Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ezOJEfBgoduDc-s15kPVB2k6mPw.roa
File: ezOJEfBgoduDc-s15kPVB2k6mPw.roa (raw, json)
Hash identifier: EZ+KnsJRVwfJsc23l1Z1NkQiAXJ31MqpcxDBWxU5cfU=
Subject key identifier: 7B:33:89:11:F0:60:A1:DB:83:73:EB:35:E6:43:D5:07:69:3A:98:FC
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0181D2E1E59CA31DCB177AC690D4745701E8
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ezOJEfBgoduDc-s15kPVB2k6mPw.roa
Signing time: Wed 06 Jul 2022 09:40:28 +0000
ROA not before: Wed 06 Jul 2022 09:40:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59432
IP address blocks: 141.11.72.0/23 maxlen: 24
141.11.224.0/22 maxlen: 24
141.11.230.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d2:e1:e5:9c:a3:1d:cb:17:7a:c6:90:d4:74:57:01:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 6 09:40:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b338911f060a1db8373eb35e643d507693a98fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:15:99:24:76:a6:7b:75:bd:45:2f:10:48:d9:
4d:a7:ae:cb:63:a1:7c:c8:c4:e0:29:96:42:95:7d:
e5:23:de:94:ef:13:7c:c0:65:9c:f6:32:85:a3:7e:
a7:e1:1a:6f:56:fb:34:8b:83:d2:8f:53:a4:32:1f:
c9:1f:64:da:d2:e4:49:6e:92:e0:a0:9b:f4:51:cb:
d4:62:f6:e3:fb:9f:b7:c3:9b:d4:c3:e0:21:38:05:
64:d4:e8:03:ed:a0:4f:81:17:ab:56:18:5a:19:84:
8c:ff:33:ce:06:16:5c:4d:43:a9:e9:93:83:70:03:
12:d0:07:4d:4d:fc:d6:58:a9:98:14:f6:53:c1:76:
93:a2:ff:e1:f0:75:15:25:3b:f8:bd:e2:ee:10:2c:
fd:6d:5f:ae:f7:ee:b5:d6:64:dc:3b:27:be:5d:cc:
43:9e:b0:ef:d1:12:5d:97:b3:85:39:08:4a:b3:48:
c9:21:6e:42:ae:ce:d1:5c:fe:43:53:c9:1f:39:6c:
56:c6:a0:e9:5c:1f:91:7b:2b:19:31:33:8f:b0:b5:
97:e6:91:43:50:5d:7a:fe:7a:02:32:2f:86:ce:57:
33:e2:2c:9c:db:d7:cf:19:c0:53:a7:30:74:79:28:
56:d9:a3:cf:7b:5c:e3:70:a5:c8:4e:ca:df:65:1d:
d7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:33:89:11:F0:60:A1:DB:83:73:EB:35:E6:43:D5:07:69:3A:98:FC
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ezOJEfBgoduDc-s15kPVB2k6mPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.72.0/23
141.11.224.0/22
141.11.230.0/23
Signature Algorithm: sha256WithRSAEncryption
79:61:3c:53:3f:48:63:7c:26:18:04:75:1f:3e:94:14:9a:28:
4a:55:76:e0:9c:e4:69:a9:ed:33:5f:4e:dc:ca:4c:87:42:91:
07:dd:57:89:c4:97:c3:6b:fc:d0:9f:79:55:d2:8d:2e:1e:a7:
b6:1c:c8:fe:cf:84:cb:81:73:ac:2c:c1:3f:ad:bf:42:0a:11:
1b:64:6e:27:da:fa:48:78:2c:52:80:6f:ec:a1:bc:43:71:d1:
85:61:48:8d:62:03:05:3d:d9:ac:bf:96:cc:e2:ca:ae:01:33:
91:58:82:a9:7d:5d:43:48:1c:9a:06:d5:7d:22:17:f6:6c:d2:
b8:f9:e1:04:8b:01:52:0f:ea:0e:a9:98:24:b3:a2:7e:a5:6a:
66:2f:2f:81:95:3b:04:39:93:bd:61:ee:b3:5a:01:fd:d8:b4:
ff:dc:f2:dd:a0:99:5a:01:31:3c:10:e9:51:ba:50:14:95:c7:
58:45:7e:5b:ac:f0:a1:82:3f:a2:72:c3:0a:37:54:cb:5f:02:
82:8e:73:25:1b:20:b5:0e:79:4b:c1:f9:10:18:84:08:1d:ef:
19:43:14:71:29:b5:44:68:1a:47:70:53:0d:25:69:a6:d2:28:
66:54:3b:0b:d1:7c:3e:7e:34:cd:8e:9a:b9:f6:84:f4:d6:0a:
58:fb:04:ab
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYHS4eWcox3LF3rGkNR0VwHoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIwNzA2MDk0MDI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjMzODkxMWYwNjBhMWRiODM3M2ViMzVlNjQzZDUwNzY5M2E5OGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBWZJHame3W9RS8QSNlNp67LY6F8
yMTgKZZClX3lI96U7xN8wGWc9jKFo36n4RpvVvs0i4PSj1OkMh/JH2Ta0uRJbpLg
oJv0UcvUYvbj+5+3w5vUw+AhOAVk1OgD7aBPgRerVhhaGYSM/zPOBhZcTUOp6ZOD
cAMS0AdNTfzWWKmYFPZTwXaTov/h8HUVJTv4veLuECz9bV+u9+611mTcOye+XcxD
nrDv0RJdl7OFOQhKs0jJIW5Crs7RXP5DU8kfOWxWxqDpXB+ReysZMTOPsLWX5pFD
UF16/noCMi+Gzlcz4iyc29fPGcBTpzB0eShW2aPPe1zjcKXITsrfZR3XJQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHsziRHwYKHbg3PrNeZD1QdpOpj8MB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvZXpPSkVmQmdvZHVEYy1zMTVrUFZCMms2bVB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBjQtIAwQC
jQvgAwQBjQvmMA0GCSqGSIb3DQEBCwUAA4IBAQB5YTxTP0hjfCYYBHUfPpQUmihK
VXbgnORpqe0zX07cykyHQpEH3VeJxJfDa/zQn3lV0o0uHqe2HMj+z4TLgXOsLME/
rb9CChEbZG4n2vpIeCxSgG/sobxDcdGFYUiNYgMFPdmsv5bM4squATORWIKpfV1D
SByaBtV9Ihf2bNK4+eEEiwFSD+oOqZgks6J+pWpmLy+BlTsEOZO9Ye6zWgH92LT/
3PLdoJlaATE8EOlRulAUlcdYRX5brPChgj+icsMKN1TLXwKCjnMlGyC1DnlLwfkQ
GIQIHe8ZQxRxKbVEaBpHcFMNJWmm0ihmVDsL0Xw+fjTNjpq59oT01gpY+wSr
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:57 2023 by rpki-client on console.sobornost.net