Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/PtD8kP6JW_RTUV9epjRRi9B-1Mc.roa
File: PtD8kP6JW_RTUV9epjRRi9B-1Mc.roa (raw, json)
Hash identifier: Rv5+NS513uzkRtRCpeCJhZQXsNiLeOcm8DtomdE+7nk=
Subject key identifier: 3E:D0:FC:90:FE:89:5B:F4:53:51:5F:5E:A6:34:51:8B:D0:7E:D4:C7
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 018689BAA4EA14C91792D56B26D4C11C4AA5
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/PtD8kP6JW_RTUV9epjRRi9B-1Mc.roa
Signing time: Sat 25 Feb 2023 17:59:15 +0000
ROA not before: Sat 25 Feb 2023 17:59:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42905
IP address blocks: 141.105.128.0/24 maxlen: 24
141.105.132.0/22 maxlen: 22
141.105.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:89:ba:a4:ea:14:c9:17:92:d5:6b:26:d4:c1:1c:4a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Feb 25 17:59:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ed0fc90fe895bf453515f5ea634518bd07ed4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:18:2e:c5:60:f9:48:0d:e3:03:40:ee:11:11:
4c:e0:a5:9b:6b:e7:d0:57:85:ea:32:06:b1:5b:2b:
45:4d:4d:b9:3d:7f:ef:92:a5:e8:a7:61:d0:95:ed:
83:73:cb:c7:85:ce:89:d3:fd:47:89:66:79:46:ac:
97:46:81:7f:ae:c3:9f:8c:4c:0f:9c:b4:95:0f:5b:
0f:e3:a9:3f:a8:1c:f3:5b:62:d2:77:96:d9:8b:2e:
07:ec:73:13:18:ea:72:eb:3e:5d:4a:ac:99:3e:bf:
3a:50:40:f0:ad:10:4f:8e:7f:08:18:cb:73:f3:d3:
4c:e6:c7:be:70:44:4b:70:1a:84:f9:c2:67:02:1b:
5a:e2:39:e0:78:c4:f9:9d:1c:9e:70:23:d3:f0:6e:
69:c3:b1:52:50:96:45:29:ce:ce:3f:ca:1d:4e:11:
f5:fb:08:09:d6:61:a8:ef:3a:15:20:96:57:53:90:
0e:f7:22:7e:61:f4:66:e5:68:99:4e:cb:f2:c7:80:
bd:05:d0:66:04:e0:04:0e:b1:38:3f:a0:a8:b8:3c:
2b:ad:49:a8:dd:dd:8c:dc:8d:5d:67:52:4c:b8:32:
9d:81:66:fa:ec:39:4e:3c:02:82:9f:8f:fa:1b:0a:
f2:02:c9:9c:e1:4b:94:23:9b:80:ec:98:16:ed:cd:
ad:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D0:FC:90:FE:89:5B:F4:53:51:5F:5E:A6:34:51:8B:D0:7E:D4:C7
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/PtD8kP6JW_RTUV9epjRRi9B-1Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.128.0/24
141.105.132.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:4d:80:d5:d4:9f:22:68:0b:c3:55:f6:98:cf:83:11:26:b4:
1e:19:00:ed:1d:c3:37:ee:ea:44:7c:2c:54:6e:dc:58:f0:e4:
e8:2b:db:5b:fc:93:6f:92:78:e1:4e:f3:b7:95:1c:98:70:e4:
57:a9:ee:d1:6e:29:23:85:10:6e:fc:e8:91:7d:c9:73:9f:f7:
ec:8f:27:12:cf:dc:7c:8a:fa:42:e0:a4:3a:7c:00:c8:c8:ef:
fd:9a:0a:e6:ed:a2:01:52:ff:ad:4f:51:dc:83:d0:05:b3:fe:
b5:67:9d:50:01:c4:8b:ec:83:0f:c7:94:6a:d8:cc:e4:c1:70:
61:a5:8f:0e:fe:fa:93:72:8c:96:23:ef:85:40:e2:92:55:56:
a6:00:ce:f1:fe:71:08:6b:90:28:b8:e4:ff:6d:38:6f:54:cf:
a0:c6:18:b6:68:fc:57:c3:86:6a:3c:97:03:0c:ca:bf:f1:e4:
90:f1:db:04:4c:7f:0d:a9:5d:f7:a8:40:29:ad:cc:45:5a:64:
fb:18:1e:d0:39:da:3d:18:9d:2b:fe:7b:20:84:e6:40:9a:1d:
a8:6f:14:ca:fb:4f:c2:05:50:e8:f2:6d:cf:bf:59:c8:59:75:
be:23:b5:a5:2e:fa:42:7f:d1:a4:e0:1a:67:65:64:dc:64:d6:
8f:61:79:06
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYaJuqTqFMkXktVrJtTBHEqlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NjViYWUyNTc3OGJlZWQ4ODgwYzA4ZGYyZDNmMzdmYzM3
YWJjMWUwHhcNMjMwMjI1MTc1OTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWQwZmM5MGZlODk1YmY0NTM1MTVmNWVhNjM0NTE4YmQwN2VkNGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhguxWD5SA3jA0DuERFM4KWba+fQ
V4XqMgaxWytFTU25PX/vkqXop2HQle2Dc8vHhc6J0/1HiWZ5RqyXRoF/rsOfjEwP
nLSVD1sP46k/qBzzW2LSd5bZiy4H7HMTGOpy6z5dSqyZPr86UEDwrRBPjn8IGMtz
89NM5se+cERLcBqE+cJnAhta4jngeMT5nRyecCPT8G5pw7FSUJZFKc7OP8odThH1
+wgJ1mGo7zoVIJZXU5AO9yJ+YfRm5WiZTsvyx4C9BdBmBOAEDrE4P6CouDwrrUmo
3d2M3I1dZ1JMuDKdgWb67DlOPAKCn4/6GwryAsmc4UuUI5uA7JgW7c2tJwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD7Q/JD+iVv0U1FfXqY0UYvQftTHMB8GA1UdIwQY
MBaAFKhluuJXeL7tiIDAjfLT83/DerweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTkt
MWI2Zjc1MGNmOWEyLzEvUHREOGtQNkpXX1JUVVY5ZXBqUlJpOUItMU1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTktMWI2Zjc1MGNmOWEy
LzEvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjWmAAwQC
jWmEMA0GCSqGSIb3DQEBCwUAA4IBAQArTYDV1J8iaAvDVfaYz4MRJrQeGQDtHcM3
7upEfCxUbtxY8OToK9tb/JNvknjhTvO3lRyYcORXqe7RbikjhRBu/OiRfclzn/fs
jycSz9x8ivpC4KQ6fADIyO/9mgrm7aIBUv+tT1Hcg9AFs/61Z51QAcSL7IMPx5Rq
2MzkwXBhpY8O/vqTcoyWI++FQOKSVVamAM7x/nEIa5AouOT/bThvVM+gxhi2aPxX
w4ZqPJcDDMq/8eSQ8dsETH8NqV33qEAprcxFWmT7GB7QOdo9GJ0r/nsghOZAmh2o
bxTK+0/CBVDo8m3Pv1nIWXW+I7WlLvpCf9Gk4BpnZWTcZNaPYXkG
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:46 2025 by rpki-client