Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/e1Oi5vO6ErV5x95asU5mOgB0VJA.roa
File: e1Oi5vO6ErV5x95asU5mOgB0VJA.roa (raw, json)
Hash identifier: QbvfiqLdVUkYkn3BAjsKjPasZxyGUUNnK1H+UL2jQZ8=
Subject key identifier: 7B:53:A2:E6:F3:BA:12:B5:79:C7:DE:5A:B1:4E:66:3A:00:74:54:90
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 025F0014
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/e1Oi5vO6ErV5x95asU5mOgB0VJA.roa
Signing time: Sat 01 Jan 2022 08:03:18 +0000
ROA not before: Sat 01 Jan 2022 08:03:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 141.11.80.0/20 maxlen: 24
141.11.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39780372 (0x25f0014)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jan 1 08:03:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b53a2e6f3ba12b579c7de5ab14e663a00745490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:45:a1:3b:e1:90:8f:5e:6c:e1:f7:e3:74:
73:f9:65:04:7c:7b:47:39:a0:7c:d3:94:03:fa:f8:
05:a7:d5:38:20:95:fc:aa:59:0f:da:7b:e1:fa:5f:
fc:4a:d1:6c:61:0d:7d:6a:1a:cd:c0:f7:ff:23:e2:
f2:70:d7:d3:25:89:63:77:b3:7c:a9:f5:2d:b4:90:
10:a0:8c:16:5f:da:33:79:73:aa:61:17:2d:f0:c8:
50:90:bb:84:94:f6:20:7d:11:1a:f8:9a:42:ce:2f:
89:ef:f6:ab:7e:fa:83:b6:af:e1:9a:8f:62:a7:5d:
8e:62:73:2a:2a:5d:19:ae:4e:41:20:55:5b:99:2e:
0a:1c:39:5a:88:72:2c:72:71:91:d1:5b:fc:98:6f:
8f:cf:a5:3c:87:e9:b0:99:95:71:55:6d:81:c5:e4:
64:44:ad:81:f7:51:f9:b0:a7:dd:34:c5:10:cb:88:
b2:c7:9f:d2:a6:81:a0:57:18:d1:b6:2e:4d:e3:e1:
55:21:f5:e7:2d:52:49:52:8a:5e:73:9a:e3:c2:0d:
16:73:85:46:bb:2a:6f:14:55:f6:d1:85:4d:77:e6:
d9:9e:e5:cd:0b:4e:96:35:49:96:c9:df:cb:ee:b4:
c4:cc:cc:13:39:6f:54:02:83:48:ad:41:60:d4:4e:
d7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:53:A2:E6:F3:BA:12:B5:79:C7:DE:5A:B1:4E:66:3A:00:74:54:90
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/e1Oi5vO6ErV5x95asU5mOgB0VJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0/24
141.11.80.0/20
Signature Algorithm: sha256WithRSAEncryption
75:10:0b:ff:20:fe:2a:b3:28:86:05:4b:65:1e:32:97:8f:9f:
01:ee:a4:4c:7c:82:a6:8f:f5:9d:ce:a1:d8:9e:ad:c7:08:a0:
03:83:04:af:0a:53:50:85:72:95:e2:15:b6:c0:2f:16:67:9a:
3d:b6:41:cf:ea:5f:43:5a:ce:83:3c:29:ae:e3:f7:75:68:cb:
4c:cc:3e:9b:5b:51:a3:c1:87:f5:e9:1d:83:e3:6a:ee:2f:58:
30:7a:e1:52:01:99:8b:23:49:df:43:fb:4a:59:62:90:6d:bd:
2a:cf:55:ad:ef:4e:6c:b0:ef:8a:b2:2c:5e:c4:70:5f:48:cf:
24:cb:91:6e:9c:0b:62:9c:1c:2a:e0:ae:0a:45:49:00:98:e2:
0a:6d:24:04:47:9d:dd:87:2c:4e:fe:aa:34:e7:cc:cd:a3:fd:
89:9c:42:81:31:c7:f6:65:50:97:90:cd:3b:e8:21:f1:8a:45:
9b:e1:bf:87:b0:1b:7e:36:61:66:fa:ef:f3:12:92:bd:7e:ba:
ca:f0:77:3f:e7:42:ca:22:11:ab:2e:a1:2a:79:f9:95:ef:a8:
c6:a2:52:6e:61:1c:f4:a7:99:cf:10:3f:ec:12:41:44:cc:4f:
2f:67:10:99:a6:c8:a5:5e:c6:b2:c7:bb:c7:14:ba:5a:b1:59:
c7:b2:a0:91
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAl8AFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDEw
MTA4MDMxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2I1M2EyZTZmM2Jh
MTJiNTc5YzdkZTVhYjE0ZTY2M2EwMDc0NTQ5MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALJVRaE74ZCPXmzh9+N0c/llBHx7RzmgfNOUA/r4BafVOCCV
/KpZD9p74fpf/ErRbGENfWoazcD3/yPi8nDX0yWJY3ezfKn1LbSQEKCMFl/aM3lz
qmEXLfDIUJC7hJT2IH0RGviaQs4vie/2q376g7av4ZqPYqddjmJzKipdGa5OQSBV
W5kuChw5WohyLHJxkdFb/Jhvj8+lPIfpsJmVcVVtgcXkZEStgfdR+bCn3TTFEMuI
ssef0qaBoFcY0bYuTePhVSH15y1SSVKKXnOa48INFnOFRrsqbxRV9tGFTXfm2Z7l
zQtOljVJlsnfy+60xMzMEzlvVAKDSK1BYNRO1w0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBR7U6Lm87oStXnH3lqxTmY6AHRUkDAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L2UxT2k1dk82RXJWNXg5NWFzVTVtT2dCMFZKQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAI0LAAMEBI0LUDANBgkqhkiG9w0B
AQsFAAOCAQEAdRAL/yD+KrMohgVLZR4yl4+fAe6kTHyCpo/1nc6h2J6txwigA4ME
rwpTUIVyleIVtsAvFmeaPbZBz+pfQ1rOgzwpruP3dWjLTMw+m1tRo8GH9ekdg+Nq
7i9YMHrhUgGZiyNJ30P7SllikG29Ks9Vre9ObLDvirIsXsRwX0jPJMuRbpwLYpwc
KuCuCkVJAJjiCm0kBEed3YcsTv6qNOfMzaP9iZxCgTHH9mVQl5DNO+gh8YpFm+G/
h7AbfjZhZvrv8xKSvX66yvB3P+dCyiIRqy6hKnn5le+oxqJSbmEc9KeZzxA/7BJB
RMxPL2cQmabIpV7Gsse7xxS6WrFZx7KgkQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:59 2025 by rpki-client