Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/R1bW3PqCkNGrvQJ0ja_ihHztGaw.roa
File: R1bW3PqCkNGrvQJ0ja_ihHztGaw.roa (raw, json)
Hash identifier: PtFrIRHzLycDu2jltdC52UobH84C3gksTTYjsYzjLdk=
Subject key identifier: 47:56:D6:DC:FA:82:90:D1:AB:BD:02:74:8D:AF:E2:84:7C:ED:19:AC
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019422FBCD8C7807BA43473863A6995BABA3
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/R1bW3PqCkNGrvQJ0ja_ihHztGaw.roa
Signing time: Wed 01 Jan 2025 17:48:34 +0000
ROA not before: Wed 01 Jan 2025 17:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210574
IP address blocks: 141.98.112.0/24 maxlen: 24
141.98.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:cd:8c:78:07:ba:43:47:38:63:a6:99:5b:ab:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 1 17:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4756d6dcfa8290d1abbd02748dafe2847ced19ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:eb:fc:b3:a9:72:e2:94:dc:31:0f:49:7b:7b:
c0:75:af:3f:0f:64:a2:28:ae:cc:f4:f6:38:f5:d5:
6f:da:8a:20:c3:f7:4e:30:ca:4b:41:97:12:c7:a2:
86:e5:62:e0:2c:89:8b:e9:6f:20:ae:55:3a:b0:5b:
c8:e0:4f:c1:95:32:74:99:6b:19:ab:03:cf:ea:8a:
fa:37:e3:85:8b:3a:0e:b1:63:6d:a9:94:a1:e7:ca:
9b:b6:c5:a1:4e:b3:a3:bf:48:8c:ac:57:b9:39:97:
0c:90:2c:0b:8d:df:e8:0b:34:5d:f8:38:04:27:80:
d4:b2:ee:26:60:d7:17:37:9b:d1:4f:2c:b8:07:b8:
a8:55:a0:f5:08:46:48:44:9d:37:ff:21:a3:6c:0a:
cc:76:6f:80:bc:ab:0b:82:13:ae:3d:cc:4f:8e:0f:
da:96:80:98:cb:d8:de:3c:ce:6a:44:fd:30:af:f9:
db:0b:78:58:c6:27:b7:53:6d:e3:7c:38:03:b6:01:
3b:b9:46:2e:8b:a1:dc:7c:73:9e:17:2f:c8:2b:3c:
db:66:48:3d:25:2b:cc:90:67:e7:e1:77:e4:e0:49:
be:d7:5e:26:2f:36:ef:04:d4:d1:6f:35:7c:9e:29:
a5:87:e5:d6:5f:06:ae:75:d0:c8:7a:a3:95:26:94:
bd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:56:D6:DC:FA:82:90:D1:AB:BD:02:74:8D:AF:E2:84:7C:ED:19:AC
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/R1bW3PqCkNGrvQJ0ja_ihHztGaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.112.0/24
141.98.115.0/24
Signature Algorithm: sha256WithRSAEncryption
83:f7:e2:a9:4d:4d:1b:82:15:8f:ca:ab:14:46:7e:30:8f:a4:
1a:5a:02:14:a7:e0:22:ae:64:13:c4:72:27:b6:d6:17:97:3d:
bd:26:00:5a:e7:de:73:16:26:4c:de:68:26:ae:36:40:b1:1f:
54:17:69:23:9d:f8:34:80:9e:d5:94:75:2d:11:bb:aa:8d:39:
e4:50:5d:cf:90:d1:a3:01:14:00:02:4f:93:71:6b:64:89:bf:
ea:33:97:ae:44:91:df:96:63:df:23:30:04:0d:57:d1:33:5e:
fa:ec:29:a2:7f:a0:c6:32:7f:9c:d0:b2:3d:a9:0a:14:36:cc:
ea:d2:64:e8:47:e1:f3:c4:02:92:00:64:4f:87:ec:3a:21:49:
09:e3:02:cb:49:40:a1:bd:c7:65:ac:73:71:23:ad:26:c0:54:
11:5a:63:ec:67:d9:8e:8d:f6:f8:67:3d:3a:bd:a5:f4:33:6f:
cd:d2:19:3a:52:20:74:b7:d8:7e:86:c1:4a:ee:f8:ca:2b:27:
3d:8c:d8:20:11:3a:d4:0b:e8:9e:ae:0e:79:4f:3c:54:4b:d0:
e2:a1:76:ec:5c:65:11:d5:0f:1f:48:c2:31:a0:65:1e:45:59:
22:38:91:a1:ad:e2:dc:fd:ab:9a:46:5c:d1:ef:16:c7:91:4c:
61:b4:db:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:29:27 2025 by rpki-client