Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/aajuOan1-4o1XLYEPE6ifW9_7PI.roa
File: aajuOan1-4o1XLYEPE6ifW9_7PI.roa (raw, json)
Hash identifier: 3IwFcD9eVgkqLbn/CwYzxSV9BO9fd3gPf2PS2iMOsxc=
Subject key identifier: 69:A8:EE:39:A9:F5:FB:8A:35:5C:B6:04:3C:4E:A2:7D:6F:7F:EC:F2
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 02E6606A
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/aajuOan1-4o1XLYEPE6ifW9_7PI.roa
Signing time: Thu 03 Feb 2022 14:04:07 +0000
ROA not before: Thu 03 Feb 2022 14:04:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 141.11.192.0/19 maxlen: 24
141.11.98.0/23 maxlen: 24
141.11.104.0/22 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.112.0/20 maxlen: 24
141.11.6.0/24 maxlen: 24
141.11.12.0/22 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.128.0/19 maxlen: 24
141.11.20.0/24 maxlen: 24
141.11.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48652394 (0x2e6606a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Feb 3 14:04:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69a8ee39a9f5fb8a355cb6043c4ea27d6f7fecf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:49:2b:76:60:32:76:15:62:8a:e3:41:58:91:
68:5d:d5:5c:e7:fc:41:c2:ee:1b:95:b7:60:f8:0c:
72:58:ba:69:fb:fc:7a:d1:c6:80:3f:34:fa:70:89:
52:0b:ee:b0:1a:70:ef:28:03:29:0b:3f:fc:68:6b:
ac:7e:cf:c6:9e:74:b2:76:b3:60:bd:31:65:65:66:
05:e1:a5:c7:5a:d9:6b:b0:90:4c:e1:dc:5b:1a:35:
d1:19:41:f2:ff:f0:97:13:83:1a:36:c8:69:79:23:
32:4e:6d:19:e7:45:26:77:46:da:87:0a:ae:49:0a:
94:93:18:29:85:83:54:8b:d9:cb:71:81:06:4c:97:
15:e5:fc:ff:1e:b7:28:f0:ff:a2:e6:64:2b:38:68:
d7:3f:3a:9d:4f:4a:bf:1c:68:59:61:06:e9:ce:45:
e0:40:6c:f6:a0:49:37:3a:c3:d8:63:74:40:f3:e2:
1f:c9:dd:0e:6a:6b:63:93:76:4e:5f:75:f0:62:55:
18:b1:63:7c:cf:93:95:95:86:40:c7:0a:10:1d:77:
95:b6:44:51:57:99:bd:e2:27:8c:25:ad:ac:fb:9a:
6d:d0:86:20:79:3b:e4:82:c1:d6:a6:68:ab:22:18:
f0:cd:51:03:0e:d9:a5:f7:41:18:bb:19:d2:9c:de:
90:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A8:EE:39:A9:F5:FB:8A:35:5C:B6:04:3C:4E:A2:7D:6F:7F:EC:F2
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/aajuOan1-4o1XLYEPE6ifW9_7PI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
141.11.6.0/24
141.11.12.0/22
141.11.17.0-141.11.20.255
141.11.98.0/23
141.11.104.0/22
141.11.112.0-141.11.159.255
141.11.192.0/19
Signature Algorithm: sha256WithRSAEncryption
57:14:7c:7e:16:08:8c:cf:58:6f:ba:7d:69:3c:c0:87:84:b4:
ee:a3:63:15:a3:19:59:9b:5b:75:8e:fb:f6:cf:a8:16:a0:2f:
16:04:b6:d6:49:43:a6:df:7a:ef:dc:83:ad:f9:1f:e4:28:17:
ab:40:26:99:7c:30:46:1c:a0:b8:2a:59:61:f3:c0:88:c3:95:
d4:51:0d:59:70:5e:5f:04:4d:01:c3:19:d0:6f:c7:fe:a7:28:
be:fe:2d:16:41:a9:4b:83:c3:0f:b1:d8:f5:7b:b4:30:9c:13:
d5:76:f9:fe:3c:2f:df:72:86:ee:05:95:22:64:fc:48:32:70:
8b:9e:21:a2:1e:86:44:2d:a4:23:07:d6:4e:d2:90:44:38:e1:
30:a2:e4:a8:0e:83:37:bd:0a:c0:57:29:19:08:d4:78:f7:38:
63:a7:8b:e3:85:6f:1c:09:81:02:e1:aa:a3:dc:7a:a0:d4:0a:
0a:a6:b9:96:9c:9e:38:3a:f4:b0:23:16:20:4e:4d:23:fe:23:
1e:9d:7c:a4:0c:31:cc:cf:38:58:bb:0c:4e:b6:f0:30:30:d1:
f7:be:ad:3a:26:c2:c5:7d:93:c2:6c:71:0d:7d:be:66:39:b2:
cd:20:3e:90:d3:cc:d3:d6:02:85:8f:8b:a3:ec:83:3d:bb:56:
ea:9a:94:e9
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIEAuZgajANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDIw
MzE0MDQwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjlhOGVlMzlhOWY1
ZmI4YTM1NWNiNjA0M2M0ZWEyN2Q2ZjdmZWNmMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJNJK3ZgMnYVYorjQViRaF3VXOf8QcLuG5W3YPgMcli6afv8
etHGgD80+nCJUgvusBpw7ygDKQs//GhrrH7Pxp50snazYL0xZWVmBeGlx1rZa7CQ
TOHcWxo10RlB8v/wlxODGjbIaXkjMk5tGedFJndG2ocKrkkKlJMYKYWDVIvZy3GB
BkyXFeX8/x63KPD/ouZkKzho1z86nU9KvxxoWWEG6c5F4EBs9qBJNzrD2GN0QPPi
H8ndDmprY5N2Tl918GJVGLFjfM+TlZWGQMcKEB13lbZEUVeZveInjCWtrPuabdCG
IHk75ILB1qZoqyIY8M1RAw7ZpfdBGLsZ0pzekOMCAwEAAaOCAkMwggI/MB0GA1Ud
DgQWBBRpqO45qfX7ijVctgQ8TqJ9b3/s8jAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L2FhanVPYW4xLTRvMVhMWUVQRTZpZlc5XzdQSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZ
BggrBgEFBQcBBwEB/wRKMEgwRgQCAAEwQAMEAI0LAQMEAI0LBgMEAo0LDDAMAwQA
jQsRAwQAjQsUAwQBjQtiAwQCjQtoMAwDBASNC3ADBAWNC4ADBAWNC8AwDQYJKoZI
hvcNAQELBQADggEBAFcUfH4WCIzPWG+6fWk8wIeEtO6jYxWjGVmbW3WO+/bPqBag
LxYEttZJQ6bfeu/cg635H+QoF6tAJpl8MEYcoLgqWWHzwIjDldRRDVlwXl8ETQHD
GdBvx/6nKL7+LRZBqUuDww+x2PV7tDCcE9V2+f48L99yhu4FlSJk/EgycIueIaIe
hkQtpCMH1k7SkEQ44TCi5KgOgze9CsBXKRkI1Hj3OGOni+OFbxwJgQLhqqPceqDU
CgqmuZacnjg69LAjFiBOTSP+Ix6dfKQMMczPOFi7DE628DAw0fe+rTomwsV9k8Js
cQ19vmY5ss0gPpDTzNPWAoWPi6Psgz27VuqalOk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:53 2024 by rpki-client on console-fra.rpki-client.org