Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/8c5JTCpSQ-v4CnjE4OTDI0whBoo.roa
File: 8c5JTCpSQ-v4CnjE4OTDI0whBoo.roa (raw, json)
Hash identifier: LgDYwqMCxiPTwQnOq3X2vbwxwpCnoZue2txfRs4LWys=
Subject key identifier: F1:CE:49:4C:2A:52:43:EB:F8:0A:78:C4:E0:E4:C3:23:4C:21:06:8A
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 018689BAA8854B62330922446FB030C52E32
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/8c5JTCpSQ-v4CnjE4OTDI0whBoo.roa
Signing time: Sat 25 Feb 2023 17:59:16 +0000
ROA not before: Sat 25 Feb 2023 17:59:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206621
IP address blocks: 141.105.136.0/24 maxlen: 24
212.87.170.0/24 maxlen: 24
212.87.170.0/23 maxlen: 23
212.87.180.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:89:ba:a8:85:4b:62:33:09:22:44:6f:b0:30:c5:2e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Feb 25 17:59:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1ce494c2a5243ebf80a78c4e0e4c3234c21068a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:7d:4c:67:7a:d4:5b:f3:77:99:df:bf:fd:
06:71:63:85:52:5c:2e:5d:4b:ab:ec:f7:77:25:09:
f9:c7:d4:49:12:a5:c1:c9:b9:72:af:36:4e:e5:ad:
ee:02:99:7e:ef:78:4b:ab:87:60:7a:fe:44:47:56:
89:60:d5:bd:3b:77:2d:99:9a:8a:ca:f6:f6:92:65:
72:a4:92:ff:a7:7d:61:32:34:6a:96:ef:2a:2e:b8:
c6:05:a5:1e:0e:fb:17:27:42:c3:e3:67:ac:57:3c:
20:8c:06:f0:9c:83:2b:42:48:b5:3c:ec:6e:60:93:
83:0e:33:4e:65:d6:00:fd:63:39:88:13:c8:d3:45:
7f:81:6f:21:15:0f:7a:e2:fc:49:0f:3e:87:a6:56:
07:7a:2a:1d:45:43:7d:9e:0a:90:66:91:7e:b5:b0:
fe:df:17:fb:0e:1e:2e:a9:ab:a0:ee:64:17:0f:87:
a0:64:0c:3e:73:0e:3b:8c:4f:dd:ef:d0:a4:d7:b1:
a3:7f:a6:f1:23:26:ce:ba:b5:d2:55:76:4d:3e:5d:
87:c2:45:86:9d:1b:ef:50:36:1d:0b:d7:1b:19:89:
da:16:e0:95:b8:14:6a:aa:e8:4d:3b:93:6d:9c:43:
10:40:ff:e5:e1:6b:60:ae:6a:5f:28:99:02:11:22:
73:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CE:49:4C:2A:52:43:EB:F8:0A:78:C4:E0:E4:C3:23:4C:21:06:8A
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/8c5JTCpSQ-v4CnjE4OTDI0whBoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.136.0/24
212.87.170.0/23
212.87.180.0/23
Signature Algorithm: sha256WithRSAEncryption
02:0a:98:b6:d1:34:66:24:18:2e:82:2d:36:58:61:ac:1c:4f:
03:8e:8f:74:52:f3:14:be:31:1f:af:9a:9f:77:73:ad:47:c8:
fb:6a:17:7d:a1:7d:dc:5f:1f:a4:b6:48:d2:2a:6e:03:b2:0a:
93:6a:f8:87:38:63:bc:7d:30:ad:dc:c3:1e:a1:8c:7b:f0:d1:
2f:f6:c1:34:7c:57:17:2f:b3:79:3e:3b:37:d1:ee:6b:1d:34:
14:2e:c7:f4:1e:2f:c3:21:e2:1d:be:51:0e:1d:66:b5:c5:3f:
91:0d:74:54:ae:ee:46:6e:92:73:ec:a9:9b:ec:a5:7a:1f:57:
d3:22:e3:c6:53:9c:7a:4f:63:7e:8a:2e:dd:98:e1:25:22:6e:
0e:67:cb:84:c0:34:33:42:dc:f0:1a:34:d0:b2:3e:ac:54:5b:
b0:a8:6a:91:4f:2b:09:48:4a:58:f0:29:95:aa:94:c6:e3:aa:
66:fe:10:7a:d1:91:9d:1d:3c:79:ac:9d:40:8d:10:c7:0a:d1:
a3:fa:9c:89:f0:be:84:56:5a:fa:b2:54:54:f1:b1:21:07:f9:
e1:d3:68:74:4f:46:8e:52:4e:87:71:88:69:73:b4:6a:87:ff:
8a:22:72:65:d4:94:fd:b1:ac:fe:94:88:91:7b:50:67:e5:f4:
f4:ca:b5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:09 2025 by rpki-client