Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/_-LyD3_WhsHRuf4XKjrcHpueJZc.roa
File: _-LyD3_WhsHRuf4XKjrcHpueJZc.roa (raw, json)
Hash identifier: //E+HVmysBIYjHG7km7i1NaBmcwwioUy1H42TFG/Bf4=
Subject key identifier: FF:E2:F2:0F:7F:D6:86:C1:D1:B9:FE:17:2A:3A:DC:1E:9B:9E:25:97
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0181D2E58F31365D641D2EC8BC9FFE98B618
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/_-LyD3_WhsHRuf4XKjrcHpueJZc.roa
Signing time: Wed 06 Jul 2022 09:44:28 +0000
ROA not before: Wed 06 Jul 2022 09:44:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 147293
IP address blocks: 141.11.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d2:e5:8f:31:36:5d:64:1d:2e:c8:bc:9f:fe:98:b6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 6 09:44:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffe2f20f7fd686c1d1b9fe172a3adc1e9b9e2597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7c:91:8f:12:64:04:90:75:da:0d:88:90:eb:
3c:b5:2f:99:5a:7e:e8:22:73:53:5a:8b:71:dd:de:
ca:8d:72:bf:08:2a:8c:0b:2e:42:10:f9:10:34:ba:
f5:aa:36:c8:ce:74:fc:32:d1:c0:91:ba:51:b2:4b:
93:d0:2c:c2:25:26:33:f4:c4:e5:f9:b0:5c:86:1d:
d4:9b:47:ac:3a:cd:df:dc:60:4e:60:6f:ba:02:93:
90:ad:ca:44:5e:65:99:f1:54:8e:f6:52:a4:43:b6:
13:8d:24:62:ea:8f:c0:4c:fd:e3:dd:86:5c:43:85:
e2:7d:72:56:3a:38:ff:98:34:50:99:95:f5:1d:e1:
24:26:e5:d1:f1:75:e1:85:2b:0a:b5:78:42:39:91:
70:17:ec:e9:1a:70:6d:a2:0d:1c:8c:f1:1c:e1:01:
f1:7f:c6:13:3c:00:6b:59:8d:a3:9f:5d:47:dd:5c:
d5:37:49:4b:55:c1:e1:5a:e1:b4:0e:6a:e6:1b:4c:
6f:83:b0:ac:c5:cb:0a:53:55:a7:be:4c:06:c6:8c:
64:53:0d:be:ee:8d:6a:63:7b:0c:47:64:5c:64:be:
f6:3d:73:b7:90:04:e4:53:25:b4:98:88:25:bb:f0:
4f:5d:86:d4:7e:2e:99:c9:6a:30:06:87:f8:50:73:
5e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E2:F2:0F:7F:D6:86:C1:D1:B9:FE:17:2A:3A:DC:1E:9B:9E:25:97
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/_-LyD3_WhsHRuf4XKjrcHpueJZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.22.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:40:38:dc:56:c6:0a:d0:27:ea:6e:ba:26:a8:60:f6:56:bd:
09:82:5c:38:fb:65:76:74:0c:df:51:73:0a:66:2b:d5:8e:98:
cc:c5:e6:b9:4c:03:03:3d:49:e9:3b:a4:17:96:de:30:5d:ba:
58:64:0e:c2:26:5c:d5:49:ea:25:29:10:d6:60:52:11:dd:21:
b7:31:fc:be:4c:b2:4e:8c:46:36:a3:99:7a:cb:35:d0:15:50:
d4:0d:aa:65:ef:c4:eb:7a:56:33:4d:7e:f5:96:f8:0d:c1:01:
55:45:51:df:05:f1:40:38:e1:cf:bf:67:9b:a8:a5:f5:2a:92:
97:85:3f:1a:ed:f2:aa:21:40:d3:f0:1f:a3:83:ed:8d:87:a9:
00:29:aa:5a:02:12:b2:06:f2:bb:48:cf:26:ce:ed:bc:00:e8:
47:6c:0a:89:27:8a:a9:66:6b:dd:88:16:fa:cc:68:2a:4b:2a:
41:b7:a0:9c:29:3c:7e:37:7c:2e:f3:15:94:75:39:b2:c9:8b:
ed:66:89:9e:de:55:9b:27:36:78:4f:8e:e1:04:a1:24:38:e2:
37:fd:c8:9a:9f:b3:ab:b5:fb:ec:dc:d6:9f:94:ea:bc:b9:df:
27:1b:ad:60:6f:5a:8b:d3:7b:1f:4b:e3:31:7f:bc:db:3c:a8:
32:5b:4e:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHS5Y8xNl1kHS7IvJ/+mLYYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIwNzA2MDk0NDI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmUyZjIwZjdmZDY4NmMxZDFiOWZlMTcyYTNhZGMxZTliOWUyNTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnyRjxJkBJB12g2IkOs8tS+ZWn7o
InNTWotx3d7KjXK/CCqMCy5CEPkQNLr1qjbIznT8MtHAkbpRskuT0CzCJSYz9MTl
+bBchh3Um0esOs3f3GBOYG+6ApOQrcpEXmWZ8VSO9lKkQ7YTjSRi6o/ATP3j3YZc
Q4XifXJWOjj/mDRQmZX1HeEkJuXR8XXhhSsKtXhCOZFwF+zpGnBtog0cjPEc4QHx
f8YTPABrWY2jn11H3VzVN0lLVcHhWuG0DmrmG0xvg7CsxcsKU1WnvkwGxoxkUw2+
7o1qY3sMR2RcZL72PXO3kATkUyW0mIglu/BPXYbUfi6ZyWowBof4UHNeRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP/i8g9/1obB0bn+Fyo63B6bniWXMB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvXy1MeUQzX1doc0hSdWY0WEtqcmNIcHVlSlpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQsWMA0G
CSqGSIb3DQEBCwUAA4IBAQArQDjcVsYK0CfqbromqGD2Vr0Jglw4+2V2dAzfUXMK
ZivVjpjMxea5TAMDPUnpO6QXlt4wXbpYZA7CJlzVSeolKRDWYFIR3SG3Mfy+TLJO
jEY2o5l6yzXQFVDUDapl78TrelYzTX71lvgNwQFVRVHfBfFAOOHPv2ebqKX1KpKX
hT8a7fKqIUDT8B+jg+2Nh6kAKapaAhKyBvK7SM8mzu28AOhHbAqJJ4qpZmvdiBb6
zGgqSypBt6CcKTx+N3wu8xWUdTmyyYvtZome3lWbJzZ4T47hBKEkOOI3/cian7Or
tfvs3NaflOq8ud8nG61gb1qL03sfS+Mxf7zbPKgyW06a
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org