Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/H4wP7i6BOYbaWd00WDjlaxhNSY8.roa
File: H4wP7i6BOYbaWd00WDjlaxhNSY8.roa (raw, json)
Hash identifier: wskpWSyYb9/oS7q/1Ezg9g8Ho9gXYHznPUZplWv7/IE=
Subject key identifier: 1F:8C:0F:EE:2E:81:39:86:DA:59:DD:34:58:38:E5:6B:18:4D:49:8F
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01835FBDCB43986BCDF9D833F207183E10DF
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/H4wP7i6BOYbaWd00WDjlaxhNSY8.roa
Signing time: Wed 21 Sep 2022 11:10:17 +0000
ROA not before: Wed 21 Sep 2022 11:10:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 141.11.240.0/22 maxlen: 24
141.11.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5f:bd:cb:43:98:6b:cd:f9:d8:33:f2:07:18:3e:10:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 21 11:10:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f8c0fee2e813986da59dd345838e56b184d498f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ec:1c:80:86:53:7b:f3:6c:66:12:50:90:e0:
17:32:30:01:99:cb:a0:c8:f7:ef:48:53:0b:45:0b:
25:ec:e6:c6:f8:24:30:33:34:e0:d7:b5:07:a0:31:
e5:a2:76:45:02:3c:aa:b1:b0:60:b2:0b:76:5c:05:
53:20:e0:3d:93:91:e4:10:e3:76:1b:3c:5d:85:41:
9b:df:56:a1:3c:ae:29:80:9e:93:63:45:66:55:26:
c8:11:52:2c:b6:ac:21:4c:16:20:0c:89:ea:d0:6b:
3d:68:b2:5b:b1:82:eb:09:e6:cf:23:77:ed:93:ca:
25:73:9a:e7:15:b0:63:d6:0d:fa:d3:83:5a:d1:4b:
19:7c:dc:2a:cb:a9:77:12:46:5c:cb:a4:d9:10:ca:
9d:91:a6:90:f7:ec:f4:28:11:e8:79:fd:7e:e6:19:
8e:5f:28:88:48:15:f6:9c:9f:b2:75:63:6a:38:62:
97:9d:71:18:87:a0:79:81:06:93:46:7e:24:b2:ca:
68:db:cc:af:08:e4:f9:35:fe:b5:bb:6d:44:25:92:
c4:82:c2:4c:e9:8e:99:06:95:36:63:8e:98:e5:e9:
f9:d0:03:50:7c:1a:3b:f5:dc:d2:f0:1a:8f:a2:9f:
1b:74:25:40:e3:c8:84:bd:f3:ca:aa:4e:99:ee:e1:
90:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8C:0F:EE:2E:81:39:86:DA:59:DD:34:58:38:E5:6B:18:4D:49:8F
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/H4wP7i6BOYbaWd00WDjlaxhNSY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.240.0/22
141.11.248.0/22
Signature Algorithm: sha256WithRSAEncryption
91:32:bf:a0:b6:ec:4f:77:af:7b:fb:56:46:aa:9a:27:66:91:
53:81:f6:ab:aa:dc:f5:c2:98:57:3f:ee:1d:30:4e:13:10:b1:
1e:de:e3:75:c0:29:a6:49:cf:7f:7f:f1:c5:2e:17:58:68:d5:
66:e5:98:c2:c3:d8:59:ff:f5:0a:2b:32:21:8a:e4:a9:fc:c3:
cc:de:1c:88:4e:3e:48:69:32:b2:82:13:84:63:1a:51:af:44:
c4:16:ea:a4:25:03:f3:22:81:8f:39:47:3c:0f:bf:8f:e2:de:
2d:61:e8:6e:27:5f:51:fa:bb:79:0a:1e:5e:b7:54:dc:7a:ae:
ea:e3:c9:d9:c0:ad:c7:c2:17:79:28:b7:54:53:39:18:5b:a8:
9e:78:06:50:30:a2:57:7a:cf:ab:9f:72:35:cc:9f:29:44:ed:
8c:7b:58:84:7b:fe:b8:e3:5f:b3:63:fd:73:19:26:74:d3:90:
a7:ff:4c:81:6f:bb:c0:37:f1:cf:3c:fb:6f:99:60:dc:21:1c:
27:e0:85:ba:37:ea:19:b5:28:9e:ed:08:f3:be:4a:d3:86:e1:
53:6d:49:d7:63:8f:51:05:2a:fd:f4:3a:0a:ff:6b:13:92:0b:
33:8f:a8:de:f8:c0:27:16:64:21:4c:b4:ac:cd:72:5c:82:e1:
ad:64:38:18
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYNfvctDmGvN+dgz8gcYPhDfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIwOTIxMTExMDE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjhjMGZlZTJlODEzOTg2ZGE1OWRkMzQ1ODM4ZTU2YjE4NGQ0OThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOwcgIZTe/NsZhJQkOAXMjABmcug
yPfvSFMLRQsl7ObG+CQwMzTg17UHoDHlonZFAjyqsbBgsgt2XAVTIOA9k5HkEON2
GzxdhUGb31ahPK4pgJ6TY0VmVSbIEVIstqwhTBYgDInq0Gs9aLJbsYLrCebPI3ft
k8olc5rnFbBj1g3604Na0UsZfNwqy6l3EkZcy6TZEMqdkaaQ9+z0KBHoef1+5hmO
XyiISBX2nJ+ydWNqOGKXnXEYh6B5gQaTRn4ksspo28yvCOT5Nf61u21EJZLEgsJM
6Y6ZBpU2Y46Y5en50ANQfBo79dzS8BqPop8bdCVA48iEvfPKqk6Z7uGQUwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFB+MD+4ugTmG2lndNFg45WsYTUmPMB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvSDR3UDdpNkJPWWJhV2QwMFdEamxheGhOU1k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCjQvwAwQC
jQv4MA0GCSqGSIb3DQEBCwUAA4IBAQCRMr+gtuxPd697+1ZGqponZpFTgfarqtz1
wphXP+4dME4TELEe3uN1wCmmSc9/f/HFLhdYaNVm5ZjCw9hZ//UKKzIhiuSp/MPM
3hyITj5IaTKyghOEYxpRr0TEFuqkJQPzIoGPOUc8D7+P4t4tYehuJ19R+rt5Ch5e
t1Tceq7q48nZwK3Hwhd5KLdUUzkYW6ieeAZQMKJXes+rn3I1zJ8pRO2Me1iEe/64
41+zY/1zGSZ005Cn/0yBb7vAN/HPPPtvmWDcIRwn4IW6N+oZtSie7QjzvkrThuFT
bUnXY49RBSr99DoK/2sTkgszj6je+MAnFmQhTLSszXJcguGtZDgY
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:56 2023 by rpki-client on console.sobornost.net