Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/qvxL8v8__sB67fQEHPRgUFI_bz4.roa
File: qvxL8v8__sB67fQEHPRgUFI_bz4.roa (raw, json)
Hash identifier: OOK7qG2QQ3EO7gSKIjFh60J/1IMIaeBtzLfJzT3jAFY=
Subject key identifier: AA:FC:4B:F2:FF:3F:FE:C0:7A:ED:F4:04:1C:F4:60:50:52:3F:6F:3E
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0276E20B
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/qvxL8v8__sB67fQEHPRgUFI_bz4.roa
Signing time: Sat 01 Jan 2022 08:03:28 +0000
ROA not before: Sat 01 Jan 2022 08:03:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210937
IP address blocks: 141.11.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41345547 (0x276e20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jan 1 08:03:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aafc4bf2ff3ffec07aedf4041cf46050523f6f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:73:ca:7b:72:e6:e5:4e:4f:df:50:32:b4:70:
6b:ef:39:a0:08:97:cf:0c:82:16:61:67:4a:5c:1d:
10:3d:98:b7:a0:88:64:6d:1f:52:6d:1a:3a:16:51:
d0:30:49:cd:02:84:c9:fc:6f:db:f1:1c:e7:47:bf:
44:54:6c:63:ee:8e:15:db:c9:cf:78:10:ec:6c:65:
b9:d8:f2:90:6b:81:1b:ab:5f:ca:38:ae:01:6a:e3:
fb:6b:67:c2:b9:91:83:68:a0:46:3f:56:bf:ec:86:
11:17:87:6b:c7:e3:aa:66:5c:fd:04:97:c8:23:c2:
3a:10:f7:89:62:8d:68:9a:f8:43:67:bd:6a:17:bb:
9d:a5:28:e5:8e:f0:e2:da:39:30:5a:31:33:9a:8d:
10:7e:36:d9:32:77:96:f9:3b:d8:3e:44:79:c8:fc:
33:a3:5c:91:a4:2e:b5:87:a7:90:09:07:69:00:29:
1c:f7:94:1d:63:6f:92:16:d3:69:bd:a2:aa:40:cb:
98:79:a4:50:ca:e8:4d:23:90:53:75:3d:84:df:0d:
8a:75:f2:4c:6e:7b:d0:a9:fb:45:b5:30:e2:fb:d9:
61:89:a0:fd:7b:dc:a0:19:80:b6:8b:11:45:3f:ee:
f1:d2:fb:d6:d6:48:0f:89:ab:1d:a3:54:2d:07:ee:
96:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FC:4B:F2:FF:3F:FE:C0:7A:ED:F4:04:1C:F4:60:50:52:3F:6F:3E
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/qvxL8v8__sB67fQEHPRgUFI_bz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.11.0/24
Signature Algorithm: sha256WithRSAEncryption
90:3d:95:4d:96:4c:bc:0c:85:7d:c3:1d:80:ad:28:06:a1:db:
80:36:f1:fe:90:f5:52:02:7e:b9:3a:1e:9a:5b:96:f0:5f:93:
65:3e:38:c9:ee:77:f3:3d:83:02:65:d1:da:35:1e:9f:55:2c:
9c:11:52:13:3f:2d:82:61:2c:0a:70:09:8f:f4:58:87:b2:b7:
ac:96:6e:ee:37:9e:21:fd:ea:53:92:e6:03:1c:82:a6:ad:1c:
df:e9:6f:c9:f9:1e:e2:68:95:b2:f3:69:12:05:fb:1c:13:ae:
58:f4:79:f5:57:b1:c0:5b:3a:23:6f:6c:82:e7:6a:36:6f:f3:
c0:2d:35:f9:1c:ff:14:be:f2:de:8f:83:2f:c0:4e:82:3c:ce:
e0:e8:ca:95:d5:b3:58:c3:39:15:e7:54:55:94:8f:a6:7c:6c:
de:f9:95:9e:18:4a:45:a5:f3:0a:9c:94:5a:91:69:3f:49:5e:
bf:0a:38:bd:ed:6e:57:3b:ea:f4:87:f4:e4:3a:ab:ba:05:24:
73:ba:05:62:fa:7a:b0:6d:4a:a7:7c:7b:a9:fb:d1:0c:1d:b1:
66:7b:bb:0d:bf:30:d5:b3:10:b9:c0:45:f6:67:22:1d:c6:56:
a7:66:6e:97:37:12:78:79:91:e5:5e:15:29:19:77:74:07:af:
18:e6:fa:0e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAnbiCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDEw
MTA4MDMyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWFmYzRiZjJmZjNm
ZmVjMDdhZWRmNDA0MWNmNDYwNTA1MjNmNmYzZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJhzynty5uVOT99QMrRwa+85oAiXzwyCFmFnSlwdED2Yt6CI
ZG0fUm0aOhZR0DBJzQKEyfxv2/Ec50e/RFRsY+6OFdvJz3gQ7GxludjykGuBG6tf
yjiuAWrj+2tnwrmRg2igRj9Wv+yGEReHa8fjqmZc/QSXyCPCOhD3iWKNaJr4Q2e9
ahe7naUo5Y7w4to5MFoxM5qNEH422TJ3lvk72D5Eecj8M6NckaQutYenkAkHaQAp
HPeUHWNvkhbTab2iqkDLmHmkUMroTSOQU3U9hN8NinXyTG570Kn7RbUw4vvZYYmg
/XvcoBmAtosRRT/u8dL71tZID4mrHaNULQfultsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSq/Evy/z/+wHrt9AQc9GBQUj9vPjAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L3F2eEw4djhfX3NCNjdmUUVIUFJnVUZJX2J6NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI0LCzANBgkqhkiG9w0BAQsFAAOC
AQEAkD2VTZZMvAyFfcMdgK0oBqHbgDbx/pD1UgJ+uToemluW8F+TZT44ye538z2D
AmXR2jUen1UsnBFSEz8tgmEsCnAJj/RYh7K3rJZu7jeeIf3qU5LmAxyCpq0c3+lv
yfke4miVsvNpEgX7HBOuWPR59VexwFs6I29sgudqNm/zwC01+Rz/FL7y3o+DL8BO
gjzO4OjKldWzWMM5FedUVZSPpnxs3vmVnhhKRaXzCpyUWpFpP0levwo4ve1uVzvq
9If05DqrugUkc7oFYvp6sG1Kp3x7qfvRDB2xZnu7Db8w1bMQucBF9mciHcZWp2Zu
lzcSeHmR5V4VKRl3dAevGOb6Dg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:37:17 2025 by rpki-client