Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/Xw446w4mrbiq0965oquzj4-CcD0.roa
File: Xw446w4mrbiq0965oquzj4-CcD0.roa (raw, json)
Hash identifier: VskGZuBOVDXSjr6Wvk5VsewmGYk6Saj1LB/L2f0jjXk=
Subject key identifier: 5F:0E:38:EB:0E:26:AD:B8:AA:D3:DE:B9:A2:AB:B3:8F:8F:82:70:3D
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 018769E44E4A89DF3E41A9337B6FC0C447FC
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/Xw446w4mrbiq0965oquzj4-CcD0.roa
Signing time: Mon 10 Apr 2023 06:39:42 +0000
ROA not before: Mon 10 Apr 2023 06:39:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 141.98.74.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:69:e4:4e:4a:89:df:3e:41:a9:33:7b:6f:c0:c4:47:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Apr 10 06:39:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f0e38eb0e26adb8aad3deb9a2abb38f8f82703d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:61:e2:23:19:a1:ad:be:07:a9:9c:15:2b:95:
fe:9f:13:b7:30:7c:54:90:a2:6e:b5:5e:b6:98:76:
f3:89:c9:ef:77:5f:2a:4f:b9:43:99:7e:49:8e:9c:
16:c1:00:c4:04:17:cd:15:1d:e5:b9:41:45:cf:1f:
71:48:11:ed:0d:d1:79:85:31:e9:cf:1b:c2:e1:bc:
4a:ba:fd:e2:ee:54:3b:14:a7:6e:4c:5f:22:a4:82:
e7:6a:3f:f7:bf:44:e1:53:99:95:07:ef:11:f9:b4:
f6:f5:02:ec:04:c1:49:db:f4:d9:2d:b5:53:cd:e3:
bd:3e:b5:99:d7:0a:f3:cb:5f:c6:1c:c9:68:8d:d2:
5b:e5:7a:ab:a3:8e:43:9c:7b:5d:16:be:a6:76:61:
59:bd:aa:3e:75:7a:f0:4f:4d:db:c9:86:aa:e2:77:
da:ad:02:4d:0a:0f:2f:92:ed:2d:b5:e8:8f:db:0a:
a7:01:af:56:5e:3f:99:0e:d8:21:d1:6f:cb:82:ad:
a7:02:10:38:d8:b6:2a:69:9c:f2:26:17:20:4c:2a:
29:2e:46:ea:36:a8:8a:dc:3e:17:3f:19:42:a6:d1:
72:e0:25:0a:a8:c8:70:3f:f7:c1:e2:5e:fc:68:57:
50:9d:f3:88:e8:98:f7:77:3b:4c:20:38:f1:fd:e8:
b7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0E:38:EB:0E:26:AD:B8:AA:D3:DE:B9:A2:AB:B3:8F:8F:82:70:3D
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/Xw446w4mrbiq0965oquzj4-CcD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.74.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:1d:fc:05:2a:7c:0d:f4:b3:3e:3a:07:04:f1:1f:14:11:9a:
1f:8a:5e:31:fe:1b:49:d3:75:2a:7d:ea:2a:66:9d:e9:ef:f1:
ed:b7:2c:02:8c:bf:93:3d:10:78:60:76:ec:fa:d2:10:5c:0a:
8d:92:2d:58:d4:71:93:70:ef:93:e7:82:3e:07:93:4c:90:31:
af:c4:7c:92:b5:a1:2d:e3:bc:d0:40:a9:87:fc:02:f7:cd:fc:
7f:3e:ec:fe:f6:98:a5:80:d3:3d:66:5d:96:c0:89:a7:72:8e:
97:ab:01:72:03:d5:2e:cd:08:02:3b:67:c5:ee:64:6e:de:05:
55:99:ab:ca:11:7b:68:a9:c2:a2:7a:7d:ba:72:c9:9f:c4:ce:
2f:d9:a8:e2:63:1b:0a:c5:ba:7e:10:75:69:28:ea:f4:20:5d:
c5:d7:df:ca:af:29:2e:e9:c5:22:67:3e:85:cc:a2:c6:56:a8:
91:bf:38:b5:d1:5e:7d:6d:6e:53:bd:18:e5:de:88:67:44:ec:
ce:f3:d4:83:66:0c:f7:fb:d7:b1:21:48:43:90:94:68:d9:da:
15:43:05:b9:e9:12:ad:94:cf:e2:be:7d:57:17:e6:55:fa:e6:
ca:f6:4e:cb:60:aa:2c:a8:b3:c7:8f:05:a6:a1:cb:ed:6a:5b:
27:66:06:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:39 2025 by rpki-client