Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/uuo6k_luAOet_U0R0vMzz75ueK8.roa
File: uuo6k_luAOet_U0R0vMzz75ueK8.roa (raw, json)
Hash identifier: 0FuoAE/W5mrhC0cjXOu8wPjKjm8EDnvMiEXcopko4jk=
Subject key identifier: BA:EA:3A:93:F9:6E:00:E7:AD:FD:4D:11:D2:F3:33:CF:BE:6E:78:AF
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 047EEF62
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/uuo6k_luAOet_U0R0vMzz75ueK8.roa
Signing time: Wed 25 May 2022 08:13:13 +0000
ROA not before: Wed 25 May 2022 08:13:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141968
IP address blocks: 141.98.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75427682 (0x47eef62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: May 25 08:13:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=baea3a93f96e00e7adfd4d11d2f333cfbe6e78af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:72:23:6b:6b:aa:dd:f4:ec:a9:d8:dc:f2:41:
35:b6:25:0b:96:ca:09:03:7b:9b:d1:63:d7:96:a1:
ba:5d:df:5e:fe:35:23:5f:ff:18:3d:22:4d:c3:b6:
0b:cb:8b:86:91:33:58:4e:3e:69:f5:9e:dd:40:47:
aa:d7:cb:72:b4:27:b5:f7:14:4a:f6:1a:15:72:56:
37:47:01:b0:f9:2b:37:4e:14:89:38:0c:91:03:cf:
bd:a2:c3:01:c8:e4:cd:58:c8:3a:e1:30:83:bc:36:
8a:26:69:69:a0:1c:88:36:a0:15:9a:4c:1a:a5:00:
05:fa:d9:f4:03:3e:f7:33:c7:a7:a7:9c:c3:7d:0d:
cc:df:b6:e0:25:c2:69:0c:24:8b:2d:4f:c4:0d:b4:
3a:84:c6:9f:01:7f:cb:ba:b3:13:eb:84:5c:64:b9:
cc:43:4f:f0:ef:8a:06:73:0d:ba:c7:78:fe:56:7b:
63:5b:48:4b:e6:90:05:d7:e8:0a:31:ab:2b:e8:2b:
33:43:96:70:dd:4b:a8:a5:a7:a3:63:8e:80:25:98:
80:43:bf:ef:b4:cd:a6:3a:98:46:89:b5:86:5f:b5:
b2:4e:ab:1f:b1:bf:f3:0d:b4:fa:f6:02:aa:f8:f7:
83:bb:85:5f:a0:c5:0f:c0:78:7a:cd:d5:02:59:35:
36:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EA:3A:93:F9:6E:00:E7:AD:FD:4D:11:D2:F3:33:CF:BE:6E:78:AF
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/uuo6k_luAOet_U0R0vMzz75ueK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.72.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:34:a4:21:3e:c6:17:84:e8:90:45:da:0f:3a:be:7e:2e:7b:
b0:37:39:88:62:ba:56:58:12:17:54:05:af:9e:4b:a1:05:8e:
68:ce:b7:9e:6c:52:74:e5:0d:dd:c2:b4:45:69:3a:4b:4b:95:
b4:4e:e8:eb:85:f9:d7:6a:48:4b:ae:1e:d4:4e:5b:c7:99:72:
33:89:64:43:e4:19:17:25:a7:e8:c7:1f:08:2d:54:43:7d:d7:
98:35:7c:27:af:29:7f:55:0c:3f:ca:cf:4c:25:09:2c:f1:9e:
2c:4f:7d:71:16:8e:a7:2c:b5:01:e7:5d:e3:fc:0b:bc:c0:2b:
7a:0e:58:a7:64:c9:83:ce:c7:16:58:8f:13:c0:da:b9:bc:c5:
cd:5a:cf:b4:cf:fb:07:b7:74:d2:fa:be:fb:e2:5f:02:35:3f:
5a:77:df:5b:e0:51:c7:5b:fc:03:23:94:fd:d2:3b:36:99:da:
94:ef:61:9a:2e:3c:02:06:f8:71:a9:8e:3d:f8:5e:0e:eb:8b:
9d:fe:24:18:97:11:0a:98:16:d7:e7:f7:a7:c4:e1:05:4f:80:
00:ef:1e:0a:23:91:fb:ea:97:e9:fb:78:f0:8d:87:f1:5e:d2:
f8:40:62:3b:05:e0:2a:db:a4:3d:ff:9e:9e:70:f4:4a:d5:82:
e3:4e:5d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:14 2025 by rpki-client