Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/lViCPWHHH_8QFmQ4ajQ3mpDWm2w.roa
File: lViCPWHHH_8QFmQ4ajQ3mpDWm2w.roa (raw, json)
Hash identifier: HZftswkGX0mgcp+GE5tZ8MZ1E1QmpbzQMeq743W4ZF8=
Subject key identifier: 95:58:82:3D:61:C7:1F:FF:10:16:64:38:6A:34:37:9A:90:D6:9B:6C
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04FC8006
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/lViCPWHHH_8QFmQ4ajQ3mpDWm2w.roa
Signing time: Wed 08 Jun 2022 09:13:02 +0000
ROA not before: Wed 08 Jun 2022 09:13:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 141.11.74.0/23 maxlen: 24
141.11.86.0/23 maxlen: 24
141.11.104.0/22 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.4.0/24 maxlen: 24
141.11.234.0/23 maxlen: 24
141.11.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83656710 (0x4fc8006)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jun 8 09:13:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9558823d61c71fff101664386a34379a90d69b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:f8:e0:d6:fd:14:12:7d:d5:be:ee:a2:c0:
23:8e:22:9b:c0:f5:de:86:39:bd:2c:5b:77:a2:b9:
6b:3e:dd:f8:b1:c6:51:b9:2a:c7:1b:eb:f0:c8:80:
0a:52:c1:c4:1e:e3:1f:e4:4e:06:05:a3:fa:3b:5b:
c3:a4:b1:03:90:f0:29:57:c8:97:b9:f5:64:2e:1c:
14:17:c3:f3:e6:de:fd:5e:32:80:51:d2:88:82:84:
87:8f:c9:bf:35:b6:3b:f4:a5:9a:47:96:49:22:2b:
66:38:60:2a:9e:b3:e8:79:4d:91:34:7f:95:b3:eb:
1d:87:60:74:89:f5:e2:b7:c2:95:c9:3a:94:7e:9f:
c6:fc:a6:76:2f:de:c8:6b:19:57:dc:dd:e5:dc:0c:
96:4d:4b:9c:0d:ac:8b:57:68:f9:09:6b:4c:c5:f7:
72:8e:5c:79:af:76:23:15:d4:8f:ba:0f:5f:89:12:
56:3d:ef:1b:eb:f1:e0:08:27:3f:89:4d:1d:33:6d:
eb:f1:bb:c5:af:28:44:a1:f3:3c:af:bf:64:9f:f1:
9c:65:64:13:c5:09:c0:e4:18:95:3c:92:5e:16:7c:
28:b2:5b:1f:97:d7:a3:8d:b4:43:e2:17:15:0f:6d:
89:39:f1:b4:9d:bd:68:cb:1a:c2:e9:e6:e6:4a:87:
e3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:58:82:3D:61:C7:1F:FF:10:16:64:38:6A:34:37:9A:90:D6:9B:6C
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/lViCPWHHH_8QFmQ4ajQ3mpDWm2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
141.11.4.0/24
141.11.74.0/23
141.11.86.0/23
141.11.104.0/22
141.11.127.0/24
141.11.234.0/23
Signature Algorithm: sha256WithRSAEncryption
44:b0:c3:06:4a:b5:a6:40:b0:5f:b6:29:df:ea:1f:30:8d:6c:
35:59:d7:29:ca:7b:8b:b8:59:f9:2e:3a:48:55:1e:3f:ca:ac:
d5:9a:f1:3c:5e:f9:81:6a:cb:e5:2b:07:46:7f:63:40:40:de:
c8:62:ce:95:d4:e1:ec:00:64:cf:d4:c3:8b:b2:e6:dd:70:89:
83:c4:6d:69:b1:e8:06:42:fa:80:7f:51:71:0c:a8:f9:68:14:
20:d4:d2:68:0f:a7:b8:e2:5f:f1:f8:51:b1:93:b1:03:2a:e0:
e3:cd:13:5b:59:95:69:f3:15:8a:2c:92:6e:73:a0:15:c2:70:
26:42:00:ea:24:c4:4b:4e:27:15:e9:31:8e:ad:a9:c3:f6:db:
1b:6f:ce:24:15:26:7c:aa:b8:08:23:55:b9:01:86:d2:7f:de:
5f:84:c3:45:1e:37:d2:72:96:42:3c:4a:7d:1f:5f:13:b8:9d:
91:61:d4:a4:17:2b:06:89:2c:70:4b:3d:be:bd:d8:e2:16:e5:
30:77:fa:be:fd:f5:9d:79:f3:a8:97:d1:88:94:35:1f:fa:d7:
cc:06:3f:a8:96:30:a1:4a:fe:20:7e:0a:41:eb:af:eb:42:d1:
70:c7:1f:48:b1:0c:7e:94:0e:52:4d:0d:43:c2:e6:4d:f7:e9:
ae:8e:95:c8
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIEBPyABjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDYw
ODA5MTMwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTU1ODgyM2Q2MWM3
MWZmZjEwMTY2NDM4NmEzNDM3OWE5MGQ2OWI2YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALQA+ODW/RQSfdW+7qLAI44im8D13oY5vSxbd6K5az7d+LHG
Ubkqxxvr8MiAClLBxB7jH+ROBgWj+jtbw6SxA5DwKVfIl7n1ZC4cFBfD8+be/V4y
gFHSiIKEh4/JvzW2O/SlmkeWSSIrZjhgKp6z6HlNkTR/lbPrHYdgdIn14rfClck6
lH6fxvymdi/eyGsZV9zd5dwMlk1LnA2si1do+QlrTMX3co5cea92IxXUj7oPX4kS
Vj3vG+vx4AgnP4lNHTNt6/G7xa8oRKHzPK+/ZJ/xnGVkE8UJwOQYlTySXhZ8KLJb
H5fXo420Q+IXFQ9tiTnxtJ29aMsawunm5kqH47cCAwEAAaOCAi0wggIpMB0GA1Ud
DgQWBBSVWII9Yccf/xAWZDhqNDeakNabbDAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L2xWaUNQV0hISF84UUZtUTRhalEzbXBEV20ydy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD
BggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEAI0LAQMEAI0LBAMEAY0LSgMEAY0L
VgMEAo0LaAMEAI0LfwMEAY0L6jANBgkqhkiG9w0BAQsFAAOCAQEARLDDBkq1pkCw
X7Yp3+ofMI1sNVnXKcp7i7hZ+S46SFUeP8qs1ZrxPF75gWrL5SsHRn9jQEDeyGLO
ldTh7ABkz9TDi7Lm3XCJg8RtabHoBkL6gH9RcQyo+WgUINTSaA+nuOJf8fhRsZOx
Ayrg480TW1mVafMViiySbnOgFcJwJkIA6iTES04nFekxjq2pw/bbG2/OJBUmfKq4
CCNVuQGG0n/eX4TDRR430nKWQjxKfR9fE7idkWHUpBcrBokscEs9vr3Y4hblMHf6
vv31nXnzqJfRiJQ1H/rXzAY/qJYwoUr+IH4KQeuv60LRcMcfSLEMfpQOUk0NQ8Lm
Tffpro6VyA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:20:02 2025 by rpki-client