Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/XJWawR8jB0sxr2aaj0BxdLlY1eU.roa
File: XJWawR8jB0sxr2aaj0BxdLlY1eU.roa (raw, json)
Hash identifier: OfaOkDA8kMkezuzj9toK1yPhuFzQbXFRPWHnKS4CHQI=
Subject key identifier: 5C:95:9A:C1:1F:23:07:4B:31:AF:66:9A:8F:40:71:74:B9:58:D5:E5
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 01944EFFDF3BF0B5A5FA1853796F3CE75892
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/XJWawR8jB0sxr2aaj0BxdLlY1eU.roa
Signing time: Fri 10 Jan 2025 06:56:18 +0000
ROA not before: Fri 10 Jan 2025 06:56:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202623
IP address blocks: 141.101.64.0/24 maxlen: 24
141.101.91.0/24 maxlen: 24
2a06:98c0:1400::/48 maxlen: 48
2a06:98c0:1401::/48 maxlen: 48
2a06:98c0:3602::/48 maxlen: 48
2a06:98c0:3603::/48 maxlen: 48
2a06:98c0:3604::/48 maxlen: 48
2a06:98c0:3605::/48 maxlen: 48
2a06:98c0:3606::/48 maxlen: 48
2a06:98c0:3607::/48 maxlen: 48
2a06:98c0:360e::/48 maxlen: 48
2a06:98c0:3612::/48 maxlen: 48
2a06:98c0:3616::/48 maxlen: 48
2a06:98c0:3622::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4e:ff:df:3b:f0:b5:a5:fa:18:53:79:6f:3c:e7:58:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Jan 10 06:56:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c959ac11f23074b31af669a8f407174b958d5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ba:37:77:34:3e:50:0d:bf:f5:24:8c:40:b9:
bd:8e:2a:c9:6f:8f:a0:cd:99:ae:13:c6:03:5d:fc:
4b:12:8d:a1:1d:d7:70:16:de:76:55:b7:6b:67:b8:
59:8a:df:a9:b0:b0:46:50:9a:9a:2f:e9:dc:2c:7f:
a1:d8:43:d0:f1:91:1d:6e:c9:2e:39:9e:b8:fe:f2:
ce:79:ed:0c:b2:27:bf:cc:08:4e:ea:15:b6:48:21:
f8:3a:04:d9:9b:3f:89:79:fd:19:72:86:53:fa:9f:
4f:92:34:f5:9e:12:00:2c:bf:25:30:a8:70:e1:32:
23:52:9f:7b:af:e4:c4:bc:e8:dd:d1:6f:7d:52:ec:
70:54:9c:ca:49:74:fb:e8:e4:b0:a6:13:29:74:06:
16:0e:d8:6c:15:97:f3:aa:1c:c1:fa:0f:68:6e:bf:
07:85:6f:9a:e0:56:b9:03:41:ef:d6:c5:50:f8:a2:
51:8e:ce:39:b5:a2:f7:44:7a:ea:19:39:8c:4f:dd:
84:92:25:57:fd:a7:1d:b1:26:7c:1d:ac:f2:6f:ed:
d9:32:25:ab:eb:2f:f1:ec:c7:30:ce:1d:a2:16:48:
80:bd:ed:c4:9d:5f:4d:3d:2a:c9:ee:3d:07:e4:b0:
66:3f:b5:49:35:3c:7a:ca:14:3f:82:16:72:88:21:
63:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:95:9A:C1:1F:23:07:4B:31:AF:66:9A:8F:40:71:74:B9:58:D5:E5
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/XJWawR8jB0sxr2aaj0BxdLlY1eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.64.0/24
141.101.91.0/24
IPv6:
2a06:98c0:1400::/47
2a06:98c0:3602::-2a06:98c0:3607:ffff:ffff:ffff:ffff:ffff
2a06:98c0:360e::/48
2a06:98c0:3612::/48
2a06:98c0:3616::/48
2a06:98c0:3622::/48
Signature Algorithm: sha256WithRSAEncryption
76:60:7e:4f:45:05:61:a2:09:ed:53:6d:ac:a3:84:33:4a:8d:
db:ba:60:7f:d6:aa:25:9b:ac:43:1e:f0:f3:22:31:ac:df:ec:
93:a2:e9:f7:be:c6:33:73:eb:9d:8c:08:af:00:1e:35:2e:cf:
ac:92:1f:ab:c1:4f:70:78:8f:40:bd:f0:d0:08:7a:8b:f4:36:
1e:c7:7b:51:35:20:bc:d6:c7:3a:9b:6d:cd:14:a2:11:5a:76:
d7:5f:5e:99:e7:78:8d:18:bc:98:76:1c:ee:06:c4:34:0d:84:
97:dc:4a:21:91:6d:a4:ad:73:43:eb:28:8c:cb:50:ed:be:2e:
d1:44:b8:37:2c:8d:f1:a0:c5:d6:d2:da:75:d7:df:70:84:32:
7f:de:9e:24:46:93:db:ee:10:1a:f3:02:5e:21:a6:6e:fa:c3:
b3:31:74:a3:4e:93:d1:eb:91:12:d5:3e:6d:4d:22:b3:2b:b1:
87:d8:14:7f:3e:dd:4a:3a:38:ef:99:3d:ca:3c:03:c4:db:e4:
ad:f9:0f:af:01:33:b8:da:de:42:05:9b:ac:c5:5e:69:8d:32:
40:f6:2b:c1:16:fc:0b:80:c2:b9:0a:80:6f:7a:87:22:b8:75:
0b:9f:cb:24:19:7e:82:94:f7:18:de:c9:29:0e:cb:ba:23:00:
80:2a:2f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:17:55 2025 by rpki-client