Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/hHv8kRMZsr9OrYvy3G9qDCRx0tY.roa
File: hHv8kRMZsr9OrYvy3G9qDCRx0tY.roa (raw, json)
Hash identifier: xgmVvwkoW9QhW9j8qJ6v/adwfgvd8w1HbFgLiD/FpF4=
Subject key identifier: 84:7B:FC:91:13:19:B2:BF:4E:AD:8B:F2:DC:6F:6A:0C:24:71:D2:D6
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01848AD44DFED096AAEE808AF8B3AFB57A43
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/hHv8kRMZsr9OrYvy3G9qDCRx0tY.roa
Signing time: Fri 18 Nov 2022 13:01:20 +0000
ROA not before: Fri 18 Nov 2022 13:01:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 141.11.17.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.247.0/24 maxlen: 24
141.11.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8a:d4:4d:fe:d0:96:aa:ee:80:8a:f8:b3:af:b5:7a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 18 13:01:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=847bfc911319b2bf4ead8bf2dc6f6a0c2471d2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9a:c3:a3:44:52:fd:7f:88:71:21:44:d9:03:
5a:b3:86:12:6e:60:cd:8b:40:09:71:62:26:da:0c:
e4:92:a7:cc:70:01:99:9b:cf:c4:03:02:80:e6:ff:
48:34:37:06:07:de:81:40:9c:cd:2f:fb:f1:aa:89:
3f:82:56:a0:f0:69:f8:e7:45:36:88:5d:9e:86:a5:
f2:0a:65:4c:c3:ac:a2:4c:94:e4:a2:62:b3:c7:55:
91:0a:fe:3f:d7:9d:1a:87:ed:ea:7f:33:4b:aa:5e:
c3:23:df:dc:03:f2:f2:0a:fb:7a:00:b7:df:cc:6e:
4b:0d:0c:e2:5f:bb:43:19:9f:e8:d7:82:2c:18:0a:
da:e3:30:85:65:c6:9d:9b:97:71:b5:46:09:2b:c7:
ad:35:cb:96:67:0a:e9:1d:7a:f1:8f:c7:fc:11:e5:
cd:47:19:45:29:e9:05:fd:5a:75:e0:43:62:f7:80:
24:76:36:d0:40:e3:0f:d0:54:32:98:97:83:2a:7b:
8b:ac:fd:ee:61:8a:55:28:7a:8a:f3:81:6c:a4:ee:
a6:69:73:95:c4:3f:de:c7:56:b6:31:c6:ea:3e:38:
98:f7:1d:f6:96:e8:a1:79:e2:ab:51:ba:a7:99:91:
04:ac:2e:6b:8b:a4:96:78:25:1e:64:0b:3b:17:4d:
c9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7B:FC:91:13:19:B2:BF:4E:AD:8B:F2:DC:6F:6A:0C:24:71:D2:D6
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/hHv8kRMZsr9OrYvy3G9qDCRx0tY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.17.0-141.11.18.255
141.11.35.0/24
141.11.247.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b1:53:22:53:5a:3d:9f:19:52:6d:a9:9a:8d:24:6c:1f:fe:
53:35:98:9c:80:39:65:09:86:6c:2b:43:7e:09:2e:75:fe:52:
c7:0d:4a:80:0f:69:2a:f0:9c:d8:1f:e5:22:ce:2e:8b:c5:dc:
dc:db:23:3e:60:bc:fa:f8:9a:08:27:2f:7d:d9:d4:9c:2f:30:
0c:86:12:8a:52:50:37:08:80:b0:b5:70:01:aa:1d:0d:01:f2:
bc:eb:b5:81:c4:9c:51:4a:3a:9e:00:d9:e7:0f:44:2c:80:1b:
89:f6:04:43:21:f7:fe:36:db:8f:2f:12:15:c5:4c:d0:f9:6f:
40:e6:22:c6:58:99:76:0e:a1:42:87:dc:60:e1:0f:3a:22:f3:
11:c3:82:74:e3:77:c1:df:b2:d6:7f:d4:ea:ee:b2:eb:33:ed:
85:b1:dc:3e:15:4d:a5:2e:8b:a7:6b:6d:55:5a:d2:ee:93:65:
79:49:d2:fe:ff:f7:f4:8c:1a:f3:b6:9e:73:f1:96:f1:bd:76:
98:73:82:17:85:36:4d:6e:3f:e9:3f:94:c7:f4:c6:4c:19:6a:
cb:e8:f1:47:4c:5f:6d:9b:7d:91:03:95:ce:6b:b0:bd:ee:bd:
3a:b7:bb:04:a8:66:11:3d:ba:fa:d4:e5:87:a9:b2:c5:a8:7e:
ae:17:6f:bd
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYSK1E3+0Jaq7oCK+LOvtXpDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIxMTE4MTMwMTIwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDdiZmM5MTEzMTliMmJmNGVhZDhiZjJkYzZmNmEwYzI0NzFkMmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZrDo0RS/X+IcSFE2QNas4YSbmDN
i0AJcWIm2gzkkqfMcAGZm8/EAwKA5v9INDcGB96BQJzNL/vxqok/glag8Gn450U2
iF2ehqXyCmVMw6yiTJTkomKzx1WRCv4/150ah+3qfzNLql7DI9/cA/LyCvt6ALff
zG5LDQziX7tDGZ/o14IsGAra4zCFZcadm5dxtUYJK8etNcuWZwrpHXrxj8f8EeXN
RxlFKekF/Vp14ENi94AkdjbQQOMP0FQymJeDKnuLrP3uYYpVKHqK84FspO6maXOV
xD/ex1a2McbqPjiY9x32luiheeKrUbqnmZEErC5ri6SWeCUeZAs7F03JUwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFIR7/JETGbK/Tq2L8txvagwkcdLWMB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvaEh2OGtSTVpzcjlPcll2eTNHOXFEQ1J4MHRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBACNCxED
BACNCxIDBACNCyMDBACNC/cwDQYJKoZIhvcNAQELBQADggEBAAGxUyJTWj2fGVJt
qZqNJGwf/lM1mJyAOWUJhmwrQ34JLnX+UscNSoAPaSrwnNgf5SLOLovF3NzbIz5g
vPr4mggnL33Z1JwvMAyGEopSUDcIgLC1cAGqHQ0B8rzrtYHEnFFKOp4A2ecPRCyA
G4n2BEMh9/42248vEhXFTND5b0DmIsZYmXYOoUKH3GDhDzoi8xHDgnTjd8HfstZ/
1Orususz7YWx3D4VTaUui6drbVVa0u6TZXlJ0v7/9/SMGvO2nnPxlvG9dphzgheF
Nk1uP+k/lMf0xkwZasvo8UdMX22bfZEDlc5rsL3uvTq3uwSoZhE9uvrU5YepssWo
fq4Xb70=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:53 2024 by rpki-client on console-fra.rpki-client.org