Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/uD6Mu3yrNC0bEzLw54PvlFsaYLY.roa
File: uD6Mu3yrNC0bEzLw54PvlFsaYLY.roa (raw, json)
Hash identifier: v80nko5rYhDZk4iSAq+waxOtSIcv0PBcdU2ibMH9FhU=
Subject key identifier: B8:3E:8C:BB:7C:AB:34:2D:1B:13:32:F0:E7:83:EF:94:5B:1A:60:B6
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01826D6AB30E507845A0F574FC6003FC7DF2
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/uD6Mu3yrNC0bEzLw54PvlFsaYLY.roa
Signing time: Fri 05 Aug 2022 09:51:25 +0000
ROA not before: Fri 05 Aug 2022 09:51:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 141.11.74.0/23 maxlen: 24
141.11.86.0/23 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.4.0/24 maxlen: 24
141.11.234.0/23 maxlen: 24
141.11.144.0/21 maxlen: 24
141.11.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:6a:b3:0e:50:78:45:a0:f5:74:fc:60:03:fc:7d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Aug 5 09:51:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b83e8cbb7cab342d1b1332f0e783ef945b1a60b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:55:c5:1e:b0:9e:fb:c5:2c:97:72:11:f8:66:
92:3f:a4:8c:3a:f5:f5:2b:ec:9d:24:2b:c5:c0:26:
31:2c:dd:c3:f9:c5:44:11:0f:c0:77:6f:cd:d1:ab:
7c:3e:2b:db:44:ed:2d:e5:4c:db:fb:04:7e:a9:ca:
ca:a3:70:3b:da:20:7d:b9:5b:90:eb:bd:e5:12:17:
18:55:64:aa:bf:0f:9c:cd:00:19:cf:48:48:aa:c6:
11:8c:89:3f:39:f6:64:30:06:ad:e2:ea:e3:72:05:
84:33:28:d1:a6:46:d3:34:cd:bb:2c:fb:54:04:25:
ec:62:f0:56:25:4a:ba:ed:e3:b0:28:e5:e0:11:69:
d4:f7:f4:6a:dc:04:cb:fb:89:12:5f:9a:24:21:a3:
af:a0:46:0e:d4:28:e0:b4:17:d4:c7:41:94:3e:ff:
30:ae:86:58:f6:86:ba:ab:95:46:4c:a8:c6:96:1d:
81:1b:eb:f1:00:33:82:c5:ed:72:e3:98:37:08:5c:
25:16:e7:73:a1:ca:79:82:0b:54:f7:b9:6b:72:56:
ff:e7:0b:85:6b:a4:3c:67:96:fc:16:4a:99:f7:26:
b7:f6:a5:4f:ff:d6:e3:af:71:bc:19:25:8d:86:22:
b5:d6:c0:72:3d:34:53:43:6f:7d:02:60:80:86:c6:
84:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3E:8C:BB:7C:AB:34:2D:1B:13:32:F0:E7:83:EF:94:5B:1A:60:B6
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/uD6Mu3yrNC0bEzLw54PvlFsaYLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
141.11.4.0/24
141.11.34.0/24
141.11.74.0/23
141.11.86.0/23
141.11.144.0/21
141.11.234.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:3e:f8:82:b9:05:19:83:d0:38:72:dd:9b:db:82:fa:d6:98:
7f:b8:70:46:73:ab:2f:b9:74:17:26:d5:8d:bd:90:c8:b1:c3:
a0:c5:0a:b0:d1:5f:d6:f4:14:67:69:c3:f4:11:ee:dc:4d:bb:
31:fe:90:1a:da:c8:07:65:ec:8f:63:69:a9:6a:92:48:8a:a4:
7b:45:01:73:4b:b5:c0:e5:ad:5a:2c:d2:84:e2:77:48:9e:31:
4a:3b:18:a1:20:3c:e1:47:64:00:18:4b:58:45:7f:5e:3c:70:
d8:cf:65:88:7d:cb:c0:4d:2f:32:42:5c:01:27:90:20:05:71:
d8:d3:a3:2d:43:27:79:34:a1:69:a7:4f:57:35:c5:97:41:af:
e5:29:a6:6b:e4:64:bb:0b:c6:bf:40:88:02:a6:8d:d3:eb:e5:
97:e5:c3:f7:2e:31:b0:ad:5a:68:a9:8c:ec:fe:38:8d:43:cf:
c3:72:d6:dc:ad:5f:f7:d0:b6:f2:b1:c9:81:49:47:92:58:39:
c2:f7:3d:70:c3:e3:4c:cb:f0:c4:e1:f5:c2:4a:2b:77:fc:69:
83:01:b4:f1:75:00:2e:f5:fb:3c:9d:9a:1b:17:2a:77:35:3d:
d9:dc:af:fd:77:70:c7:3c:dd:a6:d4:72:f3:5e:b7:5a:88:a6:
33:4f:d4:58
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYJtarMOUHhFoPV0/GAD/H3yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIwODA1MDk1MTI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODNlOGNiYjdjYWIzNDJkMWIxMzMyZjBlNzgzZWY5NDViMWE2MGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1XFHrCe+8Usl3IR+GaSP6SMOvX1
K+ydJCvFwCYxLN3D+cVEEQ/Ad2/N0at8PivbRO0t5Uzb+wR+qcrKo3A72iB9uVuQ
673lEhcYVWSqvw+czQAZz0hIqsYRjIk/OfZkMAat4urjcgWEMyjRpkbTNM27LPtU
BCXsYvBWJUq67eOwKOXgEWnU9/Rq3ATL+4kSX5okIaOvoEYO1CjgtBfUx0GUPv8w
roZY9oa6q5VGTKjGlh2BG+vxADOCxe1y45g3CFwlFudzocp5ggtU97lrclb/5wuF
a6Q8Z5b8FkqZ9ya39qVP/9bjr3G8GSWNhiK11sByPTRTQ299AmCAhsaEjwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFLg+jLt8qzQtGxMy8OeD75RbGmC2MB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvdUQ2TXUzeXJOQzBiRXpMdzU0UHZsRnNhWUxZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAjQsBAwQA
jQsEAwQAjQsiAwQBjQtKAwQBjQtWAwQDjQuQAwQBjQvqMA0GCSqGSIb3DQEBCwUA
A4IBAQArPviCuQUZg9A4ct2b24L61ph/uHBGc6svuXQXJtWNvZDIscOgxQqw0V/W
9BRnacP0Ee7cTbsx/pAa2sgHZeyPY2mpapJIiqR7RQFzS7XA5a1aLNKE4ndInjFK
OxihIDzhR2QAGEtYRX9ePHDYz2WIfcvATS8yQlwBJ5AgBXHY06MtQyd5NKFpp09X
NcWXQa/lKaZr5GS7C8a/QIgCpo3T6+WX5cP3LjGwrVpoqYzs/jiNQ8/DctbcrV/3
0LbyscmBSUeSWDnC9z1ww+NMy/DE4fXCSit3/GmDAbTxdQAu9fs8nZobFyp3NT3Z
3K/9d3DHPN2m1HLzXrdaiKYzT9RY
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:25:20 2025 by rpki-client