Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/CHesjqWbblCcvVicd3ZLGxAIfRU.roa
File: CHesjqWbblCcvVicd3ZLGxAIfRU.roa (raw, json)
Hash identifier: OlIrzFwmnp1RoJaXv00gSschf2wFeA6u93HzUIivp+4=
Subject key identifier: 08:77:AC:8E:A5:9B:6E:50:9C:BD:58:9C:77:76:4B:1B:10:08:7D:15
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01826852F52422C23E5F45D087B1DD02FEAC
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/CHesjqWbblCcvVicd3ZLGxAIfRU.roa
Signing time: Thu 04 Aug 2022 10:07:23 +0000
ROA not before: Thu 04 Aug 2022 10:07:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399916
IP address blocks: 141.11.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:68:52:f5:24:22:c2:3e:5f:45:d0:87:b1:dd:02:fe:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Aug 4 10:07:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0877ac8ea59b6e509cbd589c77764b1b10087d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f7:7a:7c:87:45:6d:5d:1d:8b:d4:7a:5b:67:
41:a8:11:f4:ee:9f:04:dc:4d:af:2e:32:2d:20:99:
22:e0:8c:d7:b1:c8:63:3f:7b:af:0d:b1:ec:92:fb:
10:d0:1d:63:1e:f6:2b:41:f9:43:d1:1c:3c:3e:9b:
7e:85:8c:7d:69:1c:23:4e:18:a9:3c:58:93:47:dd:
b9:41:65:db:b2:74:3b:e1:ba:72:b9:71:d5:da:7e:
08:03:75:d4:17:f0:8d:77:f5:3e:93:4a:29:82:55:
be:a1:31:5b:9a:5f:c0:23:66:e4:08:26:b5:40:5d:
fe:86:3f:d1:72:8a:f8:e5:93:8c:dd:ba:8f:43:af:
bf:10:97:e0:ed:04:bb:41:17:49:fa:4c:08:87:c9:
9c:b6:5f:9e:f1:f6:71:ca:dc:b8:8e:39:d9:40:63:
43:5f:6c:d5:57:98:92:68:7c:a4:46:f6:6e:c9:fa:
e2:92:2c:d2:cd:5c:d6:99:c9:9e:a4:b2:86:2b:b6:
88:f1:7e:cd:78:8d:0f:33:fa:7e:1b:0e:df:66:52:
0b:0a:d2:96:98:b5:c8:fc:73:ae:3e:04:d2:20:ad:
d0:15:db:54:2a:41:c6:60:86:67:8c:25:09:51:d1:
7e:fc:7d:e9:aa:d6:62:88:08:70:b5:ba:f7:35:37:
ca:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:77:AC:8E:A5:9B:6E:50:9C:BD:58:9C:77:76:4B:1B:10:08:7D:15
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/CHesjqWbblCcvVicd3ZLGxAIfRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.124.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:e5:f2:a7:47:c1:7f:e7:d1:11:75:c6:3d:71:4c:e0:25:ed:
c4:34:9b:d0:f5:90:03:53:26:12:40:cf:dc:c1:2d:91:cb:2c:
a6:d6:1e:17:29:2d:1d:d3:05:f6:4f:34:b9:5d:0b:a0:c6:1a:
0d:33:ed:a5:87:0b:6a:a3:5a:06:2d:7f:47:02:3d:cb:29:58:
e7:10:b5:bc:f4:2d:f0:d7:a6:7c:51:f1:e1:df:62:c9:72:e5:
c8:16:4c:bf:21:e2:5f:d3:1c:d7:15:1d:fd:e3:c9:be:d1:06:
ca:75:9f:1e:d6:dc:23:e9:bc:5d:c2:0f:4c:2c:73:4e:7a:23:
37:27:34:7a:89:8c:ca:72:78:7a:4f:b9:a1:7c:f5:24:94:29:
a3:b3:b0:15:90:ef:d5:91:8e:c2:40:b9:09:f3:6f:5b:e9:88:
25:dc:b2:27:29:32:d1:7d:ec:19:0e:e9:46:9d:1b:1d:1a:33:
c4:b4:aa:92:df:25:70:73:43:3d:de:93:d4:d8:f0:7b:c5:10:
76:dc:b4:39:bb:1c:6f:e2:7b:12:64:52:74:b2:ad:6a:6f:d6:
59:a9:16:74:8a:49:95:43:36:a4:56:8e:fb:64:b1:1f:a5:9e:
6f:f6:44:56:13:ec:31:ef:d4:fc:17:cd:0c:8c:47:26:84:0f:
71:67:4d:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJoUvUkIsI+X0XQh7HdAv6sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIwODA0MTAwNzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODc3YWM4ZWE1OWI2ZTUwOWNiZDU4OWM3Nzc2NGIxYjEwMDg3ZDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovd6fIdFbV0di9R6W2dBqBH07p8E
3E2vLjItIJki4IzXschjP3uvDbHskvsQ0B1jHvYrQflD0Rw8Ppt+hYx9aRwjThip
PFiTR925QWXbsnQ74bpyuXHV2n4IA3XUF/CNd/U+k0opglW+oTFbml/AI2bkCCa1
QF3+hj/Rcor45ZOM3bqPQ6+/EJfg7QS7QRdJ+kwIh8mctl+e8fZxyty4jjnZQGND
X2zVV5iSaHykRvZuyfrikizSzVzWmcmepLKGK7aI8X7NeI0PM/p+Gw7fZlILCtKW
mLXI/HOuPgTSIK3QFdtUKkHGYIZnjCUJUdF+/H3pqtZiiAhwtbr3NTfKowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAh3rI6lm25QnL1YnHd2SxsQCH0VMB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvQ0hlc2pxV2JibENjdlZpY2QzWkxHeEFJZlJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQt8MA0G
CSqGSIb3DQEBCwUAA4IBAQBa5fKnR8F/59ERdcY9cUzgJe3ENJvQ9ZADUyYSQM/c
wS2Ryyym1h4XKS0d0wX2TzS5XQugxhoNM+2lhwtqo1oGLX9HAj3LKVjnELW89C3w
16Z8UfHh32LJcuXIFky/IeJf0xzXFR3948m+0QbKdZ8e1twj6bxdwg9MLHNOeiM3
JzR6iYzKcnh6T7mhfPUklCmjs7AVkO/VkY7CQLkJ829b6Ygl3LInKTLRfewZDulG
nRsdGjPEtKqS3yVwc0M93pPU2PB7xRB23LQ5uxxv4nsSZFJ0sq1qb9ZZqRZ0ikmV
QzakVo77ZLEfpZ5v9kRWE+wx79T8F80MjEcmhA9xZ01d
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:56 2023 by rpki-client on console.sobornost.net