Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/XmgyDEbNfsoDb6v1tzERKfldH-Q.roa
File: XmgyDEbNfsoDb6v1tzERKfldH-Q.roa (raw, json)
Hash identifier: Dloxq07BCbCPZbVWnOzu/WtZTmFpsIqDfrCOArrUQbQ=
Subject key identifier: 5E:68:32:0C:46:CD:7E:CA:03:6F:AB:F5:B7:31:11:29:F9:5D:1F:E4
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0181F24273362040F9B7DFF36A4A62745D1C
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/XmgyDEbNfsoDb6v1tzERKfldH-Q.roa
Signing time: Tue 12 Jul 2022 11:54:10 +0000
ROA not before: Tue 12 Jul 2022 11:54:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40994
IP address blocks: 141.11.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f2:42:73:36:20:40:f9:b7:df:f3:6a:4a:62:74:5d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 12 11:54:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e68320c46cd7eca036fabf5b7311129f95d1fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:39:aa:3d:bf:03:5b:44:89:e2:2e:74:29:f6:
34:ce:7b:9c:b2:7b:b3:4c:9d:ac:c8:90:2d:dc:db:
50:b7:d1:a3:78:b8:cc:86:3c:1d:49:59:b9:65:ef:
e9:35:99:f9:86:2d:79:82:00:41:58:04:b0:aa:c1:
64:7d:d3:e3:76:de:b1:0e:8b:86:af:ec:c7:70:78:
1a:b5:47:da:d1:0d:fd:fb:1d:e3:e5:db:0c:07:a6:
16:29:40:d3:a4:7f:40:d9:18:06:c3:a7:1b:d1:0e:
57:1a:e1:90:d2:a5:ae:4f:24:6a:6b:0d:68:5a:fa:
80:38:7a:61:5a:7f:c1:a1:2f:f2:ef:c1:fd:2b:a3:
60:d7:8e:5f:ce:88:3d:22:1a:f1:3a:c1:07:9d:ee:
a8:a6:f8:24:4f:cf:e6:29:63:23:9a:ae:89:75:54:
3f:bc:ec:79:cf:10:81:15:0f:29:06:ec:c0:fe:a2:
38:d6:db:50:b6:7e:34:0f:39:5e:05:af:42:10:20:
33:b7:db:d6:04:f0:f5:c6:5e:30:b1:cb:1a:9f:8d:
55:18:b0:31:1b:63:0f:6c:e3:14:2c:23:ea:08:f6:
5b:30:ac:ba:02:ad:57:95:cd:74:f7:57:66:ef:d3:
7a:5e:ff:18:e8:8a:4a:38:1f:53:e8:2f:f0:9d:cd:
7c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:68:32:0C:46:CD:7E:CA:03:6F:AB:F5:B7:31:11:29:F9:5D:1F:E4
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/XmgyDEbNfsoDb6v1tzERKfldH-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.7.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:51:ad:a5:58:25:ef:34:b9:c7:56:62:41:0b:23:13:5c:66:
6e:b8:ba:55:71:e3:35:3e:99:5a:cb:a5:91:5e:be:6e:2d:6f:
86:35:7e:58:a9:41:cc:56:95:e5:43:8d:01:9b:0c:41:96:de:
a4:78:9d:4e:92:a6:e7:a0:ad:5b:e2:24:62:e8:e9:40:c1:3e:
1f:fa:96:8b:cc:1b:5e:14:57:74:46:2e:87:bc:6c:f5:a1:69:
c5:d7:a2:14:bc:17:02:98:5e:64:df:87:b1:58:4d:b9:06:31:
86:9a:ba:b6:03:af:be:72:16:5c:7f:a7:e5:ea:fc:a9:2e:88:
d3:bc:77:24:47:66:4f:34:f9:1a:17:c5:6d:90:9e:d7:3e:b7:
40:90:bc:63:59:b2:22:77:da:15:11:63:1e:05:7c:31:29:55:
d5:46:c2:d6:69:b8:6b:1b:51:20:fe:d7:bc:f3:c8:42:05:8b:
71:8f:41:e3:dc:01:c3:7e:02:84:04:57:27:d6:8d:6f:05:52:
0b:55:1c:f8:59:3c:00:88:7e:73:63:f1:16:9d:e0:d2:9e:c7:
b4:1d:1d:b5:07:62:3d:6b:c3:6e:c9:11:32:8e:58:02:e4:bc:
a6:e1:e6:fe:d7:f8:19:67:dd:a5:c6:1d:b7:53:24:39:32:a4:
f4:d0:65:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHyQnM2IED5t9/zakpidF0cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIwNzEyMTE1NDEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTY4MzIwYzQ2Y2Q3ZWNhMDM2ZmFiZjViNzMxMTEyOWY5NWQxZmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjmqPb8DW0SJ4i50KfY0znucsnuz
TJ2syJAt3NtQt9GjeLjMhjwdSVm5Ze/pNZn5hi15ggBBWASwqsFkfdPjdt6xDouG
r+zHcHgatUfa0Q39+x3j5dsMB6YWKUDTpH9A2RgGw6cb0Q5XGuGQ0qWuTyRqaw1o
WvqAOHphWn/BoS/y78H9K6Ng145fzog9IhrxOsEHne6opvgkT8/mKWMjmq6JdVQ/
vOx5zxCBFQ8pBuzA/qI41ttQtn40DzleBa9CECAzt9vWBPD1xl4wscsan41VGLAx
G2MPbOMULCPqCPZbMKy6Aq1Xlc1091dm79N6Xv8Y6IpKOB9T6C/wnc18DQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF5oMgxGzX7KA2+r9bcxESn5XR/kMB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvWG1neURFYk5mc29EYjZ2MXR6RVJLZmxkSC1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQsHMA0G
CSqGSIb3DQEBCwUAA4IBAQBMUa2lWCXvNLnHVmJBCyMTXGZuuLpVceM1Pplay6WR
Xr5uLW+GNX5YqUHMVpXlQ40BmwxBlt6keJ1OkqbnoK1b4iRi6OlAwT4f+paLzBte
FFd0Ri6HvGz1oWnF16IUvBcCmF5k34exWE25BjGGmrq2A6++chZcf6fl6vypLojT
vHckR2ZPNPkaF8VtkJ7XPrdAkLxjWbIid9oVEWMeBXwxKVXVRsLWabhrG1Eg/te8
88hCBYtxj0Hj3AHDfgKEBFcn1o1vBVILVRz4WTwAiH5zY/EWneDSnse0HR21B2I9
a8NuyREyjlgC5Lym4eb+1/gZZ92lxh23UyQ5MqT00GV+
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:56 2023 by rpki-client on console.sobornost.net