Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/C057dmOyYxiJVcId3EgBupjcm_o.roa
File: C057dmOyYxiJVcId3EgBupjcm_o.roa (raw, json)
Hash identifier: Dzq+KZPSHqb0NpkvrlQW3CjM4sOSRPyrT/0FmB2Xdl8=
Subject key identifier: 0B:4E:7B:76:63:B2:63:18:89:55:C2:1D:DC:48:01:BA:98:DC:9B:FA
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 018BE28DBD4EEE425C79BEC0CCE607EECE09
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/C057dmOyYxiJVcId3EgBupjcm_o.roa
Signing time: Sat 18 Nov 2023 13:10:21 +0000
ROA not before: Sat 18 Nov 2023 13:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209139
IP address blocks: 141.105.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e2:8d:bd:4e:ee:42:5c:79:be:c0:cc:e6:07:ee:ce:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Nov 18 13:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b4e7b7663b263188955c21ddc4801ba98dc9bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:00:18:94:d2:c8:66:c0:91:f4:d6:63:49:3b:
b6:0d:e6:db:0e:eb:c7:9d:af:5c:0d:f6:7d:8d:f6:
1e:27:e8:da:a2:ff:f5:a3:0d:2e:55:59:8e:07:f2:
f6:d1:21:d4:c2:06:3c:35:58:90:63:1e:19:12:2e:
a1:85:29:5a:94:ff:04:d6:86:97:de:fb:4a:8e:47:
33:54:08:72:bc:15:74:0b:46:c3:41:7b:f5:88:14:
12:0c:a0:49:0e:06:8c:c3:5f:80:de:fe:56:eb:49:
c6:d1:57:6a:21:23:d4:ee:8a:97:f3:8e:2e:cd:03:
66:fd:8a:bf:83:fd:19:ef:0d:bf:23:aa:7c:a3:8d:
b3:42:5b:15:e1:68:35:bb:93:1f:02:23:94:4f:75:
b2:26:b9:f4:78:b0:de:30:61:63:14:cc:dc:00:1b:
62:38:e1:7a:0c:68:a5:8a:d6:cc:3a:ed:0f:5d:0e:
5e:95:f9:ad:4a:de:3e:e6:2e:1f:5e:fc:c7:6e:f3:
98:e0:6e:fc:6e:9f:3d:0b:54:30:20:fc:48:1d:f2:
fc:e9:54:79:d5:4f:5e:5e:a9:58:9f:4e:f6:41:bb:
d3:37:6d:a0:49:c3:8d:36:24:92:d6:62:6e:99:28:
d6:2b:81:a7:2c:1d:b4:ae:49:98:28:f2:2d:72:43:
75:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4E:7B:76:63:B2:63:18:89:55:C2:1D:DC:48:01:BA:98:DC:9B:FA
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/C057dmOyYxiJVcId3EgBupjcm_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.137.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ec:fd:ef:34:a5:2b:5a:15:6f:19:f7:2c:db:c2:3a:55:0e:
cd:e5:a9:37:d8:fe:33:57:80:2d:ca:04:0f:5a:94:36:64:ad:
14:aa:ba:f0:04:30:60:af:73:91:19:72:e5:02:7e:b8:9b:a3:
3e:ef:78:fc:1a:7e:46:8b:7f:dc:84:dc:7b:38:c8:4f:85:69:
52:f3:4e:ee:69:a7:0e:d5:78:c6:d1:bf:33:9b:8f:d7:65:9f:
5f:95:91:23:16:f7:b8:bf:20:7b:85:61:44:b2:24:aa:cd:2b:
73:fe:48:01:2c:cf:46:75:85:c3:89:75:3d:cc:47:be:cc:86:
6c:0e:3e:0a:9e:04:86:0a:e9:73:4f:bb:a2:b7:a4:7b:0b:a4:
f5:6c:95:38:bb:33:5f:09:0e:88:65:17:d6:a5:54:2c:ab:3d:
cd:69:7c:c5:ce:63:a7:28:b6:b0:08:0e:ba:ba:25:2e:3a:9f:
1e:81:7d:6a:ef:df:15:d8:f4:3a:32:b6:85:6f:e1:6c:f3:5b:
c8:bd:7a:23:83:0a:f2:ba:c7:38:ca:67:7f:52:48:c5:9b:f3:
3c:19:83:52:72:c7:4d:c3:23:c2:c4:6b:c2:b4:d6:88:19:45:
11:57:43:5f:00:fa:c1:90:b8:48:ec:19:10:7d:52:f3:23:e4:
82:d9:3d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:39 2025 by rpki-client