Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/rFaSms3G9CjoI-QKq3KyB5XLB0o.roa
File: rFaSms3G9CjoI-QKq3KyB5XLB0o.roa (raw, json)
Hash identifier: w3IVnXu3/EgjYKWR2KoNmmmvlQ7Bg/WM+tPhH3N7n4Q=
Subject key identifier: AC:56:92:9A:CD:C6:F4:28:E8:23:E4:0A:AB:72:B2:07:95:CB:07:4A
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0184C2F06F23ABB2C96869A60AADC89212E0
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/rFaSms3G9CjoI-QKq3KyB5XLB0o.roa
Signing time: Tue 29 Nov 2022 10:30:47 +0000
ROA not before: Tue 29 Nov 2022 10:30:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54641
IP address blocks: 141.11.72.0/22 maxlen: 24
141.11.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c2:f0:6f:23:ab:b2:c9:68:69:a6:0a:ad:c8:92:12:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 29 10:30:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac56929acdc6f428e823e40aab72b20795cb074a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0f:8c:f0:3b:60:5c:ca:c2:37:31:24:dc:89:
9d:df:f5:46:d6:42:63:f8:dd:4f:a9:f3:50:1e:3c:
d0:4d:4f:03:8e:ce:21:2d:99:46:cc:24:1e:1c:3f:
6a:5f:c9:78:96:51:4e:bf:5d:3c:eb:a9:86:ba:17:
10:98:f5:bf:47:cc:53:e1:7e:6c:1d:19:64:bd:e8:
2b:62:96:ad:dd:2a:f0:c1:24:e5:e7:1a:19:67:53:
92:f8:4f:d2:05:d3:27:0c:c4:16:92:60:00:e5:7a:
e1:0d:4a:cb:15:87:c4:0c:11:e3:e9:66:37:96:dc:
bd:2a:ac:df:ce:2a:f3:b2:2c:2f:91:00:b6:a6:64:
b1:a9:e4:ab:2c:98:33:1f:1b:0d:d4:d9:a1:db:7c:
8f:ed:79:be:a8:65:8c:59:ab:a9:ec:ef:df:89:b2:
6a:0b:f1:05:b3:2b:67:d1:7c:3e:ad:b3:b1:60:87:
25:e7:a1:be:41:b5:b4:0e:61:19:99:9a:55:75:e9:
c2:ac:fe:f4:80:cc:d6:00:53:f5:0c:7f:dc:54:1e:
e9:e8:fb:b0:da:5e:ba:95:39:da:ba:e9:a6:06:13:
3b:e8:7c:91:8e:aa:53:24:0c:d4:29:9f:0d:ed:48:
c9:2b:e3:65:00:13:fc:d2:73:77:4f:da:78:44:af:
40:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:56:92:9A:CD:C6:F4:28:E8:23:E4:0A:AB:72:B2:07:95:CB:07:4A
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/rFaSms3G9CjoI-QKq3KyB5XLB0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.72.0/22
141.11.92.0/22
Signature Algorithm: sha256WithRSAEncryption
13:24:88:ae:e1:2b:7f:51:7a:1d:e2:df:5d:9e:99:0a:24:52:
ab:ef:54:ba:4a:67:da:f8:cc:cf:fe:36:94:68:83:7f:e5:c7:
c9:c6:bd:00:78:20:8a:12:a8:3f:12:7c:a8:c6:bb:9d:3b:d1:
39:b1:52:77:db:cb:f3:14:66:75:69:1e:d6:c1:5c:f8:b8:a0:
30:68:05:2c:b3:38:fc:f1:a7:3c:c1:b8:fb:20:7b:e9:19:96:
6b:7a:70:7e:d2:10:10:22:86:19:9b:aa:88:42:8f:71:34:74:
c0:fd:62:f6:ba:6f:8b:73:15:31:5b:dc:e5:d4:f1:e1:93:3f:
ff:fc:25:fa:6a:85:f8:af:4d:1b:bd:9b:42:32:33:b8:6e:28:
db:73:e3:eb:95:5b:ec:f4:19:da:28:3a:ad:48:22:17:21:3e:
ee:84:6e:ab:0a:7b:f3:32:d1:bb:eb:2d:e8:d0:ff:1b:4f:04:
23:5a:19:d9:92:41:98:ba:d6:bc:76:fe:d9:d3:9e:75:61:05:
26:ed:4f:c0:7c:86:c7:92:dc:db:12:e5:10:18:81:8b:73:99:
ca:48:e4:ca:a3:d8:ba:43:49:f9:e0:a3:b5:7b:0e:07:dc:c4:
39:08:73:d0:f0:cc:fa:2d:9b:61:eb:04:7f:cf:5a:43:66:c5:
c4:5d:35:6c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYTC8G8jq7LJaGmmCq3IkhLgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIxMTI5MTAzMDQ3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzU2OTI5YWNkYzZmNDI4ZTgyM2U0MGFhYjcyYjIwNzk1Y2IwNzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw+M8DtgXMrCNzEk3Imd3/VG1kJj
+N1PqfNQHjzQTU8Djs4hLZlGzCQeHD9qX8l4llFOv10866mGuhcQmPW/R8xT4X5s
HRlkvegrYpat3SrwwSTl5xoZZ1OS+E/SBdMnDMQWkmAA5XrhDUrLFYfEDBHj6WY3
lty9KqzfzirzsiwvkQC2pmSxqeSrLJgzHxsN1Nmh23yP7Xm+qGWMWaup7O/fibJq
C/EFsytn0Xw+rbOxYIcl56G+QbW0DmEZmZpVdenCrP70gMzWAFP1DH/cVB7p6Puw
2l66lTnauummBhM76HyRjqpTJAzUKZ8N7UjJK+NlABP80nN3T9p4RK9AXQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKxWkprNxvQo6CPkCqtysgeVywdKMB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvckZhU21zM0c5Q2pvSS1RS3EzS3lCNVhMQjBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCjQtIAwQC
jQtcMA0GCSqGSIb3DQEBCwUAA4IBAQATJIiu4St/UXod4t9dnpkKJFKr71S6Smfa
+MzP/jaUaIN/5cfJxr0AeCCKEqg/EnyoxrudO9E5sVJ328vzFGZ1aR7WwVz4uKAw
aAUsszj88ac8wbj7IHvpGZZrenB+0hAQIoYZm6qIQo9xNHTA/WL2um+LcxUxW9zl
1PHhkz///CX6aoX4r00bvZtCMjO4bijbc+PrlVvs9BnaKDqtSCIXIT7uhG6rCnvz
MtG76y3o0P8bTwQjWhnZkkGYuta8dv7Z0551YQUm7U/AfIbHktzbEuUQGIGLc5nK
SOTKo9i6Q0n54KO1ew4H3MQ5CHPQ8Mz6LZth6wR/z1pDZsXEXTVs
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org