Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/42WSewko69_QTOf1n0sV36SkuOE.roa
File: 42WSewko69_QTOf1n0sV36SkuOE.roa (raw, json)
Hash identifier: eMfTY1Mem5t7cIVkUfnBHnpNcmHpN9asvWv+LMQeNZI=
Subject key identifier: E3:65:92:7B:09:28:EB:DF:D0:4C:E7:F5:9F:4B:15:DF:A4:A4:B8:E1
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 03D819B2
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/42WSewko69_QTOf1n0sV36SkuOE.roa
Signing time: Tue 12 Apr 2022 13:14:37 +0000
ROA not before: Tue 12 Apr 2022 13:14:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.11.44.0/22 maxlen: 24
141.11.43.0/24 maxlen: 24
141.11.40.0/22 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.42.0/24 maxlen: 24
141.11.41.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.80.0/20 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.0.0/24 maxlen: 24
141.11.10.0/23 maxlen: 24
141.11.16.0/24 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.22.0/24 maxlen: 24
141.11.19.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.20.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.26.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.37.0/24 maxlen: 24
141.11.36.0/22 maxlen: 24
141.11.38.0/24 maxlen: 24
141.11.33.0/24 maxlen: 24
141.11.32.0/22 maxlen: 24
141.11.35.0/24 maxlen: 24
141.11.34.0/24 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.184.0/21 maxlen: 24
141.11.192.0/19 maxlen: 24
141.11.128.0/19 maxlen: 24
141.11.224.0/20 maxlen: 24
141.11.240.0/21 maxlen: 24
141.11.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64494002 (0x3d819b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 12 13:14:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e365927b0928ebdfd04ce7f59f4b15dfa4a4b8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:05:74:d3:fe:bd:be:cd:b9:b4:e1:35:ef:5d:
37:5c:68:2d:25:55:39:67:e0:3a:bb:54:a5:40:80:
2c:09:9e:0b:49:5b:35:91:58:9c:24:9a:7b:6e:f1:
ef:27:50:e3:92:a6:52:48:eb:3a:e8:34:9d:6b:1b:
5d:d7:31:26:a1:71:ef:a8:ef:d2:a0:61:be:5f:8b:
fd:30:d9:15:ae:76:ee:8f:d5:dd:59:90:db:e2:b1:
94:c9:df:01:80:31:11:67:36:b2:ab:b8:14:b9:e4:
f2:96:56:c1:ec:e7:ac:80:ae:d9:30:61:4a:ff:09:
c4:d9:8d:3c:b1:3b:24:d6:7f:4a:50:c0:6c:0b:e5:
66:eb:58:e8:22:5f:a5:95:94:f0:ad:9a:7f:37:c8:
9b:02:8e:fa:8d:5c:77:8c:3c:40:49:2a:da:58:a4:
ea:d7:1b:6e:aa:73:2d:02:de:53:c9:0a:b5:f0:34:
0a:0d:8d:ac:30:07:14:07:00:1a:28:c3:f3:f8:ee:
af:29:cf:93:b8:31:65:69:cd:2d:ea:0c:33:05:74:
43:49:c9:bb:43:43:71:b3:ff:8d:fd:16:c3:9f:21:
0f:46:3e:a3:61:5a:05:c5:03:c2:6f:4f:e1:7a:0a:
82:68:ae:46:06:41:8d:e5:1c:e8:1d:bf:2d:04:62:
c9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:65:92:7B:09:28:EB:DF:D0:4C:E7:F5:9F:4B:15:DF:A4:A4:B8:E1
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/42WSewko69_QTOf1n0sV36SkuOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0-141.11.2.255
141.11.10.0/23
141.11.16.0-141.11.22.255
141.11.25.0-141.11.26.255
141.11.28.0/24
141.11.31.0-141.11.47.255
141.11.80.0/20
141.11.128.0/19
141.11.176.0/24
141.11.182.0-141.11.251.255
Signature Algorithm: sha256WithRSAEncryption
54:c0:e7:63:41:21:73:87:72:ac:9a:6d:25:cc:45:06:8c:e1:
a9:5f:e4:be:cd:7b:c9:2c:55:b7:18:78:88:ba:42:fa:7f:4e:
c5:7d:86:9f:7b:50:ad:ec:c0:ed:e5:ca:cb:1f:72:0b:ad:c8:
0c:ab:f9:7f:5e:90:0b:2d:6e:17:12:c0:4c:6b:c5:e0:b0:2d:
b7:dc:c7:44:25:17:de:a8:a4:e9:7f:d4:75:7a:8e:45:13:38:
db:dd:18:ac:c6:e8:1c:f6:29:6a:bb:5e:c3:e3:8a:8b:8f:68:
82:cf:b6:33:24:f1:a4:b4:17:28:aa:cc:a4:12:c8:4a:b8:eb:
52:3d:c2:05:75:10:ee:e4:a8:b8:a0:cc:f3:e8:b2:14:65:4e:
f2:21:bc:8a:5b:49:28:26:93:5a:ce:55:04:9b:c3:00:b9:0c:
93:d3:68:58:9c:95:a2:83:61:69:da:39:00:3b:73:39:9a:a5:
d3:61:ff:c3:57:06:15:14:ca:71:b2:4f:2f:2d:c3:9b:79:61:
36:c7:a7:4a:c2:2a:fa:09:e7:da:94:b5:c3:a6:3f:9c:0c:57:
ef:1a:57:c3:1c:5b:ea:2a:50:f6:7b:60:98:7f:08:22:94:5c:
d6:05:f3:83:37:8a:58:b3:02:79:e0:e5:50:1d:b0:33:21:6b:
7a:9f:db:89
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIEA9gZsjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDQx
MjEzMTQzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTM2NTkyN2IwOTI4
ZWJkZmQwNGNlN2Y1OWY0YjE1ZGZhNGE0YjhlMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ0FdNP+vb7NubThNe9dN1xoLSVVOWfgOrtUpUCALAmeC0lb
NZFYnCSae27x7ydQ45KmUkjrOug0nWsbXdcxJqFx76jv0qBhvl+L/TDZFa527o/V
3VmQ2+KxlMnfAYAxEWc2squ4FLnk8pZWweznrICu2TBhSv8JxNmNPLE7JNZ/SlDA
bAvlZutY6CJfpZWU8K2afzfImwKO+o1cd4w8QEkq2lik6tcbbqpzLQLeU8kKtfA0
Cg2NrDAHFAcAGijD8/jurynPk7gxZWnNLeoMMwV0Q0nJu0NDcbP/jf0Ww58hD0Y+
o2FaBcUDwm9P4XoKgmiuRgZBjeUc6B2/LQRiydECAwEAAaOCAmYwggJiMB0GA1Ud
DgQWBBTjZZJ7CSjr39BM5/WfSxXfpKS44TAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
LzQyV1Nld2tvNjlfUVRPZjFuMHNWMzZTa3VPRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB8
BggrBgEFBQcBBwEB/wRtMGswaQQCAAEwYzALAwMAjQsDBACNCwIDBAGNCwowDAME
BI0LEAMEAI0LFjAMAwQAjQsZAwQAjQsaAwQAjQscMAwDBACNCx8DBASNCyADBASN
C1ADBAWNC4ADBACNC7AwDAMEAY0LtgMEAo0L+DANBgkqhkiG9w0BAQsFAAOCAQEA
VMDnY0Ehc4dyrJptJcxFBozhqV/kvs17ySxVtxh4iLpC+n9OxX2Gn3tQrezA7eXK
yx9yC63IDKv5f16QCy1uFxLATGvF4LAtt9zHRCUX3qik6X/UdXqORRM4290YrMbo
HPYpartew+OKi49ogs+2MyTxpLQXKKrMpBLISrjrUj3CBXUQ7uSouKDM8+iyFGVO
8iG8iltJKCaTWs5VBJvDALkMk9NoWJyVooNhado5ADtzOZql02H/w1cGFRTKcbJP
Ly3Dm3lhNsenSsIq+gnn2pS1w6Y/nAxX7xpXwxxb6ipQ9ntgmH8IIpRc1gXzgzeK
WLMCeeDlUB2wMyFrep/biQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:56 2023 by rpki-client on console.sobornost.net