Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/0FL1QaYExGeirEsNJWwll627IQ8.roa
File: 0FL1QaYExGeirEsNJWwll627IQ8.roa (raw, json)
Hash identifier: PuQAZVgdG/SSAW0bj34xxBXHKAFr3ciQGEPz2McQVCM=
Subject key identifier: D0:52:F5:41:A6:04:C4:67:A2:AC:4B:0D:25:6C:25:97:AD:BB:21:0F
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 01927A23620655ADAFE022E84981067E900E
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/0FL1QaYExGeirEsNJWwll627IQ8.roa
Signing time: Fri 11 Oct 2024 05:53:12 +0000
ROA not before: Fri 11 Oct 2024 05:53:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 141.226.246.0/24 maxlen: 24
213.137.82.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7a:23:62:06:55:ad:af:e0:22:e8:49:81:06:7e:90:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Oct 11 05:53:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d052f541a604c467a2ac4b0d256c2597adbb210f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a4:73:8e:1c:19:db:0d:e6:a4:b5:ac:72:4b:
89:71:76:e5:78:74:f6:28:46:63:00:1b:f3:33:fd:
72:20:c1:c3:99:2b:f5:e1:a5:6c:29:d9:bf:7a:08:
2b:3a:ff:6e:04:2b:2e:40:18:61:d4:08:ce:66:64:
81:f7:00:f0:7a:ff:49:3d:1a:f4:1b:26:c0:7f:aa:
4b:fd:9e:25:6b:41:a5:cf:01:58:c6:8c:a9:80:f9:
51:25:bb:8e:a7:1d:7a:d2:c6:ed:38:1c:86:8c:96:
9c:cd:71:ec:c9:80:d5:18:37:8c:46:ff:50:03:dc:
f1:8e:82:ad:6b:e9:2a:a6:fb:d1:a8:d0:10:84:7e:
7f:72:90:1b:ab:fa:c1:88:ef:94:0f:65:45:43:80:
91:07:e8:86:54:79:68:27:f2:dc:86:bd:ed:40:17:
d5:f8:d7:52:45:b4:f5:7c:43:11:c9:6f:6f:37:ed:
df:cf:a3:72:be:95:39:03:a9:39:0b:4b:03:4b:3b:
c1:41:e9:4b:df:2d:e4:56:77:fd:00:b5:86:fe:f8:
42:e4:32:1f:7c:53:b0:3a:34:18:0c:2f:40:f5:e7:
fe:33:07:8b:0f:19:29:d4:74:32:0e:d1:fe:cc:97:
d0:ce:b9:e6:28:20:1f:0f:b8:b3:1f:d8:fc:b5:6b:
ca:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:52:F5:41:A6:04:C4:67:A2:AC:4B:0D:25:6C:25:97:AD:BB:21:0F
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/0FL1QaYExGeirEsNJWwll627IQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.246.0/24
213.137.82.0/23
Signature Algorithm: sha256WithRSAEncryption
26:be:98:94:af:ad:c8:8f:6c:8b:85:2f:b2:de:86:f0:0d:d4:
ca:5e:85:d9:41:f1:67:51:88:35:ee:d5:72:fc:54:fa:69:f9:
f3:7d:23:e8:33:46:1e:31:e1:70:ce:18:50:a5:f7:aa:c8:3a:
ce:fb:7c:cc:bf:64:74:d2:57:ff:4f:2b:a1:b1:7b:d6:12:dd:
73:fb:67:c4:c8:24:60:92:7e:bf:f1:f6:b2:8d:81:eb:ef:68:
fb:75:58:68:66:64:da:bb:38:32:26:0d:3b:c0:cc:b0:22:fb:
67:6b:f8:e8:07:c8:4f:10:4f:1e:0e:c8:01:da:88:fe:1f:ef:
4e:26:54:c5:9f:9b:4c:1e:ef:36:12:77:03:c5:9f:cc:87:5c:
8a:df:1b:dd:e5:a3:73:f6:0f:a7:da:89:ad:3e:bf:63:e9:5c:
5d:fd:1e:70:06:22:d7:0f:a1:ca:9a:0b:ef:0e:fd:68:50:d9:
21:8f:a0:5e:68:03:56:db:19:8c:f9:e5:75:fc:4f:33:41:32:
b5:d2:da:16:f3:eb:3e:b6:ca:b4:e1:ed:ac:a8:2c:1d:33:ec:
84:49:ce:46:fe:6d:08:a0:8f:98:43:d1:42:78:f0:6b:e3:b4:
83:63:88:a2:29:44:0e:d5:e4:3e:53:d4:af:3d:76:8e:0f:c8:
68:96:2f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:58 2025 by rpki-client