Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/5iJTs9VwLVPB3lV_JVPIzhUosC4.roa
File: 5iJTs9VwLVPB3lV_JVPIzhUosC4.roa (raw, json)
Hash identifier: gjm0JN4Tyb6jmqjHSHbawK+Mnyhh7MVpZ3OVXFr2Dz8=
Subject key identifier: E6:22:53:B3:D5:70:2D:53:C1:DE:55:7F:25:53:C8:CE:15:28:B0:2E
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 026417C9
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/5iJTs9VwLVPB3lV_JVPIzhUosC4.roa
Signing time: Sat 01 Jan 2022 08:03:20 +0000
ROA not before: Sat 01 Jan 2022 08:03:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 141.11.192.0/19 maxlen: 24
141.11.0.0/24 maxlen: 24
141.11.240.0/22 maxlen: 24
141.11.128.0/19 maxlen: 24
141.11.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40114121 (0x26417c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jan 1 08:03:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e62253b3d5702d53c1de557f2553c8ce1528b02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a2:83:be:b8:f1:da:44:e8:43:58:a7:6c:53:
08:67:75:0c:8e:d2:3a:87:85:90:09:92:d0:f1:a9:
77:3b:50:08:74:de:c1:af:87:e0:8b:a8:e1:03:3a:
a5:58:63:d3:11:49:71:fd:d0:86:c7:72:71:68:42:
ea:e9:3d:5b:15:13:c4:44:a8:0c:0d:1e:65:21:73:
f5:99:9b:2d:81:bb:8f:0a:77:f1:fd:46:22:ee:c7:
d6:48:ef:0c:0a:70:4b:04:31:98:a4:de:53:bc:ba:
b5:9b:ea:2b:f0:0d:ce:5c:b9:39:9c:9a:30:41:93:
f8:31:7a:3c:d8:b8:39:00:9b:4f:2c:b9:4a:de:36:
76:43:32:23:34:5f:aa:ec:f7:86:e5:ce:b2:eb:94:
fc:23:56:f4:78:2c:11:de:f5:96:c2:d9:0c:4e:a1:
d8:0b:bc:d2:7a:2d:02:03:6f:c6:b7:c1:e4:d9:43:
47:20:84:03:0b:32:f5:52:a0:37:9d:7d:11:78:8c:
9f:e9:dc:96:29:40:b2:89:60:d9:9d:02:77:05:65:
21:2e:04:18:57:33:e6:da:83:ca:a7:6c:f7:c3:bc:
90:39:7c:1d:c8:19:cd:45:99:38:b7:fa:72:ed:da:
07:e3:ad:51:a6:bc:c7:09:5e:58:2f:3f:b4:8e:58:
6f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:22:53:B3:D5:70:2D:53:C1:DE:55:7F:25:53:C8:CE:15:28:B0:2E
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/5iJTs9VwLVPB3lV_JVPIzhUosC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0/24
141.11.128.0/19
141.11.192.0/19
141.11.240.0/22
141.11.248.0/22
Signature Algorithm: sha256WithRSAEncryption
23:31:54:37:7e:4f:be:40:a0:be:ae:62:bc:db:ef:22:ee:3d:
a9:23:90:08:c5:74:9b:5c:de:e1:09:36:a2:83:25:89:b7:7a:
c6:5d:60:cf:bc:19:d2:f9:30:fb:5d:a7:5e:4b:4f:6e:c6:95:
ad:dd:8e:ff:1c:39:8b:2d:33:fc:a7:21:30:04:92:32:83:39:
ab:25:6b:8c:b2:7b:3f:a4:cd:dc:1e:77:4f:5d:a3:76:8f:ff:
46:ec:32:76:e2:26:39:18:d8:96:3a:76:69:18:79:84:4d:02:
de:5d:7e:aa:5d:4c:d5:e9:53:c2:1e:01:f5:a2:f2:f1:ae:bc:
9e:17:27:b6:7f:3f:c8:c8:d4:b9:89:83:e8:9f:e9:9f:b8:cb:
f4:38:43:52:5e:65:5d:92:4b:5d:dc:cb:01:9c:29:9f:ac:39:
0e:54:ca:ad:37:d6:c8:29:3d:a2:36:24:07:75:76:06:79:ce:
73:f2:d0:52:d9:c5:d9:ee:bc:78:06:d0:41:46:2d:8c:ae:84:
ec:b4:04:77:c3:2e:8f:ee:b5:7c:2c:28:44:4c:ba:fe:38:13:
7e:05:45:ee:12:d0:29:bc:0c:6f:bc:47:e2:a3:9a:39:5e:06:
c1:11:83:d8:1d:08:84:d5:da:59:48:55:49:8e:6a:66:15:07:
95:68:07:76
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEAmQXyTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDEw
MTA4MDMyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTYyMjUzYjNkNTcw
MmQ1M2MxZGU1NTdmMjU1M2M4Y2UxNTI4YjAyZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJOig7648dpE6ENYp2xTCGd1DI7SOoeFkAmS0PGpdztQCHTe
wa+H4Iuo4QM6pVhj0xFJcf3QhsdycWhC6uk9WxUTxESoDA0eZSFz9ZmbLYG7jwp3
8f1GIu7H1kjvDApwSwQxmKTeU7y6tZvqK/ANzly5OZyaMEGT+DF6PNi4OQCbTyy5
St42dkMyIzRfquz3huXOsuuU/CNW9HgsEd71lsLZDE6h2Au80notAgNvxrfB5NlD
RyCEAwsy9VKgN519EXiMn+nclilAsolg2Z0CdwVlIS4EGFcz5tqDyqds98O8kDl8
HcgZzUWZOLf6cu3aB+OtUaa8xwleWC8/tI5Yb5kCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBTmIlOz1XAtU8HeVX8lU8jOFSiwLjAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
LzVpSlRzOVZ3TFZQQjNsVl9KVlBJemhVb3NDNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAI0LAAMEBY0LgAMEBY0LwAMEAo0L
8AMEAo0L+DANBgkqhkiG9w0BAQsFAAOCAQEAIzFUN35PvkCgvq5ivNvvIu49qSOQ
CMV0m1ze4Qk2ooMlibd6xl1gz7wZ0vkw+12nXktPbsaVrd2O/xw5iy0z/KchMASS
MoM5qyVrjLJ7P6TN3B53T12jdo//RuwyduImORjYljp2aRh5hE0C3l1+ql1M1elT
wh4B9aLy8a68nhcntn8/yMjUuYmD6J/pn7jL9DhDUl5lXZJLXdzLAZwpn6w5DlTK
rTfWyCk9ojYkB3V2BnnOc/LQUtnF2e68eAbQQUYtjK6E7LQEd8Muj+61fCwoREy6
/jgTfgVF7hLQKbwMb7xH4qOaOV4GwRGD2B0IhNXaWUhVSY5qZhUHlWgHdg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:56 2023 by rpki-client on console.sobornost.net