Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/WppRMvIS5QkMDHgNZwy88dYX8ow.roa
File: WppRMvIS5QkMDHgNZwy88dYX8ow.roa (raw, json)
Hash identifier: bjZX/LcAm1aZ8qXiIRO+d8pLklsHT/Vo5/xc9zrKdi8=
Subject key identifier: 5A:9A:51:32:F2:12:E5:09:0C:0C:78:0D:67:0C:BC:F1:D6:17:F2:8C
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 01924C0BB5B206ED3BA19A964BE99FD46DD1
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/WppRMvIS5QkMDHgNZwy88dYX8ow.roa
Signing time: Wed 02 Oct 2024 07:04:48 +0000
ROA not before: Wed 02 Oct 2024 07:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 141.226.243.0/24 maxlen: 24
141.226.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4c:0b:b5:b2:06:ed:3b:a1:9a:96:4b:e9:9f:d4:6d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Oct 2 07:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a9a5132f212e5090c0c780d670cbcf1d617f28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e3:d8:77:fa:de:13:53:2e:04:a3:e3:5d:18:
b7:0c:ca:92:1b:27:e8:45:13:bb:6a:26:c6:f1:9f:
63:88:47:96:15:65:df:5d:69:bf:4e:4c:aa:f1:ae:
d8:45:23:6f:28:41:04:2d:e4:63:4b:22:bf:5b:c0:
df:22:3c:52:15:71:98:d0:e3:bb:e8:96:37:bc:af:
22:b0:32:1e:7e:b1:bb:28:74:fc:97:c8:68:29:ea:
20:47:78:b5:7b:d4:79:61:c6:32:21:8b:fc:52:5a:
be:dd:d9:05:32:bd:13:3e:2d:04:14:0e:05:f0:41:
ad:6f:a5:65:84:93:9c:c2:7a:f7:89:71:d7:1f:cf:
ad:6e:cb:cb:ca:cb:2c:72:db:e2:63:5a:be:84:0b:
44:63:13:5d:59:94:17:74:16:67:b3:05:5f:19:d4:
e1:f5:ea:f4:56:d3:c3:d4:ca:19:db:30:2b:14:c9:
a5:a0:47:2c:03:51:02:ee:a9:f1:c3:17:fb:a9:aa:
6b:e5:8a:32:08:f3:4a:dd:5d:de:83:9b:cb:c9:11:
25:c6:e7:5a:ba:ea:df:6a:54:3e:4c:c3:4a:49:f6:
89:77:1e:90:3a:c5:9d:cc:23:55:77:be:16:48:b1:
ad:7a:1c:04:7a:79:45:a8:d7:41:5b:aa:a9:ae:c6:
78:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9A:51:32:F2:12:E5:09:0C:0C:78:0D:67:0C:BC:F1:D6:17:F2:8C
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/WppRMvIS5QkMDHgNZwy88dYX8ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.243.0/24
141.226.246.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:79:bc:53:f2:38:4f:52:b9:7c:56:36:7b:79:cb:f8:65:a2:
15:f6:c0:ec:8c:cb:19:45:c7:dc:d0:b8:bd:a8:fb:26:50:d6:
4b:9f:55:7b:5b:ac:f2:a0:3a:4b:cd:a2:cc:da:25:47:bb:9f:
df:f9:bf:66:64:e7:c8:e1:0d:cc:69:c5:d9:1d:97:45:09:21:
f7:10:b1:a3:aa:cc:c1:b1:c7:5c:b1:3a:8e:28:1e:e8:a4:0e:
6a:0f:5b:56:d5:8b:84:f5:76:69:be:1f:32:1b:aa:b9:4b:42:
c5:1e:f0:4b:6c:26:54:ca:f8:aa:14:67:87:8e:a7:77:ec:72:
c9:31:7e:8f:5f:29:27:20:ed:be:d0:49:a2:ac:d2:66:29:e9:
f9:01:74:c5:44:52:42:f1:7d:73:40:b8:6e:93:6e:1c:d6:22:
48:3d:31:98:e2:0c:04:4a:2e:da:a9:8c:53:ff:5c:3f:0e:de:
99:23:ec:33:1c:91:6b:fc:6b:ac:2e:56:f7:f8:d1:87:a9:0b:
c2:df:4b:b1:5f:38:86:71:0c:6a:f7:7a:27:aa:9d:cb:48:c4:
b4:44:e2:f0:25:51:6a:82:9e:ba:ba:54:17:61:9d:b1:fe:45:
4d:e1:b4:65:5e:5a:d9:78:d7:74:33:87:f5:cb:3e:3e:81:6d:
b0:67:df:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:01 2025 by rpki-client