Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/Wa4YNodybaP4AjdgP7NzPhmiq2o.roa
File: Wa4YNodybaP4AjdgP7NzPhmiq2o.roa (raw, json)
Hash identifier: UHsF5xhWVUTuXnCacqeyhAUFtuX6dL1sGftahk+Wcjs=
Subject key identifier: 59:AE:18:36:87:72:6D:A3:F8:02:37:60:3F:B3:73:3E:19:A2:AB:6A
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 01857170A151B12BF2F48C09D50CE402325F
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/Wa4YNodybaP4AjdgP7NzPhmiq2o.roa
Signing time: Mon 02 Jan 2023 07:44:44 +0000
ROA not before: Mon 02 Jan 2023 07:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 141.226.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:70:a1:51:b1:2b:f2:f4:8c:09:d5:0c:e4:02:32:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Jan 2 07:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59ae183687726da3f80237603fb3733e19a2ab6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:60:2b:d5:45:15:c5:55:9e:7d:88:77:1a:cb:
21:af:1d:57:08:69:09:3d:79:d2:e3:53:b5:25:c3:
c3:fc:f5:74:29:1d:43:1c:ab:ea:db:b0:9e:48:a0:
d6:e0:c6:32:4d:4b:e0:bb:73:54:16:e2:25:80:e8:
e2:f0:fc:fb:34:f0:ad:f2:e9:b7:2c:b8:3f:6d:7b:
d1:7b:a1:2a:7d:03:f1:62:85:a5:e1:d6:82:9d:e3:
5b:dc:ff:ae:54:75:23:a0:83:cb:2a:97:0d:cf:df:
29:88:fe:d3:c1:08:5f:e3:b5:52:02:f8:c2:bb:c1:
9c:f0:f1:55:c6:8a:a1:10:5e:03:9d:b0:34:16:c6:
6c:01:8a:46:21:8d:3b:34:66:61:f4:60:86:e5:e4:
fb:6b:38:e7:cc:12:b0:7a:cc:39:88:83:9b:93:ef:
fc:12:cb:a3:81:8b:fd:bb:56:cd:65:62:a6:d9:d0:
92:9f:04:84:d0:cc:b9:49:99:df:df:4b:d1:84:56:
cc:ba:8d:87:27:87:d7:82:7d:ce:1f:b9:3e:f8:51:
3f:0c:7f:15:9c:67:8a:a9:5e:57:9f:2b:39:67:3f:
f6:a6:2e:b5:82:2e:07:76:11:62:20:7d:cb:f2:f3:
e5:a7:a8:33:4e:11:65:11:41:b8:0d:f1:f7:83:a5:
05:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AE:18:36:87:72:6D:A3:F8:02:37:60:3F:B3:73:3E:19:A2:AB:6A
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/Wa4YNodybaP4AjdgP7NzPhmiq2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.240.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:92:26:e0:d4:d0:3c:32:7f:6c:bd:9b:48:4b:4e:8b:40:d3:
48:ae:df:8e:3b:f1:a8:e8:22:4b:c9:14:6a:2f:5e:32:f7:58:
2d:91:06:dd:08:8f:56:79:08:22:31:f9:13:57:d6:4d:75:08:
23:cf:01:e0:84:57:7e:da:ea:0f:77:af:53:ae:63:15:35:81:
a8:ee:15:f2:87:62:ab:63:32:b6:a4:80:45:27:53:b1:0b:b7:
44:a4:dc:d7:31:0e:fd:7e:ba:6e:e5:0a:83:87:72:92:32:e5:
5a:f3:e3:4e:81:e3:c2:4a:3e:0c:e1:7b:9e:ba:13:72:42:6d:
13:ed:44:c1:2d:f8:ea:2a:5b:ce:ba:a5:28:32:75:9c:82:b4:
87:43:26:1a:5c:ca:91:e9:17:b9:11:da:09:cb:76:17:47:a3:
f7:59:b4:6f:bc:df:45:e0:d4:e2:fb:bd:69:56:aa:54:de:85:
1a:bb:a2:81:75:b6:47:93:4c:5a:1f:d4:3b:ae:d6:dd:b4:c2:
93:bb:09:05:4d:f0:4f:24:09:f6:d1:1e:06:4c:d0:6b:56:a6:
01:8b:05:65:8a:9b:67:1a:4d:9b:34:5d:a1:ca:da:20:f1:8e:
60:25:3e:78:53:45:25:db:3c:1c:6e:a8:f3:3f:62:12:88:48:
c2:d5:ee:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:12 2025 by rpki-client