Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/_DoYHjldQBEfv8Gpizi0I1lxaUE.roa
File: _DoYHjldQBEfv8Gpizi0I1lxaUE.roa (raw, json)
Hash identifier: VshCDsj1lsoAhmqPzjVONuwpo/MJg+94f/sXOteMFLg=
Subject key identifier: FC:3A:18:1E:39:5D:40:11:1F:BF:C1:A9:8B:38:B4:23:59:71:69:41
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 03E0379A
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/_DoYHjldQBEfv8Gpizi0I1lxaUE.roa
Signing time: Fri 15 Apr 2022 12:16:03 +0000
ROA not before: Fri 15 Apr 2022 12:16:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.11.44.0/22 maxlen: 24
141.11.43.0/24 maxlen: 24
141.11.40.0/22 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.42.0/24 maxlen: 24
141.11.41.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.80.0/20 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.0.0/24 maxlen: 24
141.11.10.0/23 maxlen: 24
141.11.16.0/24 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.22.0/24 maxlen: 24
141.11.19.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.20.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.26.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.37.0/24 maxlen: 24
141.11.36.0/22 maxlen: 24
141.11.38.0/24 maxlen: 24
141.11.33.0/24 maxlen: 24
141.11.32.0/22 maxlen: 24
141.11.35.0/24 maxlen: 24
141.11.34.0/24 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.184.0/21 maxlen: 24
141.11.192.0/19 maxlen: 24
141.11.92.0/22 maxlen: 24
141.11.128.0/19 maxlen: 24
141.11.224.0/20 maxlen: 24
141.11.240.0/21 maxlen: 24
141.11.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65025946 (0x3e0379a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 15 12:16:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc3a181e395d40111fbfc1a98b38b42359716941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8e:cb:6e:fd:6a:7b:aa:fd:92:bf:f6:0d:18:
f5:b6:82:6e:48:b2:63:21:3d:82:f2:86:f0:db:71:
11:f2:59:a3:dd:ad:b5:31:5d:5b:5b:c2:68:f8:7b:
3b:77:db:a2:77:fb:0e:6b:a5:f3:a5:e4:39:45:47:
c5:5c:82:97:20:09:82:18:cd:23:94:51:f2:49:33:
ab:6b:36:c3:53:6a:90:7c:f4:cf:b3:19:5a:a4:75:
c8:2e:47:5e:81:da:2c:02:e5:08:48:7f:e6:bd:30:
85:37:e6:bd:3c:38:62:cb:33:9e:22:85:8d:22:03:
9a:7a:67:5d:9d:7d:32:f2:c5:ec:76:fe:40:1a:d3:
74:34:86:f3:35:b8:0d:49:a1:d2:b3:ab:94:44:52:
04:b3:e3:31:75:90:34:3f:1c:82:46:8b:e7:9a:d7:
97:a3:57:68:61:57:5a:5c:52:6b:21:65:99:b8:5e:
28:99:56:9c:aa:77:81:65:35:3d:5f:01:cd:95:a4:
29:e0:79:f5:83:36:4a:b7:fd:70:07:9f:b5:5c:a6:
9f:72:23:f4:a3:2b:61:50:c4:6b:06:cf:bd:69:0d:
39:ac:91:6a:71:9a:54:d7:1d:8c:cb:26:25:a8:57:
3d:0c:6c:2c:85:3f:00:d3:61:d6:4c:fe:30:55:04:
75:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3A:18:1E:39:5D:40:11:1F:BF:C1:A9:8B:38:B4:23:59:71:69:41
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/_DoYHjldQBEfv8Gpizi0I1lxaUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0-141.11.2.255
141.11.10.0/23
141.11.16.0-141.11.22.255
141.11.25.0-141.11.26.255
141.11.28.0/24
141.11.31.0-141.11.47.255
141.11.80.0/20
141.11.128.0/19
141.11.176.0/24
141.11.182.0-141.11.251.255
Signature Algorithm: sha256WithRSAEncryption
3d:50:a0:5c:63:28:0a:51:4f:61:80:63:c2:d9:b8:27:fa:3c:
5c:b0:ee:e9:75:12:48:46:a2:14:6f:4a:11:cc:f7:6b:f2:ae:
85:3a:4b:c2:f4:e5:e4:ef:eb:e4:3f:fa:ff:bf:69:14:f0:70:
ac:ef:98:e7:33:80:60:d3:45:70:e1:da:7f:7c:23:05:bb:fa:
41:c1:d0:c6:45:d0:17:96:a9:c8:3e:47:0e:70:c2:cf:52:e6:
89:e9:05:eb:90:f6:5e:84:d1:04:9b:19:50:1d:56:9f:c4:72:
05:ba:99:40:f3:6c:0c:54:c6:0f:b3:ab:a3:5d:40:b4:5f:56:
53:c7:63:94:c6:0b:58:eb:13:54:e8:3c:73:8a:d8:da:01:f6:
47:9e:a1:54:8a:b9:36:6c:81:4b:0b:66:58:7c:b6:7e:a7:83:
f4:3d:7f:4a:63:37:20:94:1b:85:8d:ce:39:65:37:77:8b:50:
21:22:bf:74:ec:c3:8a:55:50:2f:60:ad:fe:1b:f6:d3:18:5f:
e6:e9:7f:30:03:b9:1a:2b:4c:a4:6d:57:93:46:08:f6:9b:9c:
c0:ba:d4:71:73:0c:0f:b2:cf:1f:f8:ac:b2:3e:27:b7:0a:c1:
cb:56:5c:33:ae:0e:95:5c:3f:ad:bd:2b:f5:aa:fd:ca:0d:09:
ab:01:41:63
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIEA+A3mjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDQx
NTEyMTYwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmMzYTE4MWUzOTVk
NDAxMTFmYmZjMWE5OGIzOGI0MjM1OTcxNjk0MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKKOy279anuq/ZK/9g0Y9baCbkiyYyE9gvKG8NtxEfJZo92t
tTFdW1vCaPh7O3fbonf7Dmul86XkOUVHxVyClyAJghjNI5RR8kkzq2s2w1NqkHz0
z7MZWqR1yC5HXoHaLALlCEh/5r0whTfmvTw4YsszniKFjSIDmnpnXZ19MvLF7Hb+
QBrTdDSG8zW4DUmh0rOrlERSBLPjMXWQND8cgkaL55rXl6NXaGFXWlxSayFlmbhe
KJlWnKp3gWU1PV8BzZWkKeB59YM2Srf9cAeftVymn3Ij9KMrYVDEawbPvWkNOayR
anGaVNcdjMsmJahXPQxsLIU/ANNh1kz+MFUEdS0CAwEAAaOCAmYwggJiMB0GA1Ud
DgQWBBT8OhgeOV1AER+/wamLOLQjWXFpQTAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L19Eb1lIamxkUUJFZnY4R3BpemkwSTFseGFVRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB8
BggrBgEFBQcBBwEB/wRtMGswaQQCAAEwYzALAwMAjQsDBACNCwIDBAGNCwowDAME
BI0LEAMEAI0LFjAMAwQAjQsZAwQAjQsaAwQAjQscMAwDBACNCx8DBASNCyADBASN
C1ADBAWNC4ADBACNC7AwDAMEAY0LtgMEAo0L+DANBgkqhkiG9w0BAQsFAAOCAQEA
PVCgXGMoClFPYYBjwtm4J/o8XLDu6XUSSEaiFG9KEcz3a/KuhTpLwvTl5O/r5D/6
/79pFPBwrO+Y5zOAYNNFcOHaf3wjBbv6QcHQxkXQF5apyD5HDnDCz1LmiekF65D2
XoTRBJsZUB1Wn8RyBbqZQPNsDFTGD7Oro11AtF9WU8djlMYLWOsTVOg8c4rY2gH2
R56hVIq5NmyBSwtmWHy2fqeD9D1/SmM3IJQbhY3OOWU3d4tQISK/dOzDilVQL2Ct
/hv20xhf5ul/MAO5GitMpG1Xk0YI9pucwLrUcXMMD7LPH/issj4ntwrBy1ZcM64O
lVw/rb0r9ar9yg0JqwFBYw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:18:44 2025 by rpki-client