Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/1-CfWXfqBt_Oay7cp1VYdRKE-DV4.roa
File: 1-CfWXfqBt_Oay7cp1VYdRKE-DV4.roa (raw, json)
Hash identifier: IByCDyPDSryaeG317mHHpzoDIQK0tEiXU7uOBN36bps=
Subject key identifier: F8:27:D6:5D:FA:81:B7:F3:9A:CB:B7:29:D5:56:1D:44:A1:3E:0D:5E
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 01891FB1C468126E06C172F9917A2D729F45
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/1-CfWXfqBt_Oay7cp1VYdRKE-DV4.roa
Signing time: Tue 04 Jul 2023 06:58:11 +0000
ROA not before: Tue 04 Jul 2023 06:58:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 141.226.246.0/24 maxlen: 24
213.137.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1f:b1:c4:68:12:6e:06:c1:72:f9:91:7a:2d:72:9f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Jul 4 06:58:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f827d65dfa81b7f39acbb729d5561d44a13e0d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4d:b7:61:18:66:e1:1f:e2:af:d6:8f:d8:26:
d5:21:cc:e4:6a:07:54:b6:d7:ca:34:64:a4:76:b2:
98:cc:75:d3:c5:21:ac:31:f4:8e:52:2f:32:ae:2c:
ba:0c:2d:7d:d5:aa:69:ba:b3:8d:1f:bc:90:26:d0:
0a:a8:96:9b:84:46:56:ff:52:b9:85:77:b6:87:c1:
d3:3d:ca:d9:61:5a:f5:fe:8c:45:88:cb:66:31:41:
f0:76:45:3f:8d:92:b0:b7:79:5a:f1:8e:5b:76:36:
36:2d:54:c2:18:b6:46:8d:54:fd:10:eb:73:44:0e:
ab:30:2b:27:9d:0f:a2:27:8a:de:61:d4:2c:12:09:
62:11:a6:bb:bf:6b:5c:dd:e6:96:1a:4f:10:96:2d:
e5:46:32:88:0d:61:4d:8c:02:0b:a4:46:e9:dc:b3:
e0:8e:c0:51:14:c4:af:6d:a1:9f:24:a7:1d:09:9e:
cc:99:74:38:95:1d:25:12:b2:b2:82:d1:dc:60:cf:
fd:8e:16:6d:1b:53:31:7d:7a:3a:ab:e1:d2:d7:53:
0a:82:56:26:99:cd:84:fd:16:56:ba:ef:ca:04:3e:
b4:12:16:8a:41:51:21:82:6e:88:d4:14:76:95:40:
74:db:d6:db:1b:b0:14:d1:e4:17:58:1f:8d:a0:0b:
06:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:27:D6:5D:FA:81:B7:F3:9A:CB:B7:29:D5:56:1D:44:A1:3E:0D:5E
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/1-CfWXfqBt_Oay7cp1VYdRKE-DV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.246.0/24
213.137.80.0/24
Signature Algorithm: sha256WithRSAEncryption
52:a1:7c:53:0b:b1:cb:4b:3f:fb:e1:43:1e:6a:89:47:1c:bd:
92:42:1e:95:a2:74:14:cb:e6:0a:21:f5:97:b8:73:80:59:86:
ae:56:6f:e4:da:d3:fe:73:af:37:63:78:6c:02:7c:f8:c4:47:
6a:26:86:6e:95:11:7e:00:a1:64:94:70:b1:ed:a1:9b:e2:cb:
2e:e8:05:bb:e2:f6:ac:8b:de:a3:58:dd:97:ac:c8:9b:0d:2a:
83:d0:64:fb:2a:96:9c:5e:61:1f:99:78:23:8e:7a:74:20:d3:
f7:a7:ed:50:da:d3:49:16:8d:48:f0:68:24:aa:42:ef:fe:6a:
17:bf:2c:f9:4d:3b:99:cf:d5:36:76:21:64:c2:cb:e0:c6:e2:
58:ba:b4:7a:09:56:79:e1:28:71:d3:01:41:e3:33:e4:97:7d:
e1:e9:a3:0b:e6:5d:84:15:1f:bf:30:55:8f:8a:d6:ac:df:d5:
b0:ef:e3:ab:d0:c0:d5:ba:ad:f6:7f:a6:93:2e:97:67:42:bf:
f0:97:3d:2e:4a:59:34:f7:23:7a:9a:d0:ea:87:31:45:9e:4e:
00:f6:05:53:ee:4f:fd:7e:c5:30:ef:47:6b:85:78:29:a9:cb:
0a:11:04:e4:a7:d9:20:dc:dd:f9:42:45:57:27:db:52:dd:41:
61:e5:ba:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:58 2025 by rpki-client