE3F79AA68CA1DDDCBE4D06D08FBE5
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Y_zWR8O97nOAtQyB7SPY4Gw1zI0.roa
Signing time: Mon 22 Aug 2022 13:29:15 +0000
ROA not before: Mon 22 Aug 2022 13:29:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 141.11.192.0/21 maxlen: 24
141.11.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c5:be:3f:79:aa:68:ca:1d:dd:cb:e4:d0:6d:08:fb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Aug 22 13:29:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63fcd647c3bdee7380b50c81ed23d8e06c35cc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:99:07:aa:82:9e:4d:de:0f:7e:6e:1c:78:10:
fd:fc:76:0f:65:c6:a4:7e:94:a7:12:fb:53:9e:4e:
40:cd:56:43:24:fa:a6:fa:14:65:1e:4a:e5:c6:10:
86:81:1a:de:93:38:c9:63:b5:ea:d9:fd:d4:a4:2d:
d6:77:9b:f2:7b:7a:ce:0e:11:74:18:e4:9b:ef:02:
3f:8d:24:83:58:92:ee:d8:ac:4a:7f:cb:22:dc:d3:
45:cb:64:d0:5c:86:1d:2d:31:39:98:66:78:d0:e7:
67:97:38:1b:77:34:27:d7:7c:90:bf:56:67:f7:62:
05:0d:f8:77:86:09:37:93:ee:02:1e:96:78:e3:5b:
a8:f1:96:b8:11:a6:40:47:5e:71:37:43:1f:5b:18:
01:f2:2c:4c:6c:fd:f6:eb:39:19:7e:3c:c9:11:bc:
e6:22:06:5f:e7:9d:bc:fb:bc:5a:fb:2c:6e:f5:d6:
ed:52:2d:e6:eb:52:a7:27:88:52:82:87:47:bf:29:
8e:06:98:91:92:03:d0:d1:d8:0a:69:0e:48:53:39:
4d:a2:63:6c:1e:ad:d7:84:8d:89:70:e8:3d:43:7b:
4e:58:95:98:cc:8d:d0:69:a5:5e:6c:b8:9f:fd:88:
8b:e9:f8:fb:a4:dc:9c:46:1c:77:0f:87:07:54:c6:
91:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FC:D6:47:C3:BD:EE:73:80:B5:0C:81:ED:23:D8:E0:6C:35:CC:8D
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Y_zWR8O97nOAtQyB7SPY4Gw1zI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.98.0/24
141.11.192.0/21
Signature Algorithm: sha256WithRSAEncryption
24:d9:fa:a9:ab:0f:06:76:7c:99:a1:03:7a:ab:98:4e:41:cf:
7f:07:eb:5d:c4:d7:31:dd:da:30:f5:d9:16:f2:16:42:63:bd:
4f:0d:1c:bd:ed:40:20:a4:09:18:2d:75:26:57:68:68:64:82:
19:f7:33:4c:70:3a:b4:40:3b:18:52:e5:11:18:a9:e7:82:80:
b7:10:18:21:d0:35:e2:4c:82:1d:ee:c5:6b:50:cb:3e:99:13:
81:4a:ea:2b:3a:6a:48:cc:fb:84:51:08:ee:e1:02:16:3f:b4:
81:da:d6:0a:bf:68:2f:7e:f1:e3:53:c5:2c:d0:d9:34:77:20:
82:3d:d4:09:81:97:73:e8:00:94:4d:e6:e0:70:cb:b4:44:54:
a2:8e:42:d1:3d:97:d1:e1:86:90:20:38:55:26:ad:5a:9e:ed:
0c:d9:d0:b1:89:aa:b8:11:09:37:7a:00:ef:1b:e8:f4:b2:6c:
05:2e:eb:3f:64:e8:9b:1f:46:f1:ea:33:b7:0a:20:de:1e:39:
5c:a4:9a:7f:4d:8d:fd:bf:e7:6a:91:06:1b:0a:52:57:fe:1f:
02:03:43:b9:ac:80:b7:4f:a2:f7:48:bd:6e:df:57:2f:5b:56:
71:ab:29:4b:b8:43:d5:4a:3f:5b:c5:32:35:dd:fb:8f:40:7f:
3d:eb:59:4c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYLFvj95qmjKHd3L5NBtCPvlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIwODIyMTMyOTE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2ZjZDY0N2MzYmRlZTczODBiNTBjODFlZDIzZDhlMDZjMzVjYzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pkHqoKeTd4Pfm4ceBD9/HYPZcak
fpSnEvtTnk5AzVZDJPqm+hRlHkrlxhCGgRrekzjJY7Xq2f3UpC3Wd5vye3rODhF0
GOSb7wI/jSSDWJLu2KxKf8si3NNFy2TQXIYdLTE5mGZ40OdnlzgbdzQn13yQv1Zn
92IFDfh3hgk3k+4CHpZ441uo8Za4EaZAR15xN0MfWxgB8ixMbP326zkZfjzJEbzm
IgZf5528+7xa+yxu9dbtUi3m61KnJ4hSgodHvymOBpiRkgPQ0dgKaQ5IUzlNomNs
Hq3XhI2JcOg9Q3tOWJWYzI3QaaVebLif/YiL6fj7pNycRhx3D4cHVMaRGwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGP81kfDve5zgLUMge0j2OBsNcyNMB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvWV96V1I4Tzk3bk9BdFF5QjdTUFk0R3cxekkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjQtiAwQD
jQvAMA0GCSqGSIb3DQEBCwUAA4IBAQAk2fqpqw8GdnyZoQN6q5hOQc9/B+tdxNcx
3dow9dkW8hZCY71PDRy97UAgpAkYLXUmV2hoZIIZ9zNMcDq0QDsYUuURGKnngoC3
EBgh0DXiTIId7sVrUMs+mROBSuorOmpIzPuEUQju4QIWP7SB2tYKv2gvfvHjU8Us
0Nk0dyCCPdQJgZdz6ACUTebgcMu0RFSijkLRPZfR4YaQIDhVJq1anu0M2dCxiaq4
EQk3egDvG+j0smwFLus/ZOibH0bx6jO3CiDeHjlcpJp/TY39v+dqkQYbClJX/h8C
A0O5rIC3T6L3SL1u31cvW1ZxqylLuEPVSj9bxTI13fuPQH8961lM
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:10:01 2025 by rpki-client