Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/8FnYuEMbFyt4jIPYMDs2OR9Herg.roa
File: 8FnYuEMbFyt4jIPYMDs2OR9Herg.roa (raw, json)
Hash identifier: +HDIFlVLg8/OH3HbjuYYUNX02pZ/ZnjC3vRsnUmFTr8=
Subject key identifier: F0:59:D8:B8:43:1B:17:2B:78:8C:83:D8:30:3B:36:39:1F:47:7A:B8
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0182C639D88C0A279B45C786481DB95DCE89
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/8FnYuEMbFyt4jIPYMDs2OR9Herg.roa
Signing time: Mon 22 Aug 2022 15:44:15 +0000
ROA not before: Mon 22 Aug 2022 15:44:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 141.11.204.0/22 maxlen: 24
141.11.224.0/22 maxlen: 24
141.11.128.0/22 maxlen: 24
141.11.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c6:39:d8:8c:0a:27:9b:45:c7:86:48:1d:b9:5d:ce:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Aug 22 15:44:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f059d8b8431b172b788c83d8303b36391f477ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:99:87:02:1a:2d:1a:52:f7:8e:51:ef:6d:9d:
6f:96:3b:72:06:af:8a:1c:28:c8:5b:b9:6e:88:07:
63:10:5a:db:bf:d7:eb:98:b0:95:38:d4:d6:d5:66:
f9:28:84:0f:92:2e:56:dc:4c:ce:cc:27:51:98:fb:
92:0f:a5:71:b9:3d:3d:f2:bb:28:b8:e6:b4:01:09:
f2:fb:0a:7b:b0:b8:07:30:76:a0:91:88:f2:8f:cd:
c2:e4:16:45:48:8e:68:65:e8:62:c1:76:a5:98:51:
95:7b:26:88:0d:aa:fe:76:ff:f5:53:c4:dd:4a:68:
44:19:91:c9:a6:ed:ad:d7:1c:a9:6c:87:0a:5a:8b:
89:f7:84:ab:4e:c9:5f:96:3f:04:66:56:37:b1:36:
50:07:f7:19:bb:e8:ac:dc:a9:e5:fe:cc:99:bb:6c:
0c:7e:25:bd:77:60:3a:fb:e4:08:cd:a1:04:8c:df:
4c:f7:fe:e0:c5:25:e4:5a:c4:ae:af:0a:91:3b:36:
b5:0f:f2:6b:1d:bd:1f:79:ca:4e:a1:0a:9a:5c:c9:
29:da:ae:f0:3c:61:ed:75:1d:68:5a:fc:a9:bf:f2:
7b:95:2e:0d:58:02:c7:50:72:64:5f:dd:ac:41:8a:
9c:bf:eb:a8:9e:4a:f5:42:e7:38:b1:73:6f:69:3f:
2e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:59:D8:B8:43:1B:17:2B:78:8C:83:D8:30:3B:36:39:1F:47:7A:B8
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/8FnYuEMbFyt4jIPYMDs2OR9Herg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.21.0/24
141.11.128.0/22
141.11.204.0/22
141.11.224.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:1e:4e:ed:3c:e7:99:23:c3:76:5f:d5:54:4a:82:40:93:12:
f5:a8:e2:e9:50:57:5a:7a:7d:de:43:86:99:f9:bf:9c:a6:2c:
4f:84:e6:af:ad:d2:c0:62:e0:3d:f5:9a:14:5c:c9:cf:12:eb:
bb:bc:36:9e:b7:0b:96:82:09:b7:85:9b:2d:6d:d4:81:c9:bf:
8d:1c:3c:4c:af:66:cf:ea:1e:7e:9e:19:4c:2d:11:9f:9d:67:
11:3c:86:46:81:48:09:5e:6f:0f:af:68:ff:73:68:1b:b9:4d:
9e:4a:3e:d2:e4:b0:d8:76:1e:2f:c9:e7:c0:c9:7c:43:8f:78:
ee:ab:23:15:34:a2:eb:ba:52:cc:e2:42:f0:0d:9d:a3:a1:d8:
ff:ea:a2:98:b6:ab:9d:fb:c3:8d:0d:c0:c0:7a:13:1b:51:98:
95:b0:e4:4b:32:69:07:3e:04:28:a7:f0:d8:c6:c8:f1:a2:1f:
69:10:c7:b4:ec:57:d1:96:ab:89:33:9f:da:47:18:0e:f1:42:
a7:65:3b:ca:42:24:f0:48:1b:48:89:1a:8e:1c:e8:5f:37:62:
d6:04:4a:db:21:64:cd:6c:cf:8d:dc:69:33:47:d3:29:ba:0e:
89:a1:44:2b:ad:76:47:09:07:57:a1:16:ff:17:b6:7f:40:e5:
8d:4d:fc:d1
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYLGOdiMCiebRceGSB25Xc6JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIwODIyMTU0NDE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDU5ZDhiODQzMWIxNzJiNzg4YzgzZDgzMDNiMzYzOTFmNDc3YWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpmHAhotGlL3jlHvbZ1vljtyBq+K
HCjIW7luiAdjEFrbv9frmLCVONTW1Wb5KIQPki5W3EzOzCdRmPuSD6VxuT098rso
uOa0AQny+wp7sLgHMHagkYjyj83C5BZFSI5oZehiwXalmFGVeyaIDar+dv/1U8Td
SmhEGZHJpu2t1xypbIcKWouJ94SrTslflj8EZlY3sTZQB/cZu+is3Knl/syZu2wM
fiW9d2A6++QIzaEEjN9M9/7gxSXkWsSurwqROza1D/JrHb0fecpOoQqaXMkp2q7w
PGHtdR1oWvypv/J7lS4NWALHUHJkX92sQYqcv+uonkr1Quc4sXNvaT8uZQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPBZ2LhDGxcreIyD2DA7NjkfR3q4MB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvOEZuWXVFTWJGeXQ0aklQWU1EczJPUjlIZXJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAjQsVAwQC
jQuAAwQCjQvMAwQCjQvgMA0GCSqGSIb3DQEBCwUAA4IBAQBeHk7tPOeZI8N2X9VU
SoJAkxL1qOLpUFdaen3eQ4aZ+b+cpixPhOavrdLAYuA99ZoUXMnPEuu7vDaetwuW
ggm3hZstbdSByb+NHDxMr2bP6h5+nhlMLRGfnWcRPIZGgUgJXm8Pr2j/c2gbuU2e
Sj7S5LDYdh4vyefAyXxDj3juqyMVNKLrulLM4kLwDZ2jodj/6qKYtqud+8ONDcDA
ehMbUZiVsORLMmkHPgQop/DYxsjxoh9pEMe07FfRlquJM5/aRxgO8UKnZTvKQiTw
SBtIiRqOHOhfN2LWBErbIWTNbM+N3GkzR9Mpug6JoUQrrXZHCQdXoRb/F7Z/QOWN
TfzR
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:56 2023 by rpki-client on console.sobornost.net