Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/tjZEKWloSP-lgPvA0N8zzggvqdw.roa
File: tjZEKWloSP-lgPvA0N8zzggvqdw.roa (raw, json)
Hash identifier: 5m9iGhHrQ09OJPLND+PKVmNyMq7HBgEllkFSneKMaKs=
Subject key identifier: B6:36:44:29:69:68:48:FF:A5:80:FB:C0:D0:DF:33:CE:08:2F:A9:DC
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01826D6F3F5EDAD57DB3BE2E94CACFA22534
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/tjZEKWloSP-lgPvA0N8zzggvqdw.roa
Signing time: Fri 05 Aug 2022 09:56:23 +0000
ROA not before: Fri 05 Aug 2022 09:56:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.11.44.0/22 maxlen: 24
141.11.40.0/22 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.42.0/24 maxlen: 24
141.11.41.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.0.0/24 maxlen: 24
141.11.10.0/23 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.22.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.37.0/24 maxlen: 24
141.11.33.0/24 maxlen: 24
141.11.35.0/24 maxlen: 24
141.11.32.0/24 maxlen: 24
141.11.152.0/22 maxlen: 24
141.11.160.0/24 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.99.0/24 maxlen: 24
141.11.232.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:6f:3f:5e:da:d5:7d:b3:be:2e:94:ca:cf:a2:25:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Aug 5 09:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6364429696848ffa580fbc0d0df33ce082fa9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:38:c9:2d:40:6b:d9:4b:7b:18:e5:f3:4d:
93:09:fe:ad:3a:b0:21:aa:01:95:66:ff:ae:c3:7d:
eb:c6:52:fe:15:6a:1c:b9:f6:da:a0:31:8d:1f:d8:
3f:af:61:ea:c4:3b:f6:94:07:29:2b:76:22:b8:c9:
f8:ce:3e:8c:bf:3e:66:8c:64:78:0d:e4:f3:99:46:
3a:a0:8f:60:2d:53:9a:08:c4:bc:eb:4b:4b:ac:02:
af:ad:bf:3f:4e:a7:fc:11:88:9f:af:c5:93:34:b2:
8c:74:29:82:87:54:e8:7e:ee:1e:b6:71:e7:d4:f8:
3e:09:a6:78:33:a8:e2:29:be:f0:21:29:5a:04:49:
bf:c9:0f:8b:e7:7b:fb:dc:97:b9:a4:06:48:30:a8:
45:f8:07:bb:77:22:64:f2:78:40:0b:5f:0a:89:73:
30:a0:dd:3b:ba:45:71:72:c3:55:18:95:3d:0f:d4:
80:64:bb:ae:ad:ec:9c:df:57:0d:c8:82:00:7e:cf:
96:4e:89:a4:81:ab:9c:01:7d:e4:c6:c1:8b:80:aa:
4a:8f:46:4d:00:71:f4:3a:44:5a:94:cc:bd:74:05:
73:62:22:8b:3a:bb:08:ef:41:dc:aa:26:f2:bd:c7:
ec:06:52:96:db:6f:be:7a:4e:1d:00:fc:07:46:bf:
82:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:36:44:29:69:68:48:FF:A5:80:FB:C0:D0:DF:33:CE:08:2F:A9:DC
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/tjZEKWloSP-lgPvA0N8zzggvqdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0-141.11.2.255
141.11.10.0/23
141.11.17.0-141.11.18.255
141.11.21.0-141.11.22.255
141.11.25.0/24
141.11.28.0/24
141.11.31.0-141.11.33.255
141.11.35.0/24
141.11.37.0/24
141.11.39.0-141.11.47.255
141.11.99.0/24
141.11.152.0/22
141.11.160.0/24
141.11.176.0/24
141.11.182.0/23
141.11.232.0/23
Signature Algorithm: sha256WithRSAEncryption
16:f1:2c:0c:f1:70:03:16:a6:9d:48:a7:20:3d:ec:35:01:c4:
fb:14:1e:2c:17:c3:ac:b8:fa:1d:42:1a:94:a2:c6:39:d8:7d:
ca:0b:e7:b8:12:6e:c4:6f:b6:aa:75:ab:29:c0:3c:ca:5c:55:
a9:fd:a1:4c:50:a3:d2:87:f1:45:36:8d:ce:69:57:6e:30:78:
a2:cb:53:ab:2b:83:08:fd:06:aa:1a:ae:97:c2:18:58:d9:9a:
a3:ce:ad:3b:d4:f1:57:ec:58:6e:f6:9d:e3:c4:e4:7e:d7:c1:
69:64:e4:2c:05:4a:f2:c5:1e:cc:c8:7c:4d:3c:0b:37:15:da:
b2:45:2e:75:4f:ec:a1:e1:b3:fc:ea:8f:31:00:15:dc:b9:5c:
56:43:ce:e7:15:96:25:b4:9b:c9:a9:f7:d1:41:39:cd:41:7e:
0d:21:6f:65:a3:e4:c2:9e:69:ad:f5:4d:fb:61:cb:5d:be:2d:
94:29:ac:59:08:3d:a6:9b:84:3c:c2:e5:3f:fe:29:77:31:72:
f1:32:fa:31:e1:21:04:8d:21:ff:ca:36:58:fa:64:3c:ea:ee:
f3:a3:9d:6b:c0:c3:e3:49:a8:a3:3f:f7:a8:df:dd:43:eb:90:
d3:7d:55:84:47:c6:74:5a:2e:01:65:96:33:e4:08:64:19:a6:
c6:b3:be:22
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgISAYJtbz9e2tV9s74ulMrPoiU0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIwODA1MDk1NjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjM2NDQyOTY5Njg0OGZmYTU4MGZiYzBkMGRmMzNjZTA4MmZhOWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGI4yS1Aa9lLexjl802TCf6tOrAh
qgGVZv+uw33rxlL+FWocufbaoDGNH9g/r2HqxDv2lAcpK3YiuMn4zj6Mvz5mjGR4
DeTzmUY6oI9gLVOaCMS860tLrAKvrb8/Tqf8EYifr8WTNLKMdCmCh1Tofu4etnHn
1Pg+CaZ4M6jiKb7wISlaBEm/yQ+L53v73Je5pAZIMKhF+Ae7dyJk8nhAC18KiXMw
oN07ukVxcsNVGJU9D9SAZLuureyc31cNyIIAfs+WTomkgaucAX3kxsGLgKpKj0ZN
AHH0OkRalMy9dAVzYiKLOrsI70HcqibyvcfsBlKW22++ek4dAPwHRr+C7QIDAQAB
o4ICjzCCAoswHQYDVR0OBBYEFLY2RClpaEj/pYD7wNDfM84IL6ncMB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvdGpaRUtXbG9TUC1sZ1B2QTBOOHp6Z2d2cWR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGkBggrBgEFBQcBBwEB/wSBlDCBkTCBjgQCAAEwgYcwCwMD
AI0LAwQAjQsCAwQBjQsKMAwDBACNCxEDBACNCxIwDAMEAI0LFQMEAI0LFgMEAI0L
GQMEAI0LHDAMAwQAjQsfAwQBjQsgAwQAjQsjAwQAjQslMAwDBACNCycDBASNCyAD
BACNC2MDBAKNC5gDBACNC6ADBACNC7ADBAGNC7YDBAGNC+gwDQYJKoZIhvcNAQEL
BQADggEBABbxLAzxcAMWpp1IpyA97DUBxPsUHiwXw6y4+h1CGpSixjnYfcoL57gS
bsRvtqp1qynAPMpcVan9oUxQo9KH8UU2jc5pV24weKLLU6srgwj9BqoarpfCGFjZ
mqPOrTvU8VfsWG72nePE5H7XwWlk5CwFSvLFHszIfE08CzcV2rJFLnVP7KHhs/zq
jzEAFdy5XFZDzucVliW0m8mp99FBOc1Bfg0hb2Wj5MKeaa31Tfthy12+LZQprFkI
PaabhDzC5T/+KXcxcvEy+jHhIQSNIf/KNlj6ZDzq7vOjnWvAw+NJqKM/96jf3UPr
kNN9VYRHxnRaLgFlljPkCGQZpsazviI=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:51 2025 by rpki-client