Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/L1lw801geHhaUIm2Efg03nUTkPs.roa
File: L1lw801geHhaUIm2Efg03nUTkPs.roa (raw, json)
Hash identifier: 6qhfEaQmJRQ/eT0MsgkY/Iuri9h3cfG8fpbXq7fbMQg=
Subject key identifier: 2F:59:70:F3:4D:60:78:78:5A:50:89:B6:11:F8:34:DE:75:13:90:FB
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 01917E1550AF31DF5C249853EC64E47194C0
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/L1lw801geHhaUIm2Efg03nUTkPs.roa
Signing time: Fri 23 Aug 2024 07:13:31 +0000
ROA not before: Fri 23 Aug 2024 07:13:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215101
IP address blocks: 141.226.243.0/24 maxlen: 24
141.226.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7e:15:50:af:31:df:5c:24:98:53:ec:64:e4:71:94:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Aug 23 07:13:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f5970f34d6078785a5089b611f834de751390fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f5:b7:b7:7a:c5:7f:a3:2b:08:ca:a0:d4:6f:
29:6b:46:38:ca:e5:d8:0c:f8:64:46:5a:e7:b0:55:
9e:00:8d:b4:50:23:8a:72:fc:53:45:47:26:cc:8f:
43:80:4c:2d:f7:6f:36:d4:a6:82:be:55:b1:51:8f:
49:16:3f:e1:55:db:f5:87:b9:19:bc:b0:ce:4c:0f:
09:1b:a5:0e:4e:34:bc:7c:76:5a:b5:c1:e4:74:0f:
fb:84:00:18:2f:fd:99:4d:ef:e3:cf:7f:8e:5b:bf:
6e:ca:3e:8c:ed:e0:28:85:01:68:d2:10:81:d9:6a:
60:47:a9:16:e7:52:69:84:85:26:95:b7:fb:df:42:
76:5b:62:56:01:c7:5b:5b:ad:cf:70:3b:2c:df:14:
b1:58:f8:c3:83:b0:d4:d3:ab:5a:aa:fd:de:e2:d7:
ae:1f:18:aa:38:0d:a9:33:56:b7:f1:a6:6a:b5:2a:
65:0b:57:b7:94:d9:24:08:09:94:fe:15:b0:1f:a0:
70:f4:62:b7:e4:99:4a:37:3a:75:76:f5:0d:c1:af:
e2:45:0e:00:93:93:28:59:85:62:ee:ea:9b:fe:1a:
cf:3e:38:a3:2d:f3:ee:bf:5b:a7:aa:49:84:b3:56:
9b:8b:66:17:1e:7b:5b:7f:92:21:68:0e:c5:e2:d3:
7f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:59:70:F3:4D:60:78:78:5A:50:89:B6:11:F8:34:DE:75:13:90:FB
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/L1lw801geHhaUIm2Efg03nUTkPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.243.0/24
141.226.245.0/24
Signature Algorithm: sha256WithRSAEncryption
09:e9:4d:08:d1:19:b7:d6:56:84:c4:fc:1e:e2:f4:64:39:a5:
93:1f:3d:ec:5d:79:b7:15:bd:f3:6b:50:4c:e7:53:9e:8c:9d:
4e:2d:b3:2e:dd:44:ce:d0:98:da:e2:65:d9:a0:e7:77:ab:bc:
48:36:dd:11:81:81:03:0e:e6:6f:00:05:27:73:3f:74:fa:88:
e7:87:34:98:85:09:8d:89:80:9e:a9:e7:3c:69:38:0b:54:6f:
21:1e:3c:67:34:e1:0a:91:3a:d4:5b:4a:12:94:06:e6:26:2e:
9f:b4:57:6b:b2:f3:d2:26:39:1b:2a:29:98:61:6f:6d:4c:5e:
b6:c6:97:a7:2d:db:3a:dc:82:fc:a3:7a:b7:2a:bf:11:9e:6f:
16:21:44:3a:da:bc:e4:1d:02:8b:20:0b:9a:00:eb:81:ac:41:
d3:ce:8a:01:fa:3e:ca:51:4f:e4:c9:61:a6:26:66:0c:e0:81:
4c:2c:75:6d:75:b4:ca:50:50:38:3b:89:19:28:2d:33:b4:06:
04:b7:12:be:a8:27:9f:2b:82:4a:9a:69:d8:f8:5c:dc:43:5e:
58:fd:5b:dd:2c:a0:51:21:cb:3f:08:0e:39:74:d3:73:b8:c3:
4c:d0:fb:1f:bf:9c:57:2c:2a:04:c8:a1:17:04:84:0f:f7:c9:
7f:2f:5e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:10 2025 by rpki-client