Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/7uj-_5hFGfq9Bu_2z3v5MBgisj8.roa
File: 7uj-_5hFGfq9Bu_2z3v5MBgisj8.roa (raw, json)
Hash identifier: Ymg3jVEotrNoxRDC10UCE+4yIz8tSDGIJ4VAZQ1YY3s=
Subject key identifier: EE:E8:FE:FF:98:45:19:FA:BD:06:EF:F6:CF:7B:F9:30:18:22:B2:3F
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 018558A8E46971FE7CAD7DBB89518CB37275
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/7uj-_5hFGfq9Bu_2z3v5MBgisj8.roa
Signing time: Wed 28 Dec 2022 12:15:41 +0000
ROA not before: Wed 28 Dec 2022 12:15:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 141.226.245.0/24 maxlen: 24
141.226.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:a8:e4:69:71:fe:7c:ad:7d:bb:89:51:8c:b3:72:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Dec 28 12:15:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eee8feff984519fabd06eff6cf7bf9301822b23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fe:5b:a4:da:af:bd:7f:82:d5:35:f1:22:f0:
a0:bf:34:70:8d:37:03:a2:8a:9b:d7:ba:c5:3a:57:
9c:a2:a3:bc:70:dc:bc:0e:9c:82:f5:15:96:0a:f1:
11:56:c3:22:03:d8:32:55:ca:5e:e5:78:3d:05:99:
35:64:2c:ee:96:50:ca:c1:89:cc:be:e5:2d:86:70:
82:ab:aa:b7:b8:7c:61:4a:1e:72:60:20:9d:74:da:
53:63:1b:68:94:48:a6:66:21:5d:c7:9f:30:7e:7e:
6b:a7:cd:33:26:f5:27:c1:8e:d8:cc:f2:18:4f:12:
2b:94:e2:de:64:e2:5a:07:92:fc:6f:1f:f6:43:7d:
79:d4:82:2a:95:78:62:d0:59:28:ba:df:66:65:0c:
b7:ea:05:5b:12:d3:49:53:91:66:31:68:ba:16:f5:
81:bb:67:80:76:a2:ac:78:3e:4b:2d:80:2d:1c:25:
40:f9:36:ae:fc:ae:0d:ca:bc:eb:64:26:45:52:f6:
91:5e:32:2a:94:78:5b:37:ea:64:7d:00:15:72:93:
42:30:ae:3c:56:2c:a1:d8:ca:b7:31:6a:a1:c6:e5:
3c:36:80:89:67:6d:39:59:04:8e:24:28:d9:2e:2d:
cf:c5:13:65:0c:f1:38:56:b9:12:14:44:e8:43:57:
4a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E8:FE:FF:98:45:19:FA:BD:06:EF:F6:CF:7B:F9:30:18:22:B2:3F
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/7uj-_5hFGfq9Bu_2z3v5MBgisj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.241.0/24
141.226.245.0/24
Signature Algorithm: sha256WithRSAEncryption
33:4c:09:09:fc:a8:ef:c6:da:1d:0a:68:64:09:e1:9b:55:4f:
54:f3:40:ae:c1:9e:34:a8:c4:ee:4a:f6:3e:cc:0c:3e:3c:77:
bf:03:77:33:ed:2e:04:b5:00:53:3a:81:9b:b8:ec:ec:c5:a7:
51:d0:4c:76:76:f2:bd:2c:e1:55:87:1b:21:72:d4:ff:93:b0:
75:2a:2e:35:f0:ec:f0:40:bb:9e:a3:c0:7f:9f:35:d1:1e:7f:
b7:f9:d1:4f:78:af:17:a7:79:fa:ba:3f:94:8e:df:a0:3d:ad:
d7:47:f1:56:84:16:1f:0c:de:14:2f:63:79:eb:40:85:eb:1a:
1d:9d:ba:d1:c1:5e:31:6f:35:6a:d8:7f:ba:2a:b0:4b:a4:e1:
f3:f9:b6:33:e9:24:b6:83:65:5e:b4:63:64:2a:f9:ab:ab:3a:
dd:9e:97:94:39:b3:15:7b:c2:3b:53:48:cf:11:56:fe:4a:4d:
51:aa:b6:11:97:c4:27:fa:de:38:96:60:cd:78:7c:5e:20:bc:
40:bb:fe:5d:cd:c6:f9:df:f1:7d:ff:ef:27:d4:a4:9f:09:e4:
82:d2:42:da:d0:bf:f5:10:e0:95:a1:3b:64:2d:63:db:c6:6c:
13:b8:ff:24:5f:dd:2d:dc:64:4e:12:81:f5:48:48:20:40:b1:
a3:93:93:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:58 2025 by rpki-client