Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/emSXWDbMC1BXLNL--rJabQ13_2w.roa
File: emSXWDbMC1BXLNL--rJabQ13_2w.roa (raw, json)
Hash identifier: J/ZcK1ShE80olk7c2QsS3jUmF4obEF8B/YycwHqjpcU=
Subject key identifier: 7A:64:97:58:36:CC:0B:50:57:2C:D2:FE:FA:B2:5A:6D:0D:77:FF:6C
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0184CE686E0D98453A6C6BBF9F5B2A15B9AE
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/emSXWDbMC1BXLNL--rJabQ13_2w.roa
Signing time: Thu 01 Dec 2022 15:57:41 +0000
ROA not before: Thu 01 Dec 2022 15:57:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 141.11.105.0/24 maxlen: 24
141.11.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ce:68:6e:0d:98:45:3a:6c:6b:bf:9f:5b:2a:15:b9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Dec 1 15:57:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a64975836cc0b50572cd2fefab25a6d0d77ff6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ee:30:51:2e:50:d6:9b:3b:5e:c2:ad:ab:02:
05:c3:c3:14:af:b1:8f:6e:da:a0:67:b5:73:30:11:
10:5a:29:ef:45:2c:01:cc:75:f2:14:a0:98:1d:23:
81:ce:ee:e7:46:4e:97:b5:b5:1c:d2:34:8c:f5:34:
f0:76:8b:a8:4b:6f:49:57:a2:9b:60:13:0a:eb:c1:
62:9d:b6:1c:cc:19:a6:20:0a:16:90:5f:fb:6c:cf:
0a:87:78:8a:05:49:e0:22:79:a4:53:3f:1b:22:ec:
8e:54:01:cf:0a:a9:d5:96:0e:07:f1:dc:9a:91:a5:
64:66:a6:6f:39:b3:39:7b:c7:fb:4d:2f:cc:6d:8b:
93:f0:76:a1:be:dc:c6:99:1e:e1:66:fb:0a:e6:a8:
0d:34:e7:1b:b9:74:a6:37:cf:e1:61:b2:4b:92:cb:
81:42:04:e3:51:3c:da:f7:9b:59:3c:45:4a:43:32:
dd:c2:a5:c7:da:f1:82:ed:e3:76:be:3b:b8:99:10:
94:d0:55:e5:37:c0:72:2c:70:ac:e3:87:5e:dd:56:
1a:e8:07:6b:2a:f1:d7:ec:96:12:c0:a0:d9:00:f5:
3a:4d:ed:fc:9b:2f:36:21:3e:84:a1:3a:c8:05:a8:
01:dd:ab:e5:fc:b8:f8:f4:c9:4a:59:22:af:21:1c:
76:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:64:97:58:36:CC:0B:50:57:2C:D2:FE:FA:B2:5A:6D:0D:77:FF:6C
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/emSXWDbMC1BXLNL--rJabQ13_2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.105.0/24
141.11.136.0/22
Signature Algorithm: sha256WithRSAEncryption
41:32:f8:b9:71:19:cb:5e:96:e3:86:ea:6f:dd:ac:85:db:aa:
a1:69:4a:6b:05:5e:66:8b:7e:fd:d1:8d:1f:59:b2:25:df:ca:
5c:8f:e9:6f:e6:91:83:bb:80:19:af:a0:39:5d:69:2d:aa:fe:
b4:14:32:6c:26:75:f9:dd:27:9b:eb:17:0a:93:b8:18:73:3d:
86:f4:f3:ea:7b:12:30:34:94:10:73:71:f8:f9:ee:61:a1:d0:
fa:b1:dc:ca:6f:57:6e:85:57:d0:9d:10:96:d7:d3:95:93:4c:
94:cf:29:f5:3c:85:14:34:57:06:8c:88:06:b9:ae:83:0c:d0:
c9:e3:da:23:ce:00:3c:c0:97:a7:23:1b:32:5e:c1:6f:87:3b:
dd:40:47:51:dd:9a:be:79:1e:8b:a6:fc:0f:9f:dd:81:30:70:
1a:0c:fc:20:fb:f7:c5:d3:86:ca:31:0d:b6:0b:05:27:43:38:
df:e2:29:b1:86:90:d9:55:2b:7e:10:88:94:99:3b:f4:5e:68:
3e:40:89:a6:6c:e6:26:fd:b5:7d:02:5f:bb:cf:7f:c4:30:cb:
f5:ba:8b:fd:65:56:e0:42:ff:b0:6b:48:04:f4:61:c4:83:9c:
26:6c:59:f7:d7:17:93:a1:78:2d:13:f4:dc:0d:8b:b6:d8:09:
7d:60:1c:a8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYTOaG4NmEU6bGu/n1sqFbmuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIxMjAxMTU1NzQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTY0OTc1ODM2Y2MwYjUwNTcyY2QyZmVmYWIyNWE2ZDBkNzdmZjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu4wUS5Q1ps7XsKtqwIFw8MUr7GP
btqgZ7VzMBEQWinvRSwBzHXyFKCYHSOBzu7nRk6XtbUc0jSM9TTwdouoS29JV6Kb
YBMK68FinbYczBmmIAoWkF/7bM8Kh3iKBUngInmkUz8bIuyOVAHPCqnVlg4H8dya
kaVkZqZvObM5e8f7TS/MbYuT8HahvtzGmR7hZvsK5qgNNOcbuXSmN8/hYbJLksuB
QgTjUTza95tZPEVKQzLdwqXH2vGC7eN2vju4mRCU0FXlN8ByLHCs44de3VYa6Adr
KvHX7JYSwKDZAPU6Te38my82IT6EoTrIBagB3avl/Lj49MlKWSKvIRx2SwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHpkl1g2zAtQVyzS/vqyWm0Nd/9sMB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvZW1TWFdEYk1DMUJYTE5MLS1ySmFiUTEzXzJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjQtpAwQC
jQuIMA0GCSqGSIb3DQEBCwUAA4IBAQBBMvi5cRnLXpbjhupv3ayF26qhaUprBV5m
i3790Y0fWbIl38pcj+lv5pGDu4AZr6A5XWktqv60FDJsJnX53Seb6xcKk7gYcz2G
9PPqexIwNJQQc3H4+e5hodD6sdzKb1duhVfQnRCW19OVk0yUzyn1PIUUNFcGjIgG
ua6DDNDJ49ojzgA8wJenIxsyXsFvhzvdQEdR3Zq+eR6LpvwPn92BMHAaDPwg+/fF
04bKMQ22CwUnQzjf4imxhpDZVSt+EIiUmTv0Xmg+QImmbOYm/bV9Al+7z3/EMMv1
uov9ZVbgQv+wa0gE9GHEg5wmbFn31xeToXgtE/TcDYu22Al9YByo
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:01 2025 by rpki-client