Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/zcfJMiVV5w_ScIgwuhWvC19gz-s.roa
File: zcfJMiVV5w_ScIgwuhWvC19gz-s.roa (raw, json)
Hash identifier: kFRD2d/DJc6YjQd005PGoaMjGDeR9Vm4DVt4DGe29RQ=
Subject key identifier: CD:C7:C9:32:25:55:E7:0F:D2:70:88:30:BA:15:AF:0B:5F:60:CF:EB
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 035751C7
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/zcfJMiVV5w_ScIgwuhWvC19gz-s.roa
Signing time: Fri 04 Mar 2022 11:29:56 +0000
ROA not before: Fri 04 Mar 2022 11:29:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.11.44.0/22 maxlen: 24
141.11.43.0/24 maxlen: 24
141.11.40.0/22 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.42.0/24 maxlen: 24
141.11.41.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.80.0/20 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.0.0/24 maxlen: 24
141.11.10.0/23 maxlen: 24
141.11.6.0/24 maxlen: 24
141.11.16.0/24 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.22.0/24 maxlen: 24
141.11.19.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.20.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.26.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.27.0/24 maxlen: 24
141.11.37.0/24 maxlen: 24
141.11.36.0/22 maxlen: 24
141.11.38.0/24 maxlen: 24
141.11.33.0/24 maxlen: 24
141.11.32.0/22 maxlen: 24
141.11.35.0/24 maxlen: 24
141.11.34.0/24 maxlen: 24
141.11.168.0/21 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.184.0/21 maxlen: 24
141.11.192.0/19 maxlen: 24
141.11.128.0/19 maxlen: 24
141.11.224.0/20 maxlen: 24
141.11.240.0/21 maxlen: 24
141.11.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56054215 (0x35751c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Mar 4 11:29:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdc7c9322555e70fd2708830ba15af0b5f60cfeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:c1:f6:44:18:6f:01:06:1c:92:e7:14:ff:
65:61:c9:2e:f0:6c:f9:6d:0a:14:49:ca:00:ab:46:
5f:cf:09:c3:c1:e1:33:ce:c7:fa:24:9f:5b:28:82:
51:cc:44:b3:91:64:a6:53:33:eb:d3:0e:1c:dc:36:
be:c7:33:24:87:21:3b:12:8d:f9:8b:69:59:98:fe:
d2:82:7b:32:57:37:58:3a:ee:ca:8b:2b:ad:9a:78:
3d:a3:4c:5f:89:0e:6e:91:55:c9:35:06:e8:9a:04:
86:20:7c:2b:fb:31:52:71:78:c7:5e:38:c6:d4:68:
d8:09:16:86:dc:9c:2d:af:50:ce:11:96:e1:b9:8b:
8e:41:f9:d2:72:09:6b:70:33:97:e0:b0:23:07:d1:
db:d1:2e:1c:f9:50:fd:38:2e:35:63:23:8a:48:35:
be:3e:10:94:35:98:f0:e2:c1:d3:c6:ce:7b:cd:68:
65:89:d0:95:1f:03:f2:69:cb:ef:db:b2:75:0f:4f:
5f:d2:41:b4:74:85:f3:f6:96:ab:d1:3b:fa:79:bb:
c4:b0:bd:f8:f2:b0:90:ea:8a:bc:0c:7d:23:ee:0e:
9a:8b:43:a3:fc:e7:51:8e:3a:a9:ce:a7:7e:e8:80:
30:bb:95:d2:66:ad:36:ac:af:0b:c8:f9:ad:90:e6:
86:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C7:C9:32:25:55:E7:0F:D2:70:88:30:BA:15:AF:0B:5F:60:CF:EB
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/zcfJMiVV5w_ScIgwuhWvC19gz-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0-141.11.2.255
141.11.6.0/24
141.11.10.0/23
141.11.16.0-141.11.22.255
141.11.25.0-141.11.28.255
141.11.31.0-141.11.47.255
141.11.80.0/20
141.11.128.0/19
141.11.168.0-141.11.176.255
141.11.182.0-141.11.251.255
Signature Algorithm: sha256WithRSAEncryption
69:9f:cf:ac:ca:83:c7:34:61:f1:78:64:6f:5d:78:3d:26:fb:
6c:f0:07:05:dd:7c:5d:50:12:6c:10:b0:2b:13:ed:16:64:87:
0b:a9:fe:a3:f4:91:8f:c0:ea:06:9e:6e:06:1c:30:0f:02:8d:
16:20:d5:ab:ad:12:d9:58:b9:77:3c:cd:12:6f:34:c9:1d:71:
e7:53:3f:ff:1b:94:1c:83:2c:8c:a2:9f:b9:ca:9e:04:37:2c:
0a:47:69:66:3e:24:b9:ba:c9:e9:8d:94:19:ac:38:e9:73:fc:
5e:99:76:0f:48:9e:8e:38:2e:61:f6:83:09:98:e7:89:5d:3f:
d4:2f:b0:78:61:81:57:6d:19:77:98:96:37:a0:9a:f9:fd:fb:
af:f5:fd:b8:12:9a:a2:a7:50:c1:5a:d9:16:d5:fb:aa:04:cf:
e0:30:e2:1e:61:35:fb:71:b6:b9:5f:53:5f:5d:1b:c6:2f:58:
f8:6d:2b:26:42:af:64:09:85:7a:7b:46:99:96:15:9d:d0:c5:
8a:f2:ab:c3:30:c4:3d:12:3b:58:16:68:b4:ab:a2:e6:59:96:
a3:cb:2b:74:24:bd:4e:62:60:e4:5a:0b:9c:20:dc:d6:78:f2:
0e:2e:81:3f:84:88:53:39:e4:2e:db:c0:ea:93:ad:65:68:f1:
60:17:07:ea
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIEA1dRxzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDMw
NDExMjk1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2RjN2M5MzIyNTU1
ZTcwZmQyNzA4ODMwYmExNWFmMGI1ZjYwY2ZlYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALp+wfZEGG8BBhyS5xT/ZWHJLvBs+W0KFEnKAKtGX88Jw8Hh
M87H+iSfWyiCUcxEs5FkplMz69MOHNw2vsczJIchOxKN+YtpWZj+0oJ7Mlc3WDru
yosrrZp4PaNMX4kObpFVyTUG6JoEhiB8K/sxUnF4x144xtRo2AkWhtycLa9QzhGW
4bmLjkH50nIJa3Azl+CwIwfR29EuHPlQ/TguNWMjikg1vj4QlDWY8OLB08bOe81o
ZYnQlR8D8mnL79uydQ9PX9JBtHSF8/aWq9E7+nm7xLC9+PKwkOqKvAx9I+4OmotD
o/znUY46qc6nfuiAMLuV0matNqyvC8j5rZDmhrMCAwEAAaOCAm8wggJrMB0GA1Ud
DgQWBBTNx8kyJVXnD9JwiDC6Fa8LX2DP6zAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L3pjZkpNaVZWNXdfU2NJZ3d1aFd2QzE5Z3otcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
hAYIKwYBBQUHAQcBAf8EdTBzMHEEAgABMGswCwMDAI0LAwQAjQsCAwQAjQsGAwQB
jQsKMAwDBASNCxADBACNCxYwDAMEAI0LGQMEAI0LHDAMAwQAjQsfAwQEjQsgAwQE
jQtQAwQFjQuAMAwDBAONC6gDBACNC7AwDAMEAY0LtgMEAo0L+DANBgkqhkiG9w0B
AQsFAAOCAQEAaZ/PrMqDxzRh8Xhkb114PSb7bPAHBd18XVASbBCwKxPtFmSHC6n+
o/SRj8DqBp5uBhwwDwKNFiDVq60S2Vi5dzzNEm80yR1x51M//xuUHIMsjKKfucqe
BDcsCkdpZj4kubrJ6Y2UGaw46XP8Xpl2D0iejjguYfaDCZjniV0/1C+weGGBV20Z
d5iWN6Ca+f37r/X9uBKaoqdQwVrZFtX7qgTP4DDiHmE1+3G2uV9TX10bxi9Y+G0r
JkKvZAmFentGmZYVndDFivKrwzDEPRI7WBZotKui5lmWo8srdCS9TmJg5FoLnCDc
1njyDi6BP4SIUznkLtvA6pOtZWjxYBcH6g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:34 2024 by rpki-client on console-ams.rpki-client.org