Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/s5jQShduQKGkzcWWVZ2aiSv7hd4.roa
File: s5jQShduQKGkzcWWVZ2aiSv7hd4.roa (raw, json)
Hash identifier: jpItGZsXDG6Ouv9SnGwUqSHWfMnMNBmEyrAT2j9dOvM=
Subject key identifier: B3:98:D0:4A:17:6E:40:A1:A4:CD:C5:96:55:9D:9A:89:2B:FB:85:DE
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0182D063C59A285AB085DF3210BF2E0CC32C
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/s5jQShduQKGkzcWWVZ2aiSv7hd4.roa
Signing time: Wed 24 Aug 2022 15:06:15 +0000
ROA not before: Wed 24 Aug 2022 15:06:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.11.44.0/22 maxlen: 24
141.11.40.0/22 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.42.0/24 maxlen: 24
141.11.41.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.0.0/24 maxlen: 24
141.11.10.0/23 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.22.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.37.0/24 maxlen: 24
141.11.33.0/24 maxlen: 24
141.11.35.0/24 maxlen: 24
141.11.32.0/24 maxlen: 24
141.11.160.0/24 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.189.0/24 maxlen: 24
141.11.187.0/24 maxlen: 24
141.11.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d0:63:c5:9a:28:5a:b0:85:df:32:10:bf:2e:0c:c3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Aug 24 15:06:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b398d04a176e40a1a4cdc596559d9a892bfb85de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c0:db:59:52:0b:8b:c2:4f:be:20:57:4a:6d:
06:82:2c:0b:63:ab:7a:9e:39:a2:d5:c1:71:00:7d:
46:a4:55:a5:86:4b:c1:90:e5:21:2b:9c:5c:20:a1:
c5:1c:f1:17:82:d0:0d:1b:73:e2:8e:9f:69:f3:45:
74:06:55:d0:74:e4:e9:fa:a8:d3:4d:33:b5:a5:96:
ee:fd:be:c7:18:8a:1c:5d:7d:40:f5:74:1c:c0:77:
3f:af:b6:72:39:50:3a:97:36:73:cf:68:d7:cf:3b:
61:cb:92:55:3c:cd:c5:4b:29:37:d7:c0:26:a7:d0:
7d:9e:25:9e:0c:78:d4:45:85:ae:6d:13:00:b2:41:
89:55:33:1a:55:95:1d:7b:14:5b:03:77:fa:c8:51:
b3:36:c6:f3:15:f0:23:94:ab:d0:42:3c:ee:42:39:
49:b0:6d:26:f4:fb:46:e3:2c:fb:f8:27:79:a6:bc:
ee:2b:12:b1:10:b1:bf:c0:19:20:42:6c:8e:4a:c4:
f8:e8:30:a0:e7:a8:10:cc:ca:70:47:b3:49:72:19:
a6:22:49:4e:d1:a9:0e:cf:4d:5c:84:82:e4:57:66:
2d:52:0b:dd:49:9d:90:2b:3d:27:82:39:21:fe:0f:
3a:4d:2a:91:eb:f7:81:60:6d:49:4f:41:49:f4:fd:
d0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:98:D0:4A:17:6E:40:A1:A4:CD:C5:96:55:9D:9A:89:2B:FB:85:DE
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/s5jQShduQKGkzcWWVZ2aiSv7hd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0-141.11.2.255
141.11.10.0/23
141.11.17.0-141.11.18.255
141.11.21.0-141.11.22.255
141.11.25.0/24
141.11.28.0/24
141.11.31.0-141.11.33.255
141.11.35.0/24
141.11.37.0/24
141.11.39.0-141.11.47.255
141.11.99.0/24
141.11.160.0/24
141.11.176.0/24
141.11.182.0/23
141.11.187.0/24
141.11.189.0/24
Signature Algorithm: sha256WithRSAEncryption
94:c2:6e:d7:66:73:93:50:ac:3c:ec:b8:95:af:7b:0f:49:26:
64:95:0c:8c:77:3f:fd:05:7c:92:2e:a0:22:b5:d0:fa:70:f2:
38:b0:62:6b:e1:72:d6:65:41:3c:41:cc:f2:98:d2:71:27:ec:
0b:f0:57:6d:0d:ca:b9:87:d1:cf:05:30:78:e3:95:fb:0d:4f:
89:1c:eb:5e:19:3f:56:d4:32:b1:b1:d6:2c:e4:c6:a5:ba:eb:
31:86:e5:8c:14:dc:78:d3:e7:10:0a:4a:48:1b:98:41:c2:36:
4c:1b:d8:b1:a9:16:79:ea:84:37:ae:fb:b5:18:e0:bd:3d:8d:
ea:82:ea:d5:6c:af:30:ae:bf:8e:3c:71:6e:b4:7b:69:f6:4d:
15:02:4e:73:5d:19:62:ef:f2:37:95:5f:e2:2c:ae:7b:4f:ae:
4b:b5:df:0d:e1:19:f7:9b:f0:35:5d:4f:66:f6:29:a6:f8:e6:
1b:1a:a2:52:59:5b:79:e2:9c:6f:ee:7e:5a:41:44:51:a5:f8:
29:eb:ce:6d:3b:a7:d1:d0:99:a1:52:f7:fc:9b:d7:ef:aa:94:
ba:17:f8:aa:89:4b:09:58:1a:9b:32:c9:40:8a:3e:03:c3:a7:
c4:75:c8:5b:f7:a7:c2:e8:2c:c8:77:4b:68:ce:dd:44:e8:d6:
f9:22:8e:e7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgISAYLQY8WaKFqwhd8yEL8uDMMsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIwODI0MTUwNjE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzk4ZDA0YTE3NmU0MGExYTRjZGM1OTY1NTlkOWE4OTJiZmI4NWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MDbWVILi8JPviBXSm0GgiwLY6t6
njmi1cFxAH1GpFWlhkvBkOUhK5xcIKHFHPEXgtANG3Pijp9p80V0BlXQdOTp+qjT
TTO1pZbu/b7HGIocXX1A9XQcwHc/r7ZyOVA6lzZzz2jXzzthy5JVPM3FSyk318Am
p9B9niWeDHjURYWubRMAskGJVTMaVZUdexRbA3f6yFGzNsbzFfAjlKvQQjzuQjlJ
sG0m9PtG4yz7+Cd5przuKxKxELG/wBkgQmyOSsT46DCg56gQzMpwR7NJchmmIklO
0akOz01chILkV2YtUgvdSZ2QKz0ngjkh/g86TSqR6/eBYG1JT0FJ9P3QFwIDAQAB
o4ICjzCCAoswHQYDVR0OBBYEFLOY0EoXbkChpM3FllWdmokr+4XeMB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvczVqUVNoZHVRS0dremNXV1ZaMmFpU3Y3aGQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGkBggrBgEFBQcBBwEB/wSBlDCBkTCBjgQCAAEwgYcwCwMD
AI0LAwQAjQsCAwQBjQsKMAwDBACNCxEDBACNCxIwDAMEAI0LFQMEAI0LFgMEAI0L
GQMEAI0LHDAMAwQAjQsfAwQBjQsgAwQAjQsjAwQAjQslMAwDBACNCycDBASNCyAD
BACNC2MDBACNC6ADBACNC7ADBAGNC7YDBACNC7sDBACNC70wDQYJKoZIhvcNAQEL
BQADggEBAJTCbtdmc5NQrDzsuJWvew9JJmSVDIx3P/0FfJIuoCK10Ppw8jiwYmvh
ctZlQTxBzPKY0nEn7AvwV20NyrmH0c8FMHjjlfsNT4kc614ZP1bUMrGx1izkxqW6
6zGG5YwU3HjT5xAKSkgbmEHCNkwb2LGpFnnqhDeu+7UY4L09jeqC6tVsrzCuv448
cW60e2n2TRUCTnNdGWLv8jeVX+IsrntPrku13w3hGfeb8DVdT2b2Kab45hsaolJZ
W3ninG/uflpBRFGl+Cnrzm07p9HQmaFS9/yb1++qlLoX+KqJSwlYGpsyyUCKPgPD
p8R1yFv3p8LoLMh3S2jO3UTo1vkijuc=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:02 2025 by rpki-client