Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/fj14J7VnDAU8xYI7WLxs2Mjsa4k.roa
File: fj14J7VnDAU8xYI7WLxs2Mjsa4k.roa (raw, json)
Hash identifier: njy68hWCADwOV2FW/YPUf5Bd+dVvCSfOdHy3hSHXxYw=
Subject key identifier: 7E:3D:78:27:B5:67:0C:05:3C:C5:82:3B:58:BC:6C:D8:C8:EC:6B:89
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01845CF70738C691C0BC31719E9D6A36E125
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/fj14J7VnDAU8xYI7WLxs2Mjsa4k.roa
Signing time: Wed 09 Nov 2022 15:16:43 +0000
ROA not before: Wed 09 Nov 2022 15:16:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 141.11.186.0/24 maxlen: 24
141.11.90.0/23 maxlen: 24
141.11.96.0/24 maxlen: 24
141.11.102.0/24 maxlen: 24
141.11.5.0/24 maxlen: 24
141.11.228.0/23 maxlen: 24
141.11.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5c:f7:07:38:c6:91:c0:bc:31:71:9e:9d:6a:36:e1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 9 15:16:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e3d7827b5670c053cc5823b58bc6cd8c8ec6b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6f:0e:62:e5:7e:79:ac:97:6c:2d:b4:da:31:
ce:0f:a8:6a:61:66:a6:39:2c:d7:c1:26:46:84:3a:
d2:df:5c:b8:ba:4a:a4:0e:6d:79:00:14:79:7f:cb:
a6:7f:be:0b:b7:92:14:e5:9b:33:4b:7e:d1:ec:00:
4f:bc:5b:18:f6:d1:43:18:19:98:9f:17:6f:b6:9b:
bb:5c:42:9c:ff:d1:fa:c5:ed:5a:69:c3:c4:e1:64:
d6:9a:0d:8a:4d:ae:da:cf:fe:3b:0c:b7:25:36:70:
9d:d0:e0:03:34:23:ac:3a:10:5a:e4:1c:d2:4b:f8:
0a:89:a6:c3:86:ad:d6:b8:5f:d6:92:d2:c3:af:e9:
99:3c:7c:a1:25:a4:40:fe:77:0e:3c:68:b8:3b:22:
0d:b7:7a:6a:c5:57:c7:3c:17:a3:cc:a4:51:54:92:
74:50:1d:e3:5c:b4:33:3d:f2:98:ec:81:00:a3:12:
9e:be:42:a2:cf:62:92:1f:ed:81:42:52:72:20:9e:
06:4f:1a:17:65:43:70:59:c6:d6:fc:38:51:4d:11:
16:e4:b6:b1:9f:de:20:60:5f:bf:a4:1b:c8:d3:f7:
54:3a:05:6c:c6:6f:88:8a:0f:2e:90:bf:02:11:0b:
df:a9:11:8b:f7:84:d5:b6:e4:c3:06:41:a6:61:f2:
14:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3D:78:27:B5:67:0C:05:3C:C5:82:3B:58:BC:6C:D8:C8:EC:6B:89
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/fj14J7VnDAU8xYI7WLxs2Mjsa4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
141.11.26.0/24
141.11.90.0/23
141.11.96.0/24
141.11.102.0/24
141.11.186.0/24
141.11.228.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:2d:29:34:0c:52:80:23:4b:25:61:69:a7:2b:d3:39:08:c7:
f9:c8:1a:9d:12:de:38:30:5b:98:24:18:d7:0f:e7:06:d9:00:
62:4d:50:cb:cf:d4:bb:89:a3:f0:32:b7:40:5c:11:7d:eb:bf:
a4:f3:a0:0d:d3:82:7a:8e:3b:43:a0:e0:30:d6:79:22:b7:be:
d4:6c:99:93:f2:54:04:32:7b:65:b4:67:21:e0:33:ba:a7:0a:
fd:3e:ab:9b:dc:cf:71:8e:0f:2a:b6:87:27:76:7d:22:9d:73:
e1:39:4e:eb:b9:5e:0f:70:c6:57:0d:ea:39:0d:a6:db:38:01:
a5:0e:20:04:06:65:7a:1e:04:6d:3e:44:56:f0:21:41:6a:6f:
a2:15:5d:a1:b0:93:ab:42:93:61:97:d1:02:bd:d8:38:8b:59:
b4:e1:41:72:a5:f6:5c:70:7b:15:3d:ac:6a:a0:5d:8b:1c:44:
5c:b4:14:18:d5:87:f9:f7:c7:0b:96:34:4b:53:36:b2:f8:d2:
84:68:e4:73:60:5b:91:8d:20:b9:43:31:eb:46:1b:49:67:44:
aa:5e:54:e0:46:31:2c:77:c1:e9:b8:b4:95:f7:2f:69:d9:12:
ac:cd:b2:ad:d4:67:69:c5:f3:14:4f:cf:d6:a5:ff:ce:33:5a:
ff:c8:a7:24
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYRc9wc4xpHAvDFxnp1qNuElMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIxMTA5MTUxNjQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTNkNzgyN2I1NjcwYzA1M2NjNTgyM2I1OGJjNmNkOGM4ZWM2Yjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkm8OYuV+eayXbC202jHOD6hqYWam
OSzXwSZGhDrS31y4ukqkDm15ABR5f8umf74Lt5IU5ZszS37R7ABPvFsY9tFDGBmY
nxdvtpu7XEKc/9H6xe1aacPE4WTWmg2KTa7az/47DLclNnCd0OADNCOsOhBa5BzS
S/gKiabDhq3WuF/WktLDr+mZPHyhJaRA/ncOPGi4OyINt3pqxVfHPBejzKRRVJJ0
UB3jXLQzPfKY7IEAoxKevkKiz2KSH+2BQlJyIJ4GTxoXZUNwWcbW/DhRTREW5Lax
n94gYF+/pBvI0/dUOgVsxm+Iig8ukL8CEQvfqRGL94TVtuTDBkGmYfIUuQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFH49eCe1ZwwFPMWCO1i8bNjI7GuJMB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvZmoxNEo3Vm5EQVU4eFlJN1dMeHMyTWpzYTRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAjQsFAwQA
jQsaAwQBjQtaAwQAjQtgAwQAjQtmAwQAjQu6AwQBjQvkMA0GCSqGSIb3DQEBCwUA
A4IBAQA6LSk0DFKAI0slYWmnK9M5CMf5yBqdEt44MFuYJBjXD+cG2QBiTVDLz9S7
iaPwMrdAXBF967+k86AN04J6jjtDoOAw1nkit77UbJmT8lQEMntltGch4DO6pwr9
Pqub3M9xjg8qtocndn0inXPhOU7ruV4PcMZXDeo5DabbOAGlDiAEBmV6HgRtPkRW
8CFBam+iFV2hsJOrQpNhl9ECvdg4i1m04UFypfZccHsVPaxqoF2LHERctBQY1Yf5
98cLljRLUzay+NKEaORzYFuRjSC5QzHrRhtJZ0SqXlTgRjEsd8HpuLSV9y9p2RKs
zbKt1GdpxfMUT8/Wpf/OM1r/yKck
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:33:25 2025 by rpki-client