Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/oj0a5RB9Zym1uwlb230pnFLycak.roa
File: oj0a5RB9Zym1uwlb230pnFLycak.roa (raw, json)
Hash identifier: F0ywlxnadxg6SK6cXIYU9ctVSIZDJOLXUSsXQ1UtilE=
Subject key identifier: A2:3D:1A:E5:10:7D:67:29:B5:BB:09:5B:DB:7D:29:9C:52:F2:71:A9
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0441535B
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/oj0a5RB9Zym1uwlb230pnFLycak.roa
Signing time: Thu 28 Apr 2022 13:45:29 +0000
ROA not before: Thu 28 Apr 2022 13:45:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 141.11.190.0/24 maxlen: 24
141.11.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71390043 (0x441535b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 28 13:45:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a23d1ae5107d6729b5bb095bdb7d299c52f271a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:91:c9:21:70:1f:60:eb:48:09:52:d5:4a:97:
4b:7c:4a:61:eb:a0:de:8e:22:93:c2:a9:f0:cc:a3:
04:7e:c7:d1:25:fe:c7:a7:76:ca:07:76:40:95:d6:
3a:cb:16:94:d4:bb:a4:ca:ab:f7:71:ef:1d:11:43:
b1:18:71:1b:22:e8:27:40:8b:58:4f:86:02:1b:44:
8d:d5:28:05:15:2a:47:13:d6:fe:e4:e7:dd:22:27:
0d:19:0b:dd:b3:6d:5e:8d:c2:0d:0a:93:fb:7c:aa:
20:ca:6e:7c:f4:3b:7c:e3:c5:8b:7b:21:39:57:fc:
5a:52:3c:35:54:cc:8e:f5:ee:8d:18:44:15:f0:6f:
0c:01:90:a3:b8:d0:e9:b9:01:de:ea:2e:c6:77:a5:
05:03:40:75:16:11:4a:9d:8b:04:74:d1:50:3a:b0:
45:c9:78:4f:98:2a:32:23:41:1e:44:19:b4:cd:d1:
1a:a8:d3:e6:27:6c:0d:19:06:61:0d:98:6f:ab:66:
2e:ac:7c:e5:16:ff:4d:f9:f9:24:b5:55:9f:fb:eb:
62:dd:ec:74:0e:e5:10:14:db:0c:8a:57:57:c2:1f:
a2:4a:37:a2:a2:22:b2:4c:c2:1b:0a:8d:04:66:53:
71:76:32:2a:9d:ea:98:4d:a0:57:80:77:d6:db:a3:
06:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3D:1A:E5:10:7D:67:29:B5:BB:09:5B:DB:7D:29:9C:52:F2:71:A9
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/oj0a5RB9Zym1uwlb230pnFLycak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.103.0/24
141.11.190.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:62:84:fe:ab:83:79:63:cc:cd:38:53:a0:55:32:5b:50:e9:
8f:25:67:a3:55:6f:09:ed:c0:33:78:3c:85:c2:de:8a:41:80:
fc:8d:4b:1d:fe:d0:93:c8:11:ab:48:35:9a:8c:d7:87:46:a6:
c1:1a:e0:b3:c4:ec:e3:a8:8d:b4:9e:cf:c9:d3:60:4d:90:19:
d5:ff:02:f2:0b:b5:8d:09:40:99:97:ff:8f:bf:ca:9a:f3:ca:
e1:38:11:04:f6:24:1b:97:3f:e9:73:e7:87:aa:1f:08:a4:bd:
c0:f9:2f:44:1d:be:f7:07:c1:bf:39:9b:71:95:9e:69:e1:18:
8d:5d:c9:75:b8:a0:81:e6:41:69:99:26:07:bb:53:29:65:a4:
c8:b9:57:a3:66:e8:67:63:67:12:34:b4:50:63:65:f4:6f:32:
2c:85:93:bf:64:7f:37:37:e8:8a:26:29:a6:41:2c:cd:af:17:
e0:7a:fd:f2:5e:30:6e:10:26:00:ea:33:2f:86:d9:a5:9a:b7:
57:f2:33:2f:74:10:49:f5:d8:1c:73:77:88:43:04:55:7f:7e:
f0:29:aa:24:1b:d5:be:76:58:53:73:a1:c2:e0:f1:17:95:a6:
aa:96:2c:ed:94:bc:38:6f:27:05:8f:19:21:3f:8f:39:72:38:
78:3c:b8:ea
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBEFTWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDQy
ODEzNDUyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTIzZDFhZTUxMDdk
NjcyOWI1YmIwOTViZGI3ZDI5OWM1MmYyNzFhOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANWRySFwH2DrSAlS1UqXS3xKYeug3o4ik8Kp8MyjBH7H0SX+
x6d2ygd2QJXWOssWlNS7pMqr93HvHRFDsRhxGyLoJ0CLWE+GAhtEjdUoBRUqRxPW
/uTn3SInDRkL3bNtXo3CDQqT+3yqIMpufPQ7fOPFi3shOVf8WlI8NVTMjvXujRhE
FfBvDAGQo7jQ6bkB3uouxnelBQNAdRYRSp2LBHTRUDqwRcl4T5gqMiNBHkQZtM3R
GqjT5idsDRkGYQ2Yb6tmLqx85Rb/Tfn5JLVVn/vrYt3sdA7lEBTbDIpXV8Ifoko3
oqIiskzCGwqNBGZTcXYyKp3qmE2gV4B31tujBrsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSiPRrlEH1nKbW7CVvbfSmcUvJxqTAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L29qMGE1UkI5WnltMXV3bGIyMzBwbkZMeWNhay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAI0LZwMEAI0LvjANBgkqhkiG9w0B
AQsFAAOCAQEAL2KE/quDeWPMzThToFUyW1DpjyVno1VvCe3AM3g8hcLeikGA/I1L
Hf7Qk8gRq0g1mozXh0amwRrgs8Ts46iNtJ7PydNgTZAZ1f8C8gu1jQlAmZf/j7/K
mvPK4TgRBPYkG5c/6XPnh6ofCKS9wPkvRB2+9wfBvzmbcZWeaeEYjV3JdbiggeZB
aZkmB7tTKWWkyLlXo2boZ2NnEjS0UGNl9G8yLIWTv2R/NzfoiiYppkEsza8X4Hr9
8l4wbhAmAOozL4bZpZq3V/IzL3QQSfXYHHN3iEMEVX9+8CmqJBvVvnZYU3OhwuDx
F5WmqpYs7ZS8OG8nBY8ZIT+POXI4eDy46g==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:57 2023 by rpki-client on console.sobornost.net