Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/lafJha34CTXT8-AmLYuZnNH_nxY.roa
File: lafJha34CTXT8-AmLYuZnNH_nxY.roa (raw, json)
Hash identifier: r5aIzDtQO45Dc5ElidQVsdMoEJ5/ngg3A616RDG3QvY=
Subject key identifier: 95:A7:C9:85:AD:F8:09:35:D3:F3:E0:26:2D:8B:99:9C:D1:FF:9F:16
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 047B1572
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/lafJha34CTXT8-AmLYuZnNH_nxY.roa
Signing time: Mon 09 May 2022 10:39:28 +0000
ROA not before: Mon 09 May 2022 10:39:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 141.11.161.0/24 maxlen: 24
141.11.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75175282 (0x47b1572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 9 10:39:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95a7c985adf80935d3f3e0262d8b999cd1ff9f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:70:8e:5d:20:d0:4a:3e:56:80:c0:1a:24:de:
40:f9:5c:83:6f:98:b5:1e:5a:46:23:42:aa:92:39:
7c:ee:28:e1:22:db:8a:d5:59:43:66:06:34:2f:2d:
08:ef:7d:cf:1c:9c:1c:2e:b0:b5:f7:4d:b8:10:81:
45:11:c0:95:25:1f:18:6b:f7:00:f5:47:b3:2e:af:
95:1e:e7:ee:9a:70:5d:a2:dc:7a:d8:95:7f:04:ad:
89:45:ba:43:1c:87:f2:02:4b:77:9a:b1:d1:54:38:
d5:46:47:df:23:c3:45:34:10:3e:e2:ee:01:86:39:
1e:24:7b:3a:26:ae:ac:f4:92:51:61:05:a3:62:99:
41:f7:0f:51:3d:ad:9e:b1:dc:d3:b8:fc:fa:d6:8b:
cb:8e:57:44:ce:60:9c:9a:d1:e4:50:0e:e9:21:5f:
f7:90:9a:b6:0a:05:9d:89:45:a9:46:73:1a:8c:6e:
90:a0:f9:22:b3:dc:05:34:50:fc:a0:b7:aa:64:ed:
8e:6a:74:15:9c:f1:aa:af:ac:36:ac:c0:66:35:d8:
f8:07:db:10:6e:95:97:27:32:69:42:35:d3:f7:7f:
c4:fc:4b:5c:f1:d4:4a:2c:78:1b:7a:b9:f2:d4:70:
f4:7d:3c:e4:80:b6:ff:af:94:62:09:50:8d:65:bd:
b6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A7:C9:85:AD:F8:09:35:D3:F3:E0:26:2D:8B:99:9C:D1:FF:9F:16
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/lafJha34CTXT8-AmLYuZnNH_nxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.122.0/24
141.11.161.0/24
Signature Algorithm: sha256WithRSAEncryption
46:10:7e:73:97:de:fd:21:0d:0a:98:c2:be:4e:b9:6a:02:e3:
5e:ea:fc:fb:a5:af:9c:28:c9:98:ed:60:14:cf:fc:58:19:8b:
6d:a2:1c:1b:c8:3c:4a:73:5d:53:f2:d9:31:39:39:bf:2b:55:
58:7c:82:13:c2:17:af:e8:4a:fd:c4:37:42:84:4d:4d:6f:40:
2f:db:17:d1:51:28:55:75:7d:a5:da:f6:13:82:00:0c:a4:29:
46:00:57:70:ee:6f:f9:23:8e:fc:d4:35:2b:e5:6e:c5:9b:d5:
11:e9:f0:eb:5e:58:9b:cd:a7:03:67:41:e5:48:a7:f3:59:83:
7a:b0:af:34:27:9c:83:85:a6:05:9b:87:ec:53:8e:03:78:bd:
e2:92:b6:36:5f:a9:a1:48:24:66:9a:93:77:09:cf:1a:10:e8:
e4:2a:a3:a8:f4:2c:1d:53:97:7a:4b:f3:68:89:17:a4:d7:f2:
ae:47:c0:2b:97:0b:42:f6:ac:01:a4:3a:bc:2a:80:65:ff:3f:
6e:e1:9e:0c:49:ed:7a:57:55:14:18:c4:d8:85:31:93:de:8c:
f4:24:a1:49:af:ee:ee:80:5b:df:64:f2:a4:7f:c4:8e:5c:53:
ae:23:34:4e:31:f8:06:b4:e4:66:bd:02:d1:2f:7e:4a:0d:56:
c1:18:86:ea
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBHsVcjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDUw
OTEwMzkyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTVhN2M5ODVhZGY4
MDkzNWQzZjNlMDI2MmQ4Yjk5OWNkMWZmOWYxNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKhwjl0g0Eo+VoDAGiTeQPlcg2+YtR5aRiNCqpI5fO4o4SLb
itVZQ2YGNC8tCO99zxycHC6wtfdNuBCBRRHAlSUfGGv3APVHsy6vlR7n7ppwXaLc
etiVfwStiUW6QxyH8gJLd5qx0VQ41UZH3yPDRTQQPuLuAYY5HiR7OiaurPSSUWEF
o2KZQfcPUT2tnrHc07j8+taLy45XRM5gnJrR5FAO6SFf95CatgoFnYlFqUZzGoxu
kKD5IrPcBTRQ/KC3qmTtjmp0FZzxqq+sNqzAZjXY+AfbEG6VlycyaUI10/d/xPxL
XPHUSix4G3q58tRw9H085IC2/6+UYglQjWW9tlMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSVp8mFrfgJNdPz4CYti5mc0f+fFjAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L2xhZkpoYTM0Q1RYVDgtQW1MWXVabk5IX254WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAI0LegMEAI0LoTANBgkqhkiG9w0B
AQsFAAOCAQEARhB+c5fe/SENCpjCvk65agLjXur8+6WvnCjJmO1gFM/8WBmLbaIc
G8g8SnNdU/LZMTk5vytVWHyCE8IXr+hK/cQ3QoRNTW9AL9sX0VEoVXV9pdr2E4IA
DKQpRgBXcO5v+SOO/NQ1K+VuxZvVEenw615Ym82nA2dB5Uin81mDerCvNCecg4Wm
BZuH7FOOA3i94pK2Nl+poUgkZpqTdwnPGhDo5CqjqPQsHVOXekvzaIkXpNfyrkfA
K5cLQvasAaQ6vCqAZf8/buGeDEnteldVFBjE2IUxk96M9CShSa/u7oBb32TypH/E
jlxTriM0TjH4BrTkZr0C0S9+Sg1WwRiG6g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org