Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/JJUu5N-xEMS20vfVwv1JUx2D4CU.roa
File: JJUu5N-xEMS20vfVwv1JUx2D4CU.roa (raw, json)
Hash identifier: C9NHlMhJrpZS5e/pSKKE0+tyhRwNK9I3n3ZJb5q27D4=
Subject key identifier: 24:95:2E:E4:DF:B1:10:C4:B6:D2:F7:D5:C2:FD:49:53:1D:83:E0:25
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 018A839D79F2C54256FCF56055367EE6BE06
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/JJUu5N-xEMS20vfVwv1JUx2D4CU.roa
Signing time: Mon 11 Sep 2023 09:40:50 +0000
ROA not before: Mon 11 Sep 2023 09:40:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 141.226.246.0/24 maxlen: 24
141.226.244.0/24 maxlen: 24
141.226.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:83:9d:79:f2:c5:42:56:fc:f5:60:55:36:7e:e6:be:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Sep 11 09:40:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24952ee4dfb110c4b6d2f7d5c2fd49531d83e025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ca:72:fc:59:e2:0d:3e:7a:73:f5:41:4f:8d:
9b:3c:ce:b1:53:34:56:b0:98:aa:c8:c0:5e:a6:57:
65:94:f4:ca:ae:cc:d1:c2:8c:4f:e1:c8:a0:44:e5:
50:60:ce:b3:e1:a0:1b:7e:25:fb:a6:cd:36:3c:82:
8c:2d:4a:da:49:94:16:da:c3:38:2f:a4:b8:71:ad:
d4:03:90:f4:b6:b2:d4:68:ed:b1:4c:79:b3:db:1d:
9f:36:a3:d1:08:a0:76:13:93:fa:1c:e2:40:c4:da:
ed:f2:32:8c:2e:44:00:2f:98:85:7e:45:39:51:c2:
cb:4b:68:4f:b6:69:8f:87:3a:7f:1c:f1:69:bc:dc:
65:46:cf:74:e3:a5:0c:09:16:82:14:e9:da:52:71:
37:ce:dd:43:9b:55:38:ff:e2:5e:1f:7f:5f:3e:21:
9c:08:76:21:b9:74:60:0d:f7:f3:40:d4:e4:cb:5f:
1f:dc:25:a2:4d:0c:b8:7a:70:8b:d4:c2:c0:b1:44:
81:ad:4a:e4:13:e1:e3:6e:8a:0c:cd:c4:41:ca:ae:
c2:ee:b7:cc:80:fc:aa:b9:05:f3:72:4b:ec:d1:ab:
d7:de:9d:5b:1a:b6:0f:a5:8c:98:17:a9:62:aa:67:
73:00:61:6b:0b:ef:44:4b:4d:ee:b0:6c:17:cc:ac:
70:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:95:2E:E4:DF:B1:10:C4:B6:D2:F7:D5:C2:FD:49:53:1D:83:E0:25
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/JJUu5N-xEMS20vfVwv1JUx2D4CU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.244.0/24
141.226.246.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:18:8e:0c:85:7a:ea:89:1e:8c:f3:9c:55:1d:4d:88:3c:ef:
3f:dc:8a:36:97:75:89:6f:e5:9a:6d:3b:f1:a4:c4:72:91:de:
40:0a:00:ff:ad:ef:6e:6f:13:ed:fb:77:37:d1:86:1e:9b:d2:
aa:3a:06:be:5e:80:0c:d0:10:69:c9:e2:be:44:f9:94:e8:2d:
b3:82:aa:32:29:3d:6f:68:4f:dc:9a:8b:5f:5b:9e:3a:f5:8c:
a2:3d:fd:fd:b8:fd:7b:9e:2c:88:7c:9e:50:7d:c4:ee:c6:ef:
80:6c:3e:c2:97:11:29:61:34:22:02:38:94:57:51:83:df:7d:
52:48:e5:3e:e5:91:15:ca:5e:51:1b:66:4d:ed:96:95:a7:0c:
67:4e:82:69:4e:eb:00:6c:dd:3d:92:a9:ff:bf:f3:14:87:29:
fb:ae:c8:cd:a2:b0:04:4d:b1:35:a8:12:08:58:3a:67:f8:43:
37:af:ea:33:8e:3a:2c:27:63:e8:84:39:b8:b8:83:5f:69:78:
ca:93:5f:72:f0:81:84:30:be:d3:38:eb:31:1e:53:e9:44:a8:
56:34:7f:b0:ee:30:51:e0:fc:b0:7e:84:d1:a4:66:bc:4f:07:
b4:33:b5:2b:19:d1:e4:07:37:99:ec:d8:55:fb:95:a5:a6:7f:
5f:ac:e7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:14 2025 by rpki-client