Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/wlh_UEiGtGRJhBfqrmV0Tvqi7gc.roa
File: wlh_UEiGtGRJhBfqrmV0Tvqi7gc.roa (raw, json)
Hash identifier: rDnvpJ+M4XX0XgHuZO5H8+kVuaYhlQO0yRWdVr0Mer0=
Subject key identifier: C2:58:7F:50:48:86:B4:64:49:84:17:EA:AE:65:74:4E:FA:A2:EE:07
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 03410E53
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/wlh_UEiGtGRJhBfqrmV0Tvqi7gc.roa
Signing time: Mon 28 Feb 2022 10:25:36 +0000
ROA not before: Mon 28 Feb 2022 10:25:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 141.11.104.0/22 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.112.0/20 maxlen: 24
141.11.6.0/24 maxlen: 24
141.11.20.0/24 maxlen: 24
141.11.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54595155 (0x3410e53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Feb 28 10:25:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2587f504886b464498417eaae65744efaa2ee07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d5:42:7d:e9:de:32:30:f3:6c:7b:f4:1c:a0:
aa:39:89:d2:cd:90:cc:28:3d:34:fa:20:1f:9a:79:
c9:cb:ac:67:13:91:a6:ad:47:ff:02:14:14:e2:8a:
e7:23:42:5a:7d:1a:86:d7:d4:66:2e:7b:65:ff:93:
79:62:84:b0:c1:65:92:28:06:ae:3f:fb:38:82:38:
fd:2d:9e:b5:95:f6:b5:0a:34:b0:54:d0:ee:ef:9f:
13:ad:af:3c:0e:e7:f3:c1:a2:4d:49:4d:e2:11:a9:
09:5a:98:18:01:47:37:13:92:ef:85:09:ac:94:7e:
d3:17:7e:58:87:91:70:4d:6c:60:73:72:75:9c:4c:
09:b9:41:92:84:0f:b7:64:33:86:eb:a9:b2:b1:a7:
79:a3:54:08:dd:c3:38:61:bb:4a:6b:ab:52:a8:7f:
89:1e:20:3c:eb:f5:a7:22:0c:9d:48:cc:10:72:df:
e9:7e:d3:88:66:a9:c5:60:18:56:c8:90:a5:f4:51:
31:4f:5b:e3:1e:8d:89:d0:b4:72:56:b5:83:44:7d:
b4:f8:3e:db:b0:d0:33:6b:a6:e6:ba:54:9d:4b:52:
f4:78:e3:59:5d:2b:02:35:dd:1d:01:fb:fa:ad:21:
a8:54:4b:91:2d:55:06:12:ba:49:fa:a9:67:bc:0f:
31:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:58:7F:50:48:86:B4:64:49:84:17:EA:AE:65:74:4E:FA:A2:EE:07
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/wlh_UEiGtGRJhBfqrmV0Tvqi7gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
141.11.6.0/24
141.11.19.0-141.11.20.255
141.11.104.0/22
141.11.112.0/20
Signature Algorithm: sha256WithRSAEncryption
9b:e3:35:02:7b:c5:2d:b2:0b:38:55:c2:61:14:a2:b1:da:69:
76:0a:06:e5:73:04:46:84:e5:b5:aa:55:50:fb:67:8c:90:e0:
2d:ce:7b:6c:b6:77:13:9c:10:2e:09:69:fb:64:11:12:0b:2c:
d1:24:40:43:97:1f:4d:a3:7b:e6:7a:53:78:d4:9f:15:d4:b3:
dd:df:9c:37:72:9b:10:a6:db:00:7f:c8:8c:35:9d:83:c2:45:
22:6a:87:cd:39:4f:72:c8:07:87:58:dd:77:df:dd:d5:65:5a:
c7:03:77:f1:09:28:fd:be:c2:4a:d3:94:ab:61:dc:f8:67:1a:
d4:28:99:98:dc:b7:3b:fd:33:09:2a:4c:ca:6e:1f:60:7f:1b:
39:8e:9f:df:8b:1c:29:2f:1e:dc:ff:16:7f:a2:73:ce:48:52:
50:39:58:e8:2f:63:89:67:5a:41:75:77:b9:c5:18:23:d7:0e:
67:f6:03:80:a5:b0:2f:3c:d1:0b:31:b0:fe:01:9f:3b:7c:41:
4b:bd:c5:56:f3:b5:b7:65:01:06:d0:9d:96:a1:f0:a0:43:d1:
ee:e0:4a:90:41:a8:f2:58:8a:21:78:4f:77:dc:42:0d:76:40:
8d:2e:c9:05:f6:a0:40:a7:f9:a9:a4:d9:f6:e4:99:99:e2:a1:
98:50:27:0a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIEA0EOUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDIy
ODEwMjUzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzI1ODdmNTA0ODg2
YjQ2NDQ5ODQxN2VhYWU2NTc0NGVmYWEyZWUwNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO7VQn3p3jIw82x79BygqjmJ0s2QzCg9NPogH5p5ycusZxOR
pq1H/wIUFOKK5yNCWn0ahtfUZi57Zf+TeWKEsMFlkigGrj/7OII4/S2etZX2tQo0
sFTQ7u+fE62vPA7n88GiTUlN4hGpCVqYGAFHNxOS74UJrJR+0xd+WIeRcE1sYHNy
dZxMCblBkoQPt2QzhuupsrGneaNUCN3DOGG7SmurUqh/iR4gPOv1pyIMnUjMEHLf
6X7TiGapxWAYVsiQpfRRMU9b4x6NidC0cla1g0R9tPg+27DQM2um5rpUnUtS9Hjj
WV0rAjXdHQH7+q0hqFRLkS1VBhK6SfqpZ7wPMZUCAwEAAaOCAikwggIlMB0GA1Ud
DgQWBBTCWH9QSIa0ZEmEF+quZXRO+qLuBzAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L3dsaF9VRWlHdEdSSmhCZnFybVYwVHZxaTdnYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/
BggrBgEFBQcBBwEB/wQwMC4wLAQCAAEwJgMEAI0LAQMEAI0LBjAMAwQAjQsTAwQA
jQsUAwQCjQtoAwQEjQtwMA0GCSqGSIb3DQEBCwUAA4IBAQCb4zUCe8Utsgs4VcJh
FKKx2ml2CgblcwRGhOW1qlVQ+2eMkOAtzntstncTnBAuCWn7ZBESCyzRJEBDlx9N
o3vmelN41J8V1LPd35w3cpsQptsAf8iMNZ2DwkUiaofNOU9yyAeHWN13393VZVrH
A3fxCSj9vsJK05SrYdz4ZxrUKJmY3Lc7/TMJKkzKbh9gfxs5jp/fixwpLx7c/xZ/
onPOSFJQOVjoL2OJZ1pBdXe5xRgj1w5n9gOApbAvPNELMbD+AZ87fEFLvcVW87W3
ZQEG0J2WofCgQ9Hu4EqQQajyWIoheE933EINdkCNLskF9qBAp/mppNn25JmZ4qGY
UCcK
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:32 2025 by rpki-client