Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/Zp1W7OyEjWega-zGkAH-wSMCHrc.roa
File: Zp1W7OyEjWega-zGkAH-wSMCHrc.roa (raw, json)
Hash identifier: Xx8mzoSZZhlKQGD+dhWCyxCDEl97hnqQbVCUwxuSeR8=
Subject key identifier: 66:9D:56:EC:EC:84:8D:67:A0:6B:EC:C6:90:01:FE:C1:23:02:1E:B7
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 0191516639DCCE9D18272523CFC3C2AE669C
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/Zp1W7OyEjWega-zGkAH-wSMCHrc.roa
Signing time: Wed 14 Aug 2024 14:58:59 +0000
ROA not before: Wed 14 Aug 2024 14:58:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199393
IP address blocks: 141.226.241.0/24 maxlen: 24
141.226.242.0/24 maxlen: 24
141.226.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:51:66:39:dc:ce:9d:18:27:25:23:cf:c3:c2:ae:66:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Aug 14 14:58:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=669d56ecec848d67a06becc69001fec123021eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:1b:74:a5:75:ef:48:a0:ff:be:04:43:1c:
74:7c:d5:6e:ea:ca:2a:ec:85:7d:2e:82:3b:85:f6:
4d:a0:29:10:1e:be:85:d8:9d:57:e0:b6:f4:5c:26:
47:25:50:6d:8c:1a:68:21:66:18:46:59:ce:3c:b4:
c3:33:6a:57:2e:76:a7:0c:b6:da:f5:5e:92:9a:84:
1a:b3:44:7e:0b:05:fa:90:d5:3d:4d:f6:ea:3c:ff:
9f:fb:4c:85:76:15:f4:c7:02:7f:fd:31:49:ac:a5:
86:16:2e:e1:9e:bf:18:8c:d2:ab:1f:3f:c8:a0:c8:
a3:6e:3a:99:21:c3:07:2c:68:81:c9:7c:a4:05:8c:
a4:6b:87:96:ca:ee:21:59:a8:9e:33:e5:81:86:28:
cd:9e:5d:bc:27:5f:91:1c:bb:f2:f0:85:2e:d2:b4:
fb:71:0d:c2:dd:3d:65:31:50:e3:0c:e8:a9:16:81:
ca:1c:b2:83:c3:c9:08:32:18:41:30:6c:92:30:7a:
2f:a4:d0:f3:a0:55:e1:68:f7:7f:79:54:7c:2f:c9:
91:15:d0:f7:8b:6c:49:e2:3a:69:0c:78:b6:ae:08:
9d:77:71:9c:9b:eb:c9:0d:df:81:1e:a8:c6:14:8b:
d2:2f:4a:9a:1f:75:13:c3:8d:9b:19:74:52:41:36:
0e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9D:56:EC:EC:84:8D:67:A0:6B:EC:C6:90:01:FE:C1:23:02:1E:B7
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/Zp1W7OyEjWega-zGkAH-wSMCHrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.241.0-141.226.243.255
Signature Algorithm: sha256WithRSAEncryption
b5:67:62:59:56:c9:89:47:53:d9:d2:82:13:24:5a:23:a5:8f:
13:98:47:9d:03:5b:cd:21:b8:c1:bb:8e:ff:ca:d9:f4:08:fb:
d3:0f:05:a8:41:8b:b8:9b:7a:e8:85:c1:02:fc:8a:53:59:80:
e6:5a:dd:18:bd:be:8c:2e:bc:08:60:34:d0:c0:87:6b:a7:1f:
2e:91:e6:05:75:87:55:7c:9b:12:d9:2c:fc:6e:fc:d2:36:dd:
0e:54:91:71:96:04:65:55:66:91:3c:1d:40:94:03:cb:06:ce:
eb:89:e8:3a:59:f9:dd:4f:e1:78:ed:87:4a:04:6f:2b:8b:f5:
0e:17:62:c2:18:96:f4:83:08:04:61:ba:b0:2b:78:35:25:0b:
16:be:2b:13:b2:01:ac:a5:79:88:7f:2f:63:da:90:c6:e7:1c:
67:38:14:65:00:87:3c:96:a8:d6:e1:b5:bc:4e:e7:43:c4:82:
bb:39:a9:66:ac:3b:0f:68:9b:93:2f:e2:56:aa:bc:bb:fe:7e:
91:4e:cc:c1:c5:14:f7:1d:53:5e:94:fc:0e:3d:ae:d7:f8:cf:
cb:32:e3:ae:84:49:9c:6b:3c:00:fd:6a:18:15:0d:07:21:be:
e5:df:5d:05:35:61:06:b8:32:d5:96:5b:75:90:b9:36:bc:a1:
8c:08:cd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:15 2025 by rpki-client