Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/Jft5Uqs2ae09YNYm1o6o19eQJ2o.roa
File: Jft5Uqs2ae09YNYm1o6o19eQJ2o.roa (raw, json)
Hash identifier: IfAf79X0s8+oWLZ9Y9qUlhE247C+0NcStMY15neHdHI=
Subject key identifier: 25:FB:79:52:AB:36:69:ED:3D:60:D6:26:D6:8E:A8:D7:D7:90:27:6A
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0182D69696D825C38C8BBEA03CC363A26CCC
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/Jft5Uqs2ae09YNYm1o6o19eQJ2o.roa
Signing time: Thu 25 Aug 2022 19:59:29 +0000
ROA not before: Thu 25 Aug 2022 19:59:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 147293
IP address blocks: 141.98.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d6:96:96:d8:25:c3:8c:8b:be:a0:3c:c3:63:a2:6c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Aug 25 19:59:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25fb7952ab3669ed3d60d626d68ea8d7d790276a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3a:df:98:9a:6c:95:97:af:7a:62:3f:1d:5b:
ec:fe:06:e7:76:ab:b6:25:42:17:86:62:08:9a:20:
d9:14:4b:39:34:33:b9:08:85:5c:d1:ff:35:70:aa:
ee:46:f6:33:b8:70:ae:4f:d5:20:b5:33:39:75:ad:
8f:03:ec:17:7e:5a:a3:d0:53:18:ae:61:f0:61:3e:
a6:82:bd:9c:b7:22:02:30:1c:2c:4a:8f:bb:cb:71:
a9:23:8c:4e:ed:4e:eb:26:2d:76:04:b0:5a:b2:68:
17:53:1c:f4:04:a2:32:c6:9d:a1:2a:7f:1c:fd:fd:
05:dd:63:0d:03:f6:a8:1c:4e:18:41:ff:c6:fd:14:
f9:2c:aa:32:ae:06:08:34:17:12:78:16:9f:57:96:
50:fe:ea:31:57:4c:fd:01:3b:87:54:92:d4:e1:7f:
9f:fa:ae:dd:f7:65:d9:9c:47:34:ed:09:27:c5:d4:
f2:ef:bb:85:e3:bc:02:62:e5:5d:79:dc:84:a4:39:
a6:0a:96:47:78:11:d3:16:95:d8:0f:0a:87:b5:bf:
a0:a3:99:05:c1:13:69:a6:e9:84:03:40:67:29:3b:
d7:1e:cb:40:ac:0d:29:91:cf:6e:0b:f9:11:a0:67:
a5:46:cd:7a:93:c6:28:dc:c6:85:0d:6a:a8:fd:9a:
bd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FB:79:52:AB:36:69:ED:3D:60:D6:26:D6:8E:A8:D7:D7:90:27:6A
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/Jft5Uqs2ae09YNYm1o6o19eQJ2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.75.0/24
Signature Algorithm: sha256WithRSAEncryption
be:31:c4:1a:11:4a:b1:74:7f:c6:c1:3b:60:93:b5:87:dc:31:
4a:bb:6b:28:c8:1e:47:17:29:99:e2:f4:a7:07:2f:e1:65:6a:
b7:8d:1f:70:ba:ed:5b:13:52:46:78:71:c9:d5:bd:7c:5b:6e:
f7:57:00:ca:e7:97:9c:8d:2d:53:e5:fa:bd:bd:3b:3d:c8:82:
27:4f:8f:a5:ed:30:60:8e:93:44:cb:fd:21:95:d6:2f:91:a1:
81:86:64:d6:f1:d0:c1:4a:08:79:15:e0:3e:ff:71:f6:81:7f:
a8:ba:86:64:ff:35:eb:16:f3:ed:99:78:91:2d:16:cf:b2:45:
c3:f3:35:00:ab:99:d0:33:db:79:92:d5:be:f0:6e:b8:eb:a6:
03:0a:e1:7c:0e:0e:56:e6:63:31:71:fc:83:75:40:c9:1d:35:
5d:ec:58:30:d1:c0:52:20:73:84:58:a5:58:70:34:7e:83:95:
b1:94:4a:7f:11:3e:4f:bc:1b:24:de:67:67:5b:4d:04:ae:a3:
31:33:82:1c:36:46:a9:db:4b:01:42:eb:95:cb:2b:e8:e8:64:
38:24:da:7e:31:93:bf:fc:67:6d:4c:82:9c:f1:42:4c:d8:4e:
8d:41:a4:d3:43:1b:47:df:b9:09:75:2f:e7:19:60:a1:f1:eb:
5c:eb:70:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLWlpbYJcOMi76gPMNjomzMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODE0Y2YyY2EzZTE3OTkzNDljY2Q0YzdlNmE3NmQ2M2Y4
MzRhM2QwHhcNMjIwODI1MTk1OTI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWZiNzk1MmFiMzY2OWVkM2Q2MGQ2MjZkNjhlYThkN2Q3OTAyNzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzrfmJpslZevemI/HVvs/gbndqu2
JUIXhmIImiDZFEs5NDO5CIVc0f81cKruRvYzuHCuT9UgtTM5da2PA+wXflqj0FMY
rmHwYT6mgr2ctyICMBwsSo+7y3GpI4xO7U7rJi12BLBasmgXUxz0BKIyxp2hKn8c
/f0F3WMNA/aoHE4YQf/G/RT5LKoyrgYINBcSeBafV5ZQ/uoxV0z9ATuHVJLU4X+f
+q7d92XZnEc07QknxdTy77uF47wCYuVdedyEpDmmCpZHeBHTFpXYDwqHtb+go5kF
wRNppumEA0BnKTvXHstArA0pkc9uC/kRoGelRs16k8Yo3MaFDWqo/Zq9ZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCX7eVKrNmntPWDWJtaOqNfXkCdqMB8GA1UdIwQY
MBaAFCGBTPLKPheZNJzNTH5qdtY/g0o9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgt
MjI3MDFiNGJiNDA3LzEvSmZ0NVVxczJhZTA5WU5ZbTFvNm8xOWVRSjJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgtMjI3MDFiNGJiNDA3
LzEvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWJLMA0G
CSqGSIb3DQEBCwUAA4IBAQC+McQaEUqxdH/GwTtgk7WH3DFKu2soyB5HFymZ4vSn
By/hZWq3jR9wuu1bE1JGeHHJ1b18W273VwDK55ecjS1T5fq9vTs9yIInT4+l7TBg
jpNEy/0hldYvkaGBhmTW8dDBSgh5FeA+/3H2gX+ouoZk/zXrFvPtmXiRLRbPskXD
8zUAq5nQM9t5ktW+8G6466YDCuF8Dg5W5mMxcfyDdUDJHTVd7Fgw0cBSIHOEWKVY
cDR+g5WxlEp/ET5PvBsk3mdnW00ErqMxM4IcNkap20sBQuuVyyvo6GQ4JNp+MZO/
/GdtTIKc8UJM2E6NQaTTQxtH37kJdS/nGWCh8etc63AM
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org