Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/PmUQRdmociRJnDecyzdLjgXBafc.roa
File: PmUQRdmociRJnDecyzdLjgXBafc.roa (raw, json)
Hash identifier: JK5hmJJ2j+kbw+PQTfPvevy+f4e5zjsg/z9hOj2C5iY=
Subject key identifier: 3E:65:10:45:D9:A8:72:24:49:9C:37:9C:CB:37:4B:8E:05:C1:69:F7
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 01898812993C514DF77CEB0101DB0E7C9B69
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/PmUQRdmociRJnDecyzdLjgXBafc.roa
Signing time: Mon 24 Jul 2023 13:24:27 +0000
ROA not before: Mon 24 Jul 2023 13:24:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 141.226.246.0/24 maxlen: 24
141.226.247.0/24 maxlen: 24
213.137.80.0/24 maxlen: 24
213.137.84.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:88:12:99:3c:51:4d:f7:7c:eb:01:01:db:0e:7c:9b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Jul 24 13:24:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e651045d9a87224499c379ccb374b8e05c169f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:df:f2:4b:37:6d:96:2e:e0:23:e2:1e:1e:
7a:2f:01:30:8f:66:a1:eb:89:8f:01:a8:5e:d0:3f:
41:38:7e:26:15:66:6b:6f:20:f9:44:90:85:1f:51:
c8:bc:35:35:e5:9b:a7:9d:a8:74:0a:c4:32:43:49:
86:58:51:cc:a3:c9:83:3a:77:4c:5c:50:d1:9f:2f:
0e:0a:cb:16:84:4b:2e:39:8d:34:28:e8:94:ff:fe:
7c:bb:3d:ee:86:40:c0:bc:79:8a:5e:8a:54:dc:02:
75:89:03:f7:76:ef:c4:f7:2d:ec:7d:c8:0a:e1:54:
63:39:b4:d9:ee:96:bd:eb:58:0a:1c:ba:3d:b4:23:
44:48:8d:16:fb:09:1a:08:53:44:4b:ab:26:53:4d:
92:5e:02:70:65:7e:c8:82:ec:60:ef:05:da:05:d5:
2a:34:7e:b8:2f:2d:57:ec:32:18:20:90:4f:e0:ca:
b5:df:d5:04:84:13:2e:15:87:6d:c2:a4:3b:b8:08:
ec:3d:1f:17:f8:57:d0:aa:cf:3c:00:e0:e6:02:7f:
09:59:41:c0:04:cb:d0:30:5f:b2:fd:4e:26:51:66:
19:bf:50:fa:b2:12:31:fc:db:eb:49:86:de:57:70:
1e:56:d5:09:6f:56:11:22:00:7b:ed:3f:cc:5a:cf:
65:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:65:10:45:D9:A8:72:24:49:9C:37:9C:CB:37:4B:8E:05:C1:69:F7
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/PmUQRdmociRJnDecyzdLjgXBafc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.246.0/23
213.137.80.0/24
213.137.84.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:73:e1:cb:e1:76:30:05:6c:71:b5:1f:dc:17:82:3f:e3:39:
18:09:23:03:ff:09:d2:32:97:47:20:6c:1c:a4:f6:ce:dd:cb:
7d:83:b8:b9:87:18:b9:b3:91:fe:a2:c1:eb:7f:51:27:26:a0:
88:7d:40:af:31:96:e4:9b:2c:2b:b9:df:d8:ca:4e:b6:6f:34:
6f:e4:82:44:b4:a0:f2:4e:a8:52:34:35:ad:74:97:93:b7:9b:
b2:b3:30:3a:5d:55:4b:24:5b:6f:d2:4e:48:dd:57:0a:fe:1d:
97:13:0c:21:77:cd:f0:fd:50:61:e8:dc:63:22:6e:59:b8:6a:
9e:61:46:5e:eb:ed:ae:22:c8:2c:b8:cf:48:59:a4:86:e0:9e:
85:38:56:bf:7d:94:ab:f5:27:d4:60:09:c3:7e:25:14:0f:3a:
6f:a3:62:7d:c8:63:dc:f1:b5:13:ae:03:98:1c:27:33:73:59:
dc:f4:7a:3f:ac:a0:a1:a5:74:f7:32:fd:5c:ca:18:ca:0b:95:
10:69:07:1f:0d:9c:33:54:dd:ac:2e:51:09:e8:2a:d1:a3:42:
9d:f9:d6:3b:eb:18:46:d1:b2:27:86:0c:04:3f:6b:2f:41:ac:
03:4c:c3:03:86:b1:8f:8e:42:f9:b0:39:47:07:b5:d0:74:35:
cf:d1:cc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:19 2025 by rpki-client