Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/aFcITDkVQNBAXgdORF1rwCmYjUc.roa
File: aFcITDkVQNBAXgdORF1rwCmYjUc.roa (raw, json)
Hash identifier: ZyaqixQ8g4QqXY0gLs5lLoVufUXzBd8uPJo4v4TyiSU=
Subject key identifier: 68:57:08:4C:39:15:40:D0:40:5E:07:4E:44:5D:6B:C0:29:98:8D:47
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01851AB25E9BFDD10B94753A885AEAC140D6
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/aFcITDkVQNBAXgdORF1rwCmYjUc.roa
Signing time: Fri 16 Dec 2022 11:29:35 +0000
ROA not before: Fri 16 Dec 2022 11:29:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206092
IP address blocks: 141.11.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1a:b2:5e:9b:fd:d1:0b:94:75:3a:88:5a:ea:c1:40:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Dec 16 11:29:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6857084c391540d0405e074e445d6bc029988d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:1e:cb:04:1a:ea:b0:74:53:1c:91:22:89:
97:04:03:7a:f2:16:7c:e1:0b:be:bd:40:d8:12:dd:
9b:97:c3:f2:d1:7a:ee:b2:73:57:00:61:4f:de:a3:
9c:b6:82:16:7f:b9:21:22:95:6a:10:0a:7c:f7:5a:
3e:85:3a:57:b3:cc:3b:23:dc:89:82:f3:70:51:71:
18:06:67:7e:87:bf:e1:98:f7:d4:26:14:83:03:e6:
30:66:55:24:5b:39:ad:c0:14:a9:cc:08:ed:8f:c3:
c8:58:71:ce:91:e3:af:7a:9c:4b:3d:74:82:e9:63:
76:05:8b:26:18:65:35:21:26:6d:0e:ac:5d:db:46:
e3:4a:dd:e3:a9:94:02:02:b8:b5:22:b3:d2:d6:ec:
aa:5f:8e:75:e2:75:53:27:37:82:8b:32:7e:ad:3a:
70:1e:f0:04:c6:07:e1:a5:f3:13:5d:a9:0a:92:c4:
9d:3d:19:8e:aa:29:93:ea:15:f6:cb:8d:58:d3:87:
76:2c:8e:8a:6b:3b:45:07:d8:04:7e:52:da:4d:64:
24:5b:bc:f8:2f:53:4d:f9:66:b3:80:1d:e5:53:2a:
ce:ec:c6:60:e3:c7:88:5c:04:0b:7c:08:2f:e8:7c:
5e:98:0a:02:72:70:c0:c7:66:0d:10:be:b1:36:32:
d4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:57:08:4C:39:15:40:D0:40:5E:07:4E:44:5D:6B:C0:29:98:8D:47
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/aFcITDkVQNBAXgdORF1rwCmYjUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.98.0/24
Signature Algorithm: sha256WithRSAEncryption
70:6b:9c:45:11:3a:8d:80:5e:a1:03:f0:b6:27:b1:98:f3:e6:
b3:1d:e5:56:2a:ab:61:cb:9b:bf:b0:81:cc:57:fe:b8:6f:3c:
60:fd:4d:f6:2d:5d:3c:9e:a6:ff:e6:a0:3b:44:89:6e:65:5f:
59:d4:e4:fb:e1:a8:f0:74:8d:10:6e:d6:27:d3:03:72:51:e7:
8b:dd:89:bc:e3:8e:47:dc:98:7c:02:e5:d5:1b:a9:f3:8d:e9:
b4:ff:5e:9d:d0:d7:b0:8e:be:d0:16:25:92:92:79:8d:15:23:
7f:ba:7d:47:94:b7:79:31:0e:f6:cd:3a:a0:de:56:80:61:13:
89:d2:b6:d5:ee:7c:cb:38:a5:af:3f:80:9d:ca:82:c7:e8:f1:
49:28:6b:4d:60:64:47:dc:40:f4:21:5c:2b:e4:2e:8e:e8:72:
3e:8a:7c:be:2e:c7:ea:0b:2e:94:93:a4:ec:41:ca:02:6c:19:
a1:4f:a8:8a:8b:a9:25:4f:9d:ec:27:e0:e7:51:a9:8b:7e:91:
26:9c:91:c7:54:80:1a:e5:d0:40:80:92:18:08:d8:74:6e:db:
b3:f6:db:00:46:f0:98:a1:6d:de:f2:7d:1b:91:2e:75:f8:a7:
69:0f:45:b0:43:47:61:11:c5:f5:e3:7f:a9:78:d3:74:e0:46:
fb:09:55:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUasl6b/dELlHU6iFrqwUDWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIxMjE2MTEyOTM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODU3MDg0YzM5MTU0MGQwNDA1ZTA3NGU0NDVkNmJjMDI5OTg4ZDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzUeywQa6rB0UxyRIomXBAN68hZ8
4Qu+vUDYEt2bl8Py0XrusnNXAGFP3qOctoIWf7khIpVqEAp891o+hTpXs8w7I9yJ
gvNwUXEYBmd+h7/hmPfUJhSDA+YwZlUkWzmtwBSpzAjtj8PIWHHOkeOvepxLPXSC
6WN2BYsmGGU1ISZtDqxd20bjSt3jqZQCAri1IrPS1uyqX4514nVTJzeCizJ+rTpw
HvAExgfhpfMTXakKksSdPRmOqimT6hX2y41Y04d2LI6KaztFB9gEflLaTWQkW7z4
L1NN+WazgB3lUyrO7MZg48eIXAQLfAgv6HxemAoCcnDAx2YNEL6xNjLUXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGhXCEw5FUDQQF4HTkRda8ApmI1HMB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvYUZjSVREa1ZRTkJBWGdkT1JGMXJ3Q21ZalVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQtiMA0G
CSqGSIb3DQEBCwUAA4IBAQBwa5xFETqNgF6hA/C2J7GY8+azHeVWKqthy5u/sIHM
V/64bzxg/U32LV08nqb/5qA7RIluZV9Z1OT74ajwdI0QbtYn0wNyUeeL3Ym8445H
3Jh8AuXVG6nzjem0/16d0Newjr7QFiWSknmNFSN/un1HlLd5MQ72zTqg3laAYROJ
0rbV7nzLOKWvP4CdyoLH6PFJKGtNYGRH3ED0IVwr5C6O6HI+iny+LsfqCy6Uk6Ts
QcoCbBmhT6iKi6klT53sJ+DnUamLfpEmnJHHVIAa5dBAgJIYCNh0btuz9tsARvCY
oW3e8n0bkS51+KdpD0WwQ0dhEcX143+peNN04Eb7CVX/
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:58 2025 by rpki-client