Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/oPKLMKlluPZhMvBBbtoIZjjljtg.roa
File: oPKLMKlluPZhMvBBbtoIZjjljtg.roa (raw, json)
Hash identifier: RyqqN3K+X8IiOQatyyl+4WjrJTjSM07/XO53fpxay/c=
Subject key identifier: A0:F2:8B:30:A9:65:B8:F6:61:32:F0:41:6E:DA:08:66:38:E5:8E:D8
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04580086
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/oPKLMKlluPZhMvBBbtoIZjjljtg.roa
Signing time: Tue 03 May 2022 10:45:42 +0000
ROA not before: Tue 03 May 2022 10:45:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.11.44.0/22 maxlen: 24
141.11.43.0/24 maxlen: 24
141.11.40.0/22 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.42.0/24 maxlen: 24
141.11.41.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.80.0/20 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.0.0/24 maxlen: 24
141.11.10.0/23 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.22.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.20.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.37.0/24 maxlen: 24
141.11.33.0/24 maxlen: 24
141.11.32.0/22 maxlen: 24
141.11.35.0/24 maxlen: 24
141.11.34.0/24 maxlen: 24
141.11.160.0/24 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.192.0/19 maxlen: 24
141.11.92.0/22 maxlen: 24
141.11.128.0/19 maxlen: 24
141.11.240.0/21 maxlen: 24
141.11.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72876166 (0x4580086)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 3 10:45:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0f28b30a965b8f66132f0416eda086638e58ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:f6:9f:d8:eb:2d:86:0f:69:97:ee:26:66:
fd:9f:14:2e:d6:f5:6f:24:93:da:08:e4:ff:0b:95:
e4:48:4a:3b:e6:5d:30:8c:ba:d8:4d:94:1e:52:ea:
ec:8d:b7:6d:cc:e4:8c:dd:26:ca:24:eb:2e:56:04:
31:78:19:03:bb:71:59:ee:10:2f:d5:be:67:ae:79:
20:b4:26:0a:5b:c6:6d:46:be:24:5c:b4:8a:e7:e0:
01:53:b4:08:41:c6:3c:5e:83:c5:03:fc:85:b8:d2:
61:96:8e:5f:14:de:9b:67:a0:b4:31:97:25:67:7a:
2e:33:13:1a:f1:74:be:2b:d0:ee:32:8f:9e:98:24:
e7:dd:25:b4:12:51:b6:02:c0:bb:dd:2f:7e:f4:e3:
fe:55:c2:02:7d:93:f4:63:cc:f1:42:62:91:27:93:
ce:1b:ee:b0:04:be:ad:44:3e:81:62:e8:82:67:c4:
75:53:7d:c5:d7:51:ea:08:2c:1f:6a:f5:5f:95:c3:
cc:a2:58:78:5e:73:97:c4:f3:7a:25:f0:f4:ad:c4:
4f:ed:ce:b6:f1:b7:f2:3b:d2:5e:37:6a:d0:57:4a:
e0:2d:36:26:38:8c:94:ca:ff:cd:86:8a:8d:31:bc:
9c:ad:35:4d:b9:79:cb:06:0b:4b:d0:4a:6f:07:c1:
f6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F2:8B:30:A9:65:B8:F6:61:32:F0:41:6E:DA:08:66:38:E5:8E:D8
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/oPKLMKlluPZhMvBBbtoIZjjljtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0-141.11.2.255
141.11.10.0/23
141.11.17.0-141.11.18.255
141.11.20.0-141.11.22.255
141.11.25.0/24
141.11.28.0/24
141.11.31.0-141.11.35.255
141.11.37.0/24
141.11.39.0-141.11.47.255
141.11.80.0/20
141.11.128.0-141.11.160.255
141.11.176.0/24
141.11.182.0/23
141.11.192.0/19
141.11.240.0-141.11.251.255
Signature Algorithm: sha256WithRSAEncryption
7d:2d:3d:2f:a2:05:65:25:c7:46:26:fa:59:69:3e:b1:ad:86:
da:25:07:a3:24:64:6c:35:92:a9:38:46:e7:81:f4:39:5c:00:
cc:9b:3c:b2:14:59:50:d3:94:0e:9a:60:1a:5f:7a:30:2b:35:
3e:60:97:f7:d6:2e:4a:ac:fa:e5:ff:fc:69:f2:7d:28:13:53:
ff:4d:dd:7e:0e:19:48:e3:74:c8:7a:a2:57:4e:2d:e5:1e:99:
55:0a:f5:cc:6b:06:af:91:72:ae:73:71:56:38:b1:a3:74:d5:
11:60:cb:78:1d:cb:f7:e8:e9:cf:06:e3:a1:29:f4:5c:a9:01:
c7:87:fc:27:5e:b5:79:3d:17:ae:70:d7:06:45:7c:67:82:b6:
ac:ed:a9:08:79:b1:1d:99:18:68:03:20:3c:da:4b:c6:3e:75:
e5:76:92:56:4e:75:ab:6d:81:2a:10:79:d4:6f:4d:fc:66:30:
e3:d7:35:2d:7a:bd:27:cf:da:02:46:a5:c1:17:14:34:86:6c:
5d:cd:9c:f1:e5:70:7b:73:ba:1d:c9:11:90:dc:a2:52:ac:a7:
da:58:8f:35:d2:2a:c2:37:c0:96:17:30:88:88:c2:cc:67:7f:
a1:e3:70:4a:a1:9d:dd:0c:e8:0a:6a:f0:b5:07:9a:5a:95:d8:
4d:82:0c:0f
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIEBFgAhjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDUw
MzEwNDU0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTBmMjhiMzBhOTY1
YjhmNjYxMzJmMDQxNmVkYTA4NjYzOGU1OGVkODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALvk9p/Y6y2GD2mX7iZm/Z8ULtb1byST2gjk/wuV5EhKO+Zd
MIy62E2UHlLq7I23bczkjN0myiTrLlYEMXgZA7txWe4QL9W+Z655ILQmClvGbUa+
JFy0iufgAVO0CEHGPF6DxQP8hbjSYZaOXxTem2egtDGXJWd6LjMTGvF0vivQ7jKP
npgk590ltBJRtgLAu90vfvTj/lXCAn2T9GPM8UJikSeTzhvusAS+rUQ+gWLogmfE
dVN9xddR6ggsH2r1X5XDzKJYeF5zl8TzeiXw9K3ET+3OtvG38jvSXjdq0FdK4C02
JjiMlMr/zYaKjTG8nK01Tbl5ywYLS9BKbwfB9s8CAwEAAaOCApkwggKVMB0GA1Ud
DgQWBBSg8oswqWW49mEy8EFu2ghmOOWO2DAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L29QS0xNS2xsdVBaaE12QkJidG9JWmpqbGp0Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
rgYIKwYBBQUHAQcBAf8EgZ4wgZswgZgEAgABMIGRMAsDAwCNCwMEAI0LAgMEAY0L
CjAMAwQAjQsRAwQAjQsSMAwDBAKNCxQDBACNCxYDBACNCxkDBACNCxwwDAMEAI0L
HwMEAo0LIAMEAI0LJTAMAwQAjQsnAwQEjQsgAwQEjQtQMAwDBAeNC4ADBACNC6AD
BACNC7ADBAGNC7YDBAWNC8AwDAMEBI0L8AMEAo0L+DANBgkqhkiG9w0BAQsFAAOC
AQEAfS09L6IFZSXHRib6WWk+sa2G2iUHoyRkbDWSqThG54H0OVwAzJs8shRZUNOU
DppgGl96MCs1PmCX99YuSqz65f/8afJ9KBNT/03dfg4ZSON0yHqiV04t5R6ZVQr1
zGsGr5FyrnNxVjixo3TVEWDLeB3L9+jpzwbjoSn0XKkBx4f8J161eT0XrnDXBkV8
Z4K2rO2pCHmxHZkYaAMgPNpLxj515XaSVk51q22BKhB51G9N/GYw49c1LXq9J8/a
AkalwRcUNIZsXc2c8eVwe3O6HckRkNyiUqyn2liPNdIqwjfAlhcwiIjCzGd/oeNw
SqGd3QzoCmrwtQeaWpXYTYIMDw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:04:08 2025 by rpki-client