Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/qPoGTpXub9_SgZ-_vkb6yx3j3f4.roa
File: qPoGTpXub9_SgZ-_vkb6yx3j3f4.roa (raw, json)
Hash identifier: upewa1Sr52/Nnd2vNC63W6tzIADOm2CUdnx7cHfTWdg=
Subject key identifier: A8:FA:06:4E:95:EE:6F:DF:D2:81:9F:BF:BE:46:FA:CB:1D:E3:DD:FE
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0328234D
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/qPoGTpXub9_SgZ-_vkb6yx3j3f4.roa
Signing time: Mon 21 Feb 2022 10:32:03 +0000
ROA not before: Mon 21 Feb 2022 10:32:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 141.11.71.0/24 maxlen: 24
141.11.88.0/21 maxlen: 24
141.11.86.0/23 maxlen: 24
141.11.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52962125 (0x328234d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Feb 21 10:32:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8fa064e95ee6fdfd2819fbfbe46facb1de3ddfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:9c:ad:cc:ff:63:b4:70:8e:27:98:d5:64:
d9:09:3c:da:7f:bf:b2:8e:e0:05:87:a3:5d:89:ac:
56:8b:da:f5:96:3e:9e:75:cc:80:7d:87:ca:f7:6f:
dc:aa:49:73:e2:e2:c2:61:c1:5f:38:b1:3e:80:87:
1c:1d:df:cd:c9:b3:67:92:b9:3b:23:b1:82:9a:93:
d7:9e:a7:f7:76:99:6d:a2:7c:19:73:f7:3d:4d:e6:
07:31:3f:ed:53:94:1a:b9:d3:a2:9c:52:34:4b:f8:
dc:c5:43:95:e9:b4:46:ba:86:c8:19:10:4a:56:f6:
e6:ce:d0:4d:e2:df:92:a0:ef:82:0e:07:64:43:86:
42:4a:cf:b6:d9:f0:69:07:30:83:dd:61:c4:b1:80:
3c:87:04:a6:6f:5d:e0:46:20:34:19:4a:42:98:ec:
96:12:fe:64:06:0c:c8:07:e6:da:43:c6:61:3f:5f:
dd:b4:8a:b4:12:b0:e0:39:cf:ef:87:c3:80:ef:46:
e0:0b:31:05:e0:9e:48:01:01:f0:94:8b:2c:60:b4:
b5:0b:d6:ec:05:16:1f:ee:c9:3d:e1:9d:95:ed:42:
46:7b:c1:a8:8a:f2:ef:8b:d2:49:c6:d9:ca:86:c7:
61:ae:94:3a:da:25:48:2f:58:b6:18:85:5c:b7:4e:
ac:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FA:06:4E:95:EE:6F:DF:D2:81:9F:BF:BE:46:FA:CB:1D:E3:DD:FE
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/qPoGTpXub9_SgZ-_vkb6yx3j3f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.12.0/22
141.11.71.0/24
141.11.86.0-141.11.95.255
Signature Algorithm: sha256WithRSAEncryption
1a:1c:10:9b:ab:f8:15:43:1d:92:a1:61:33:23:d7:78:5a:d2:
48:66:f8:6f:58:80:a3:e1:c2:35:22:61:2d:8a:a0:d0:97:26:
19:74:5f:19:a2:6b:8f:80:5a:3a:1d:86:69:79:e6:70:fd:b2:
5f:a8:59:a4:f8:a5:3c:78:87:2f:92:9f:28:62:98:92:cb:d4:
d3:4e:c5:a2:5c:78:83:86:65:d3:4c:53:4d:eb:7a:be:41:16:
17:67:46:7a:26:6d:62:e2:8e:a1:cc:65:8b:eb:1b:50:f7:4e:
8e:1a:4a:4e:f1:b6:07:b9:aa:f7:d3:cd:a3:98:fa:78:ab:77:
b0:c0:3e:0b:9e:ad:63:ee:83:97:79:e4:a6:1b:f1:87:43:d8:
7e:3f:fa:80:50:a3:47:dd:f4:38:22:29:3f:b5:53:3b:c8:94:
62:82:f7:1a:ca:9b:29:a7:b0:04:2c:b8:17:d5:4c:1f:63:1f:
98:6a:e8:b9:38:2d:ed:7d:30:9c:08:c6:a8:49:11:cd:e4:86:
2f:84:2e:c2:08:0d:d4:20:e1:5d:08:ee:b5:c1:54:d7:f9:e8:
42:19:48:5e:38:cb:78:12:ca:d5:30:7d:c8:92:b1:cc:aa:92:
19:59:0a:c8:03:53:67:c1:fc:1d:97:aa:89:3f:8e:98:07:09:
ac:24:2a:dc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIEAygjTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDIy
MTEwMzIwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYThmYTA2NGU5NWVl
NmZkZmQyODE5ZmJmYmU0NmZhY2IxZGUzZGRmZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALTZnK3M/2O0cI4nmNVk2Qk82n+/so7gBYejXYmsVova9ZY+
nnXMgH2Hyvdv3KpJc+LiwmHBXzixPoCHHB3fzcmzZ5K5OyOxgpqT156n93aZbaJ8
GXP3PU3mBzE/7VOUGrnTopxSNEv43MVDlem0RrqGyBkQSlb25s7QTeLfkqDvgg4H
ZEOGQkrPttnwaQcwg91hxLGAPIcEpm9d4EYgNBlKQpjslhL+ZAYMyAfm2kPGYT9f
3bSKtBKw4DnP74fDgO9G4AsxBeCeSAEB8JSLLGC0tQvW7AUWH+7JPeGdle1CRnvB
qIry74vSScbZyobHYa6UOtolSC9YthiFXLdOrBMCAwEAAaOCAh0wggIZMB0GA1Ud
DgQWBBSo+gZOle5v39KBn7++RvrLHePd/jAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L3FQb0dUcFh1YjlfU2daLV92a2I2eXgzajNmNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAz
BggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGgMEAo0LDAMEAI0LRzAMAwQBjQtWAwQF
jQtAMA0GCSqGSIb3DQEBCwUAA4IBAQAaHBCbq/gVQx2SoWEzI9d4WtJIZvhvWICj
4cI1ImEtiqDQlyYZdF8ZomuPgFo6HYZpeeZw/bJfqFmk+KU8eIcvkp8oYpiSy9TT
TsWiXHiDhmXTTFNN63q+QRYXZ0Z6Jm1i4o6hzGWL6xtQ906OGkpO8bYHuar3082j
mPp4q3ewwD4Lnq1j7oOXeeSmG/GHQ9h+P/qAUKNH3fQ4Iik/tVM7yJRigvcaypsp
p7AELLgX1UwfYx+Yaui5OC3tfTCcCMaoSRHN5IYvhC7CCA3UIOFdCO61wVTX+ehC
GUheOMt4EsrVMH3IkrHMqpIZWQrIA1Nnwfwdl6qJP46YBwmsJCrc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:54 2024 by rpki-client on console-fra.rpki-client.org