Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/zzxOFIi9X8m0DBeRUbNPg7TlgcA.roa
File: zzxOFIi9X8m0DBeRUbNPg7TlgcA.roa (raw, json)
Hash identifier: wugt3L68GJqQMANgQ3wp3p34Ie6VrKgMcXh9d7rW/Xw=
Subject key identifier: CF:3C:4E:14:88:BD:5F:C9:B4:0C:17:91:51:B3:4F:83:B4:E5:81:C0
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01832247F4AC0CAF3F67D21CA82024E47DBE
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/zzxOFIi9X8m0DBeRUbNPg7TlgcA.roa
Signing time: Fri 09 Sep 2022 12:44:44 +0000
ROA not before: Fri 09 Sep 2022 12:44:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 141.11.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:22:47:f4:ac:0c:af:3f:67:d2:1c:a8:20:24:e4:7d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Sep 9 12:44:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf3c4e1488bd5fc9b40c179151b34f83b4e581c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cd:f4:49:d5:db:9c:2d:70:24:6b:1c:10:d8:
6f:0e:9a:36:c2:f9:09:e2:ab:a6:42:48:e4:05:70:
e4:95:0a:cd:b9:7d:54:31:cd:5e:2f:45:4b:2c:30:
f4:c5:70:51:2a:79:4e:ee:9a:e9:99:ab:7d:3a:15:
b5:b0:8c:2a:fd:c4:0b:9d:4c:dd:52:ba:cd:7a:30:
26:08:b2:3d:57:6c:47:92:2c:cf:4c:13:9e:e5:d4:
12:82:a9:2a:34:f8:ec:59:fe:be:04:be:20:a8:b9:
a4:04:51:ea:56:77:ff:f0:b8:7c:04:f7:d9:5b:66:
af:07:85:ca:47:4f:b3:23:d3:34:97:8c:d1:d2:e9:
d8:d9:0d:e7:31:c3:51:32:ba:2f:5b:8a:8c:e4:3b:
52:c7:3b:f4:26:34:72:cf:50:85:3e:5e:d4:93:5e:
70:a0:74:a3:b1:ba:63:e0:ff:e1:25:d7:b7:9a:1b:
cf:21:f0:52:61:49:cf:4e:e7:89:ad:3c:58:37:ca:
af:62:fb:74:bf:ba:b2:4d:3d:74:96:b0:10:0b:9c:
53:5c:b8:bb:2a:e0:74:f1:23:7a:9f:63:62:3c:66:
6a:b7:66:6d:00:3d:75:6e:d5:82:e8:f5:e9:04:03:
1b:f8:88:2a:e1:db:4f:6e:ea:e3:05:66:c7:48:6e:
84:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3C:4E:14:88:BD:5F:C9:B4:0C:17:91:51:B3:4F:83:B4:E5:81:C0
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/zzxOFIi9X8m0DBeRUbNPg7TlgcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.105.0/24
Signature Algorithm: sha256WithRSAEncryption
82:3a:ea:c1:8c:c9:5c:cf:f9:5b:dd:d6:1a:da:71:4f:35:d7:
bb:92:c8:38:26:1c:38:e9:f2:a5:c9:2b:64:4e:dc:bc:7d:d9:
68:b1:09:a7:68:f1:54:e4:86:dd:67:df:ed:53:c8:66:a1:6f:
b7:46:ae:28:09:c3:9e:ce:55:a7:c4:8f:21:85:8f:a9:e0:06:
a4:7c:66:bd:0c:6c:ff:53:f2:64:b7:0b:0f:da:23:d8:cb:7e:
76:17:d6:65:a6:91:c1:f7:63:9e:3c:ca:f8:b1:e9:46:4c:f2:
fb:8e:fb:71:90:c2:33:c3:70:88:a4:ec:b3:77:fb:63:50:69:
76:7b:f9:c3:be:74:cd:23:04:e8:88:f4:46:97:2b:9c:4d:5a:
f5:71:85:8b:70:fe:dc:93:a2:0f:6c:68:23:ec:42:8e:87:48:
f8:a4:22:fd:a4:a3:43:94:1a:8d:df:72:80:d0:04:37:04:d1:
75:b4:a0:7c:bf:3c:5b:36:80:97:79:f8:06:79:52:2c:f0:60:
bf:36:2c:01:ee:1b:f1:c0:71:ed:75:b5:c9:05:a0:30:79:c9:
31:10:49:99:87:69:19:d7:0d:0d:30:8a:44:fd:f7:b7:12:b8:
73:e3:05:03:4a:71:9b:12:fa:38:80:5c:0b:ec:00:c8:89:9f:
d2:a7:f4:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYMiR/SsDK8/Z9IcqCAk5H2+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIwOTA5MTI0NDQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjNjNGUxNDg4YmQ1ZmM5YjQwYzE3OTE1MWIzNGY4M2I0ZTU4MWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic30SdXbnC1wJGscENhvDpo2wvkJ
4qumQkjkBXDklQrNuX1UMc1eL0VLLDD0xXBRKnlO7prpmat9OhW1sIwq/cQLnUzd
UrrNejAmCLI9V2xHkizPTBOe5dQSgqkqNPjsWf6+BL4gqLmkBFHqVnf/8Lh8BPfZ
W2avB4XKR0+zI9M0l4zR0unY2Q3nMcNRMrovW4qM5DtSxzv0JjRyz1CFPl7Uk15w
oHSjsbpj4P/hJde3mhvPIfBSYUnPTueJrTxYN8qvYvt0v7qyTT10lrAQC5xTXLi7
KuB08SN6n2NiPGZqt2ZtAD11btWC6PXpBAMb+Igq4dtPburjBWbHSG6EvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM88ThSIvV/JtAwXkVGzT4O05YHAMB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvenp4T0ZJaTlYOG0wREJlUlViTlBnN1RsZ2NBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQtpMA0G
CSqGSIb3DQEBCwUAA4IBAQCCOurBjMlcz/lb3dYa2nFPNde7ksg4Jhw46fKlyStk
Tty8fdlosQmnaPFU5IbdZ9/tU8hmoW+3Rq4oCcOezlWnxI8hhY+p4AakfGa9DGz/
U/JktwsP2iPYy352F9ZlppHB92OePMr4selGTPL7jvtxkMIzw3CIpOyzd/tjUGl2
e/nDvnTNIwToiPRGlyucTVr1cYWLcP7ck6IPbGgj7EKOh0j4pCL9pKNDlBqN33KA
0AQ3BNF1tKB8vzxbNoCXefgGeVIs8GC/NiwB7hvxwHHtdbXJBaAweckxEEmZh2kZ
1w0NMIpE/fe3Erhz4wUDSnGbEvo4gFwL7ADIiZ/Sp/Rb
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:57 2023 by rpki-client on console.sobornost.net