Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/yw6fca-k1etQ17u-lPFxr9x-wNo.roa
File: yw6fca-k1etQ17u-lPFxr9x-wNo.roa (raw, json)
Hash identifier: bJEKI6+KkvjD2G1E69ZB5MvE8tLKjOuVutoKKQwOxOY=
Subject key identifier: CB:0E:9F:71:AF:A4:D5:EB:50:D7:BB:BE:94:F1:71:AF:DC:7E:C0:DA
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 054E02A4
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/yw6fca-k1etQ17u-lPFxr9x-wNo.roa
Signing time: Thu 30 Jun 2022 12:23:02 +0000
ROA not before: Thu 30 Jun 2022 12:23:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 141.11.190.0/24 maxlen: 24
141.11.103.0/24 maxlen: 24
141.11.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88998564 (0x54e02a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jun 30 12:23:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb0e9f71afa4d5eb50d7bbbe94f171afdc7ec0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:ac:7f:bf:f1:aa:d9:7e:9d:e9:86:43:df:
7e:b2:32:fe:9d:ba:7d:ac:98:d8:cb:0f:59:74:9e:
48:b6:7e:82:b0:5f:71:2b:82:fd:ff:1f:b8:ad:02:
ab:de:dc:96:d2:64:cf:49:ec:1f:8c:11:f8:46:7f:
75:21:49:14:a1:4e:7e:40:9f:f6:40:c2:a2:57:82:
9e:77:e1:1e:49:51:fe:56:9a:00:40:ba:0c:71:16:
64:e9:66:f5:3a:2e:be:c2:90:f9:0a:f2:4b:09:1f:
36:6f:83:9d:d9:3c:63:24:af:8c:71:e9:db:d4:f6:
0c:4f:d2:16:02:4e:50:e9:df:aa:26:45:63:57:a3:
a7:3c:e8:43:64:09:7a:a2:59:ca:b5:3f:03:ad:36:
35:20:db:fa:0c:ab:45:6f:63:36:b1:ff:c6:ff:1e:
c2:d4:7f:0f:9b:23:d1:6c:6a:7f:91:e6:cf:af:7e:
10:d2:a5:43:68:8c:86:ac:c8:f1:a8:b4:fa:be:f2:
ed:eb:64:64:5a:2c:1c:3e:b0:8b:a1:f3:d6:48:6d:
3f:8c:fc:91:c1:3a:01:44:ce:58:1c:03:36:c8:48:
a8:eb:64:b7:51:00:f4:65:a2:b8:f9:7d:cf:58:32:
52:3a:39:d2:0c:74:cf:8a:dd:4d:d8:7d:35:f6:76:
fb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0E:9F:71:AF:A4:D5:EB:50:D7:BB:BE:94:F1:71:AF:DC:7E:C0:DA
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/yw6fca-k1etQ17u-lPFxr9x-wNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.34.0/24
141.11.103.0/24
141.11.190.0/24
Signature Algorithm: sha256WithRSAEncryption
07:33:5f:59:32:5d:0b:8e:27:5c:99:3a:6d:7f:9a:96:0c:9f:
94:0c:ac:4e:03:cd:fb:51:2b:3f:5a:66:8c:ce:91:58:d4:6e:
a8:97:3e:8b:d1:c2:52:12:52:c2:6e:c0:12:27:11:91:7a:45:
cb:a9:c1:ff:95:2f:66:89:5e:91:ff:02:c6:e6:3d:c0:3d:61:
05:97:d4:c9:ef:18:42:46:5c:e2:0c:65:7d:da:0e:8d:47:36:
5c:01:64:66:11:dd:b0:86:6f:3a:01:b8:46:98:9f:08:36:26:
aa:c2:74:40:f1:dc:ff:83:b3:33:c8:1e:5d:ae:29:d3:11:29:
4a:54:c0:8a:30:8d:5b:b9:85:7c:f5:e9:53:16:ef:aa:2a:5d:
ee:6b:dd:f8:aa:15:6f:e6:f7:6e:9a:40:66:e0:6d:c9:c8:9f:
1a:0a:05:ce:48:45:fa:ce:f5:3b:27:aa:06:55:92:17:e3:f4:
ef:26:1c:37:de:de:31:d1:93:1c:53:c3:8f:1c:41:9b:8e:60:
b1:46:d8:18:08:96:fa:b7:c4:4e:1e:e1:62:ad:f6:21:5c:e1:
b4:96:3f:5d:8f:7c:d1:3d:37:76:6c:11:e7:02:6a:9b:b5:b3:
2d:88:9b:4e:78:bd:43:bf:ae:d0:64:d0:e8:de:c1:e0:c7:63:
d3:c0:14:f8
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEBU4CpDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDYz
MDEyMjMwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2IwZTlmNzFhZmE0
ZDVlYjUwZDdiYmJlOTRmMTcxYWZkYzdlYzBkYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMiJrH+/8arZfp3phkPffrIy/p26fayY2MsPWXSeSLZ+grBf
cSuC/f8fuK0Cq97cltJkz0nsH4wR+EZ/dSFJFKFOfkCf9kDColeCnnfhHklR/laa
AEC6DHEWZOlm9TouvsKQ+QrySwkfNm+Dndk8YySvjHHp29T2DE/SFgJOUOnfqiZF
Y1ejpzzoQ2QJeqJZyrU/A602NSDb+gyrRW9jNrH/xv8ewtR/D5sj0Wxqf5Hmz69+
ENKlQ2iMhqzI8ai0+r7y7etkZFosHD6wi6Hz1khtP4z8kcE6AUTOWBwDNshIqOtk
t1EA9GWiuPl9z1gyUjo50gx0z4rdTdh9NfZ2++UCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBTLDp9xr6TV61DXu76U8XGv3H7A2jAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L3l3NmZjYS1rMWV0UTE3dS1sUEZ4cjl4LXdOby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAI0LIgMEAI0LZwMEAI0LvjANBgkq
hkiG9w0BAQsFAAOCAQEABzNfWTJdC44nXJk6bX+algyflAysTgPN+1ErP1pmjM6R
WNRuqJc+i9HCUhJSwm7AEicRkXpFy6nB/5UvZolekf8CxuY9wD1hBZfUye8YQkZc
4gxlfdoOjUc2XAFkZhHdsIZvOgG4RpifCDYmqsJ0QPHc/4OzM8geXa4p0xEpSlTA
ijCNW7mFfPXpUxbvqipd7mvd+KoVb+b3bppAZuBtycifGgoFzkhF+s71OyeqBlWS
F+P07yYcN97eMdGTHFPDjxxBm45gsUbYGAiW+rfETh7hYq32IVzhtJY/XY980T03
dmwR5wJqm7WzLYibTni9Q7+u0GTQ6N7B4Mdj08AU+A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:49 2025 by rpki-client