Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/PrWrobamr3w7q-Sg-el89_kUqWI.roa
File: PrWrobamr3w7q-Sg-el89_kUqWI.roa (raw, json)
Hash identifier: dE1YyXRD8oCDXLMwY+VftgAijBscW1dG/mk3SFMLGME=
Subject key identifier: 3E:B5:AB:A1:B6:A6:AF:7C:3B:AB:E4:A0:F9:E9:7C:F7:F9:14:A9:62
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 04905F95
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/PrWrobamr3w7q-Sg-el89_kUqWI.roa
Signing time: Wed 11 May 2022 15:00:10 +0000
ROA not before: Wed 11 May 2022 15:00:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 141.11.230.0/23 maxlen: 24
141.11.228.0/23 maxlen: 24
141.11.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76570517 (0x4905f95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: May 11 15:00:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3eb5aba1b6a6af7c3babe4a0f9e97cf7f914a962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:56:b8:21:e8:fd:90:4e:61:cf:77:62:a1:
f0:2a:44:8f:fb:8e:48:ff:94:1b:4d:11:f6:7c:95:
18:e9:1c:7c:17:1c:b7:cf:00:8d:ab:67:c4:9f:b0:
dc:58:fb:5d:59:fd:4b:ba:39:a9:04:eb:cf:29:ed:
a9:84:4d:99:bb:1b:7b:b3:fd:24:3b:d7:ff:ef:3e:
6b:b5:7a:6a:05:a1:07:f0:92:78:69:71:f7:32:dd:
19:2f:61:81:50:6e:ab:2c:05:69:bc:0a:61:43:00:
34:77:ce:54:e2:5a:d3:26:96:4c:64:43:91:e2:14:
ba:6e:c4:e3:24:6e:6a:e9:00:bd:6c:2f:b7:74:3c:
57:67:98:20:2b:ad:7a:6c:d9:32:04:77:b8:a4:52:
0b:a2:2e:93:32:c1:f9:ef:64:4f:dc:28:e6:04:3b:
14:72:4c:60:9b:ba:4f:f6:9e:f9:73:c0:5f:6c:9a:
2e:9b:ef:42:7e:30:68:72:8f:84:12:d7:f4:bc:57:
cf:45:f9:f9:c3:95:92:32:81:bc:60:ac:2e:c7:63:
54:30:df:c3:d6:91:7b:53:ae:30:9b:75:4f:02:6c:
c0:f6:77:b2:8c:f2:5a:8a:df:d5:7c:4b:ad:ae:14:
9a:ce:80:4a:aa:bb:88:83:40:41:4e:4f:18:d7:fa:
fe:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B5:AB:A1:B6:A6:AF:7C:3B:AB:E4:A0:F9:E9:7C:F7:F9:14:A9:62
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/PrWrobamr3w7q-Sg-el89_kUqWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.228.0/22
141.11.236.0/22
Signature Algorithm: sha256WithRSAEncryption
21:48:96:19:73:aa:ef:30:f2:d0:81:d5:4c:95:52:04:34:f9:
9f:3c:aa:a1:cd:18:04:c4:fa:c5:73:71:f8:18:db:69:f6:ae:
dc:11:37:19:1a:b7:65:80:ca:c0:62:ba:42:66:54:26:cc:35:
64:f4:e1:ef:b6:f8:a0:47:04:11:13:34:eb:18:65:1d:b4:5b:
e7:0b:85:28:90:08:a2:34:1c:98:70:97:37:be:38:98:c5:10:
13:1f:e0:20:90:b7:2b:db:a1:a0:8d:6d:59:45:ae:88:4f:fb:
b4:8d:12:ee:7a:c0:4c:50:5e:38:d4:af:e6:bd:ca:2b:ec:1e:
d9:b3:49:06:2e:ac:19:f3:43:23:5b:d8:40:e3:a2:9c:0e:e0:
1f:5d:9a:01:86:46:25:96:59:5f:34:52:98:1f:64:81:47:30:
31:55:db:04:d5:bb:4d:66:00:b7:85:6f:ea:f3:4c:b2:9d:fc:
e1:18:84:4b:18:60:82:cb:76:4d:46:67:f9:99:03:6b:9d:f9:
a8:cf:57:ae:4c:9a:db:d1:b5:f1:70:fe:98:77:5d:a5:73:5e:
64:c0:85:3a:50:a8:f9:c3:4e:21:84:9c:a6:3c:a4:f9:95:fc:
42:e5:54:2d:f1:01:00:da:7f:58:90:31:85:18:83:ab:8d:f5:
4d:7f:88:49
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBJBflTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDUx
MTE1MDAxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2ViNWFiYTFiNmE2
YWY3YzNiYWJlNGEwZjllOTdjZjdmOTE0YTk2MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKU2Vrgh6P2QTmHPd2Kh8CpEj/uOSP+UG00R9nyVGOkcfBcc
t88AjatnxJ+w3Fj7XVn9S7o5qQTrzyntqYRNmbsbe7P9JDvX/+8+a7V6agWhB/CS
eGlx9zLdGS9hgVBuqywFabwKYUMANHfOVOJa0yaWTGRDkeIUum7E4yRuaukAvWwv
t3Q8V2eYICutemzZMgR3uKRSC6IukzLB+e9kT9wo5gQ7FHJMYJu6T/ae+XPAX2ya
LpvvQn4waHKPhBLX9LxXz0X5+cOVkjKBvGCsLsdjVDDfw9aRe1OuMJt1TwJswPZ3
sozyWorf1XxLra4Ums6ASqq7iINAQU5PGNf6/jsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQ+tauhtqavfDur5KD56Xz3+RSpYjAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L1ByV3JvYmFtcjN3N3EtU2ctZWw4OV9rVXFXSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAo0L5AMEAo0L7DANBgkqhkiG9w0B
AQsFAAOCAQEAIUiWGXOq7zDy0IHVTJVSBDT5nzyqoc0YBMT6xXNx+Bjbafau3BE3
GRq3ZYDKwGK6QmZUJsw1ZPTh77b4oEcEERM06xhlHbRb5wuFKJAIojQcmHCXN744
mMUQEx/gIJC3K9uhoI1tWUWuiE/7tI0S7nrATFBeONSv5r3KK+we2bNJBi6sGfND
I1vYQOOinA7gH12aAYZGJZZZXzRSmB9kgUcwMVXbBNW7TWYAt4Vv6vNMsp384RiE
Sxhggst2TUZn+ZkDa535qM9Xrkya29G18XD+mHddpXNeZMCFOlCo+cNOIYScpjyk
+ZX8QuVULfEBANp/WJAxhRiDq431TX+ISQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:56 2023 by rpki-client on console.sobornost.net