Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/lX1JPGfLDvakTzxur1yRtaC3I3s.roa
File: lX1JPGfLDvakTzxur1yRtaC3I3s.roa (raw, json)
Hash identifier: ngvaiFct3ATxyTLRAA6U+CPfdbvDxga4OY4dC0xa9g4=
Subject key identifier: 95:7D:49:3C:67:CB:0E:F6:A4:4F:3C:6E:AF:5C:91:B5:A0:B7:23:7B
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01849FA75C61A61B4C6CE79276222B76D5D3
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/lX1JPGfLDvakTzxur1yRtaC3I3s.roa
Signing time: Tue 22 Nov 2022 14:04:16 +0000
ROA not before: Tue 22 Nov 2022 14:04:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36351
IP address blocks: 141.11.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9f:a7:5c:61:a6:1b:4c:6c:e7:92:76:22:2b:76:d5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 22 14:04:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=957d493c67cb0ef6a44f3c6eaf5c91b5a0b7237b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:18:cc:30:00:fa:da:2c:3f:be:5c:58:8e:f6:
94:4f:ee:61:3f:ec:68:a1:f0:5b:80:a4:ff:c1:0e:
87:88:b1:b3:85:b4:b9:a2:42:ec:03:5e:17:d8:7e:
08:e1:c2:30:19:4b:17:88:ec:39:c2:7c:97:c4:0c:
4a:8e:ce:49:e9:37:58:42:21:50:16:31:7f:9d:0d:
46:53:9c:b3:c7:a0:e2:4e:84:79:de:d2:14:a4:ae:
07:59:53:cc:f0:53:f3:3d:56:fb:a1:5a:8d:e6:01:
15:38:69:1c:51:3c:74:f1:d3:c5:8c:7d:f5:8f:a4:
69:70:fa:67:87:90:95:d7:63:f2:ee:aa:c1:0b:00:
8e:d2:3c:55:b7:41:6d:c4:13:7a:b5:1e:95:f8:57:
d1:e3:a5:36:03:7e:8d:c9:f0:8f:72:3b:90:8b:6f:
33:d7:55:37:71:41:9f:1d:c7:3f:42:f5:b8:fb:33:
70:8b:4e:ff:9b:9c:f9:ac:c6:de:3b:29:fa:fd:14:
6b:5a:16:2d:b8:0c:31:e1:bd:86:48:a6:94:87:72:
1e:b9:0e:2f:3d:89:7d:a2:90:9a:c9:a4:e4:4f:40:
f9:f2:43:03:97:f1:89:a7:49:2e:d0:0a:15:ad:a2:
c0:3b:9d:be:27:cc:25:1b:ef:95:e7:0a:e6:09:7e:
7d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7D:49:3C:67:CB:0E:F6:A4:4F:3C:6E:AF:5C:91:B5:A0:B7:23:7B
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/lX1JPGfLDvakTzxur1yRtaC3I3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.98.0/24
Signature Algorithm: sha256WithRSAEncryption
86:ee:78:06:2f:05:f8:3e:b1:1c:51:56:09:9e:29:b5:81:b1:
5d:15:73:17:df:80:64:65:dd:ab:d8:a3:b4:4d:79:8f:18:79:
6a:7e:43:99:25:0d:ee:c2:98:58:a4:53:84:1a:8e:e1:d7:af:
25:13:bc:20:4a:77:a5:5c:c1:d0:b7:d9:af:14:5d:07:01:36:
c5:a5:d2:6e:61:e6:88:21:d0:b8:a1:b0:ae:26:7b:22:68:3d:
78:65:23:0c:f5:90:ba:8d:bf:be:af:ac:17:5a:1b:b8:29:d8:
84:11:9e:f7:45:25:5d:86:e5:7b:3e:e2:2b:aa:c7:e1:00:51:
42:8b:f3:6c:30:00:06:1d:75:4c:90:a6:e8:f7:d7:70:25:ae:
f5:ac:2f:22:1f:5c:0b:92:28:1c:7d:a8:9c:b1:fb:26:c4:86:
51:8a:af:34:81:41:8e:99:b1:64:10:bf:df:07:e9:e7:f0:43:
13:99:ce:a7:6f:a2:7e:36:45:2d:2a:b4:2f:95:67:35:ab:0d:
f5:88:3f:a9:96:7c:06:f2:d5:79:24:0c:b2:60:d4:a9:70:09:
d8:33:2a:5e:eb:ec:f7:de:c8:8b:25:32:19:66:6e:9c:d1:d6:
7d:07:ba:ab:a2:6a:16:99:2c:2f:f5:f8:3c:58:f0:14:dc:04:
06:51:e7:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSfp1xhphtMbOeSdiIrdtXTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIxMTIyMTQwNDE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTdkNDkzYzY3Y2IwZWY2YTQ0ZjNjNmVhZjVjOTFiNWEwYjcyMzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBjMMAD62iw/vlxYjvaUT+5hP+xo
ofBbgKT/wQ6HiLGzhbS5okLsA14X2H4I4cIwGUsXiOw5wnyXxAxKjs5J6TdYQiFQ
FjF/nQ1GU5yzx6DiToR53tIUpK4HWVPM8FPzPVb7oVqN5gEVOGkcUTx08dPFjH31
j6RpcPpnh5CV12Py7qrBCwCO0jxVt0FtxBN6tR6V+FfR46U2A36NyfCPcjuQi28z
11U3cUGfHcc/QvW4+zNwi07/m5z5rMbeOyn6/RRrWhYtuAwx4b2GSKaUh3IeuQ4v
PYl9opCayaTkT0D58kMDl/GJp0ku0AoVraLAO52+J8wlG++V5wrmCX596QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJV9STxnyw72pE88bq9ckbWgtyN7MB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvbFgxSlBHZkxEdmFrVHp4dXIxeVJ0YUMzSTNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQtiMA0G
CSqGSIb3DQEBCwUAA4IBAQCG7ngGLwX4PrEcUVYJnim1gbFdFXMX34BkZd2r2KO0
TXmPGHlqfkOZJQ3uwphYpFOEGo7h168lE7wgSnelXMHQt9mvFF0HATbFpdJuYeaI
IdC4obCuJnsiaD14ZSMM9ZC6jb++r6wXWhu4KdiEEZ73RSVdhuV7PuIrqsfhAFFC
i/NsMAAGHXVMkKbo99dwJa71rC8iH1wLkigcfaicsfsmxIZRiq80gUGOmbFkEL/f
B+nn8EMTmc6nb6J+NkUtKrQvlWc1qw31iD+plnwG8tV5JAyyYNSpcAnYMype6+z3
3siLJTIZZm6c0dZ9B7qromoWmSwv9fg8WPAU3AQGUec/
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:06 2025 by rpki-client