Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/Uwp0ImF2Rw2iahqVTSGlq0LpSDs.roa
File: Uwp0ImF2Rw2iahqVTSGlq0LpSDs.roa (raw, json)
Hash identifier: 2w8ql+ne3Bm4xOEU9epZBCN1a3xuxykKAtFFC4s1SaE=
Subject key identifier: 53:0A:74:22:61:76:47:0D:A2:6A:1A:95:4D:21:A5:AB:42:E9:48:3B
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0354AC21
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/Uwp0ImF2Rw2iahqVTSGlq0LpSDs.roa
Signing time: Thu 27 Jan 2022 15:53:52 +0000
ROA not before: Thu 27 Jan 2022 15:53:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 141.98.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55880737 (0x354ac21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 27 15:53:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=530a74226176470da26a1a954d21a5ab42e9483b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:92:14:1e:10:eb:e4:23:ba:0b:3f:39:84:6c:
a2:82:67:d0:95:e0:a0:a8:2d:bb:4b:80:5c:dc:01:
22:14:5d:55:cb:0b:dc:2f:0c:93:cf:4a:bc:97:16:
dc:98:3c:57:e5:cc:25:e3:31:41:fa:eb:35:68:c2:
a6:f5:18:0a:c7:fd:44:dd:dc:74:16:75:de:2c:97:
2e:40:52:17:61:c2:0d:95:b9:58:28:ac:e5:3c:54:
e8:79:76:65:b5:0a:dc:07:2a:4a:5b:e9:2a:11:6a:
65:4d:fb:f3:3a:22:c7:a6:cf:81:cc:ef:71:a6:ce:
45:70:9d:ad:80:51:a2:bb:a1:78:6a:44:f0:7e:af:
0f:2c:14:6f:65:8e:15:0a:dd:a5:0d:82:81:af:b9:
5b:c9:45:d5:01:f2:02:cc:79:82:1b:cd:68:cf:42:
34:a0:09:e2:a1:30:70:b2:0c:34:6a:61:4d:c4:75:
6f:c0:bb:4f:a9:28:ea:99:85:7e:4e:44:7d:fd:9e:
bc:94:d2:44:db:a5:86:3d:b7:d8:11:bb:c6:41:7a:
e4:43:5f:48:0f:31:3c:9b:d6:48:c1:1e:6e:e7:e2:
3b:e3:f5:4a:ea:a7:89:9e:53:96:4b:ad:ad:07:f2:
e9:fb:36:1c:04:fb:a0:8b:f9:d1:97:32:5e:a7:0b:
33:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0A:74:22:61:76:47:0D:A2:6A:1A:95:4D:21:A5:AB:42:E9:48:3B
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/Uwp0ImF2Rw2iahqVTSGlq0LpSDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.72.0/23
Signature Algorithm: sha256WithRSAEncryption
28:81:2d:6d:8c:e0:5d:1b:bb:60:c6:79:6a:71:41:0a:36:41:
87:1b:25:46:78:ce:f0:63:60:66:87:68:ec:9b:4f:3f:17:33:
40:ee:8d:b7:1f:6a:5f:3e:3c:7c:70:0c:0d:dd:21:7d:97:9e:
3b:a4:51:7c:c9:e4:1f:22:10:46:ca:de:2b:d3:4b:9d:f9:a6:
8c:1c:df:bc:aa:c3:c8:2c:7d:c4:a5:fe:fb:13:97:13:3d:45:
79:45:ec:5f:10:90:1c:89:e8:58:07:9f:53:36:50:37:93:10:
5b:48:89:b8:67:65:12:d7:15:42:cf:23:89:02:99:13:f1:c9:
6f:43:e0:65:72:31:66:6f:1b:8e:f8:90:7e:b7:ca:4a:88:4c:
10:a9:24:90:f8:dd:91:07:1b:44:a4:51:dd:ff:ca:1e:df:20:
ae:22:65:85:e4:03:96:d8:08:c1:6a:f8:53:8e:a7:93:b7:ff:
b8:1c:49:27:a0:c2:d0:fe:44:e7:90:a3:bf:ae:fd:cf:ad:41:
c1:4b:31:37:96:0d:0e:25:00:fe:fb:06:91:70:9c:31:60:7c:
fc:de:45:e3:98:4d:cb:41:cb:89:f6:0e:82:ff:bc:c9:69:02:
50:0e:08:35:f9:ea:e1:b4:37:0e:8c:60:b9:4b:29:fb:15:dc:
d8:5d:a1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:56 2025 by rpki-client