Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/cYtqCn9UGvfPBtvsaeK8fUTyC8E.roa
File: cYtqCn9UGvfPBtvsaeK8fUTyC8E.roa (raw, json)
Hash identifier: AOI9x8JEzQrYomT3FIdZA6pziErFHqOtu9P1o9JORgE=
Subject key identifier: 71:8B:6A:0A:7F:54:1A:F7:CF:06:DB:EC:69:E2:BC:7D:44:F2:0B:C1
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 038993E2
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/cYtqCn9UGvfPBtvsaeK8fUTyC8E.roa
Signing time: Sat 19 Mar 2022 19:33:11 +0000
ROA not before: Sat 19 Mar 2022 19:33:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 141.11.179.0/24 maxlen: 24
141.11.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59347938 (0x38993e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Mar 19 19:33:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=718b6a0a7f541af7cf06dbec69e2bc7d44f20bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:66:95:21:79:d2:58:54:83:e3:f3:37:18:4e:
62:d6:6d:7a:77:63:91:5d:8b:56:ff:37:46:53:69:
65:27:42:98:12:dd:8e:a4:7a:9a:54:99:9c:1c:38:
63:ef:7d:2b:7c:af:2e:76:f2:8d:37:aa:3c:64:05:
c8:3d:c4:c4:2d:6d:9c:19:5d:31:56:83:7e:d2:8f:
fb:5f:b1:b6:dd:40:ac:82:ee:0c:19:bd:4c:21:a4:
22:2d:c2:3e:76:3a:4d:c8:a2:75:0d:a5:eb:39:b9:
fe:54:fc:69:b9:9f:81:5b:d6:63:f0:0c:9b:c9:0e:
6a:f2:9b:e7:ea:21:ba:ae:a9:2c:2d:08:5e:70:18:
79:90:cd:f0:2d:97:7f:20:0c:48:db:a0:65:b3:4b:
84:f5:b7:3c:bd:84:63:1f:23:b6:2d:ff:87:5b:58:
6b:48:40:f4:cf:f1:66:3f:4f:f4:ba:24:5f:17:7b:
e8:ab:d3:70:e9:ce:8b:94:36:68:f3:f3:14:d2:62:
60:35:ed:ce:ae:0a:b9:1f:5c:8c:23:46:89:b6:19:
20:83:23:98:81:27:40:3e:ac:7c:86:1a:71:56:78:
f4:72:65:05:b5:39:0b:b5:ec:2f:d8:46:d3:58:55:
0b:4a:15:e9:a1:03:79:6d:ed:59:7e:59:6d:53:ed:
df:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8B:6A:0A:7F:54:1A:F7:CF:06:DB:EC:69:E2:BC:7D:44:F2:0B:C1
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/cYtqCn9UGvfPBtvsaeK8fUTyC8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.108.0/24
141.11.179.0/24
Signature Algorithm: sha256WithRSAEncryption
41:99:70:39:1d:aa:fa:f2:93:80:93:58:a1:8b:52:06:fe:4c:
83:5d:95:df:af:ae:57:20:5f:0e:e2:16:3d:46:2a:40:3e:69:
21:d1:99:0f:42:b9:9a:42:a5:66:44:82:ce:5f:8a:1a:83:54:
41:40:f2:08:60:a5:2b:67:82:a1:85:d4:ad:0f:a5:36:0a:14:
e3:70:9e:4a:5a:5f:0a:43:1d:2f:ff:8e:81:f2:e7:9a:bf:5f:
8c:c4:9b:5d:80:11:72:74:09:50:f6:22:ab:90:cb:e1:6d:82:
cc:01:59:9b:67:e0:84:4f:f6:9f:1b:81:eb:c5:ac:07:fc:d8:
fc:66:87:77:69:5e:7a:ff:05:de:31:9a:1b:cc:8d:2a:26:fb:
ca:1d:57:a7:aa:b8:f7:c6:c4:39:6e:64:2f:f3:fb:d3:7e:38:
26:07:13:98:12:b5:65:d6:3e:6b:06:46:90:f5:9e:02:34:55:
3a:72:2e:41:02:1c:69:c3:84:51:cd:0e:c4:08:09:5c:64:0b:
3b:b4:d9:9f:60:f3:96:71:40:03:40:93:16:63:54:ad:57:3e:
a6:94:48:74:18:18:17:82:59:bf:3e:0a:65:30:36:0f:f7:81:
61:85:b3:34:8d:69:4b:dd:cb:84:fd:4b:75:e9:11:a3:55:41:
9c:70:8f:e2
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEA4mT4jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDMx
OTE5MzMxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzE4YjZhMGE3ZjU0
MWFmN2NmMDZkYmVjNjllMmJjN2Q0NGYyMGJjMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIlmlSF50lhUg+PzNxhOYtZtendjkV2LVv83RlNpZSdCmBLd
jqR6mlSZnBw4Y+99K3yvLnbyjTeqPGQFyD3ExC1tnBldMVaDftKP+1+xtt1ArILu
DBm9TCGkIi3CPnY6TciidQ2l6zm5/lT8abmfgVvWY/AMm8kOavKb5+ohuq6pLC0I
XnAYeZDN8C2XfyAMSNugZbNLhPW3PL2EYx8jti3/h1tYa0hA9M/xZj9P9LokXxd7
6KvTcOnOi5Q2aPPzFNJiYDXtzq4KuR9cjCNGibYZIIMjmIEnQD6sfIYacVZ49HJl
BbU5C7XsL9hG01hVC0oV6aEDeW3tWX5ZbVPt38sCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRxi2oKf1Qa988G2+xp4rx9RPILwTAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L2NZdHFDbjlVR3ZmUEJ0dnNhZUs4ZlVUeUM4RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAI0LbAMEAI0LszANBgkqhkiG9w0B
AQsFAAOCAQEAQZlwOR2q+vKTgJNYoYtSBv5Mg12V36+uVyBfDuIWPUYqQD5pIdGZ
D0K5mkKlZkSCzl+KGoNUQUDyCGClK2eCoYXUrQ+lNgoU43CeSlpfCkMdL/+OgfLn
mr9fjMSbXYARcnQJUPYiq5DL4W2CzAFZm2fghE/2nxuB68WsB/zY/GaHd2leev8F
3jGaG8yNKib7yh1Xp6q498bEOW5kL/P70344JgcTmBK1ZdY+awZGkPWeAjRVOnIu
QQIcacOEUc0OxAgJXGQLO7TZn2DzlnFAA0CTFmNUrVc+ppRIdBgYF4JZvz4KZTA2
D/eBYYWzNI1pS93LhP1LdekRo1VBnHCP4g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:53 2024 by rpki-client on console-fra.rpki-client.org