Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cX1YPCQUbo4vtTO5AWE4MV20js0.roa
File: cX1YPCQUbo4vtTO5AWE4MV20js0.roa (raw, json)
Hash identifier: kZRw3xtYRqYXtrESWxKuGbfAytZoHeDTBS2FkfWh8bU=
Subject key identifier: 71:7D:58:3C:24:14:6E:8E:2F:B5:33:B9:01:61:38:31:5D:B4:8E:CD
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 01840F758D4071FF6E5982346D6EB6F2BADE
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cX1YPCQUbo4vtTO5AWE4MV20js0.roa
Signing time: Tue 25 Oct 2022 14:04:32 +0000
ROA not before: Tue 25 Oct 2022 14:04:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 141.226.244.0/24 maxlen: 24
141.226.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0f:75:8d:40:71:ff:6e:59:82:34:6d:6e:b6:f2:ba:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Oct 25 14:04:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=717d583c24146e8e2fb533b9016138315db48ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ae:b6:ce:93:f6:bf:15:e1:44:a8:d7:c8:dc:
d7:fe:68:6c:6f:69:72:42:e8:25:c1:f3:0e:86:9f:
80:d3:83:77:e3:3c:8a:31:76:13:f5:6d:04:1d:b9:
81:73:9c:a4:9b:da:4b:3e:59:a4:73:cd:f6:e9:ef:
f5:6e:c0:5a:b7:3f:15:8f:9d:14:6b:ac:fe:d4:e7:
61:cb:b2:a1:e5:09:fa:ea:1b:da:45:e0:b7:20:f5:
0b:28:7c:78:be:97:25:6c:de:96:59:09:0e:fa:85:
aa:56:48:6c:1d:8d:fe:22:6e:b8:e6:82:2b:d5:fd:
b3:02:5c:00:36:70:82:a3:ed:b5:3a:e4:9c:42:c6:
54:61:85:14:e2:22:d8:18:59:72:e9:73:51:c1:84:
91:af:0f:ba:17:23:f7:3e:b5:7c:0f:78:bb:8b:c0:
c6:04:ff:98:0d:e4:5d:68:79:08:58:f9:a7:55:70:
8b:90:c9:2f:37:d9:fe:ea:9d:1d:16:4d:31:5c:ed:
a0:b0:ed:7e:3a:95:57:c9:c8:a4:84:a4:31:b4:3f:
3b:f6:45:32:e3:13:04:0e:37:36:61:2b:20:c1:82:
1f:38:dc:70:e2:a5:ba:0d:8f:c2:6f:f0:20:4f:08:
34:41:a8:06:77:5c:df:f8:e4:be:47:3f:23:81:58:
86:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7D:58:3C:24:14:6E:8E:2F:B5:33:B9:01:61:38:31:5D:B4:8E:CD
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cX1YPCQUbo4vtTO5AWE4MV20js0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.244.0/24
141.226.247.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:cf:2e:d1:4b:f3:d2:aa:86:9d:30:53:8a:4d:e5:90:ca:77:
71:b8:b9:ce:53:f5:1a:b7:5b:a7:a3:41:18:b9:1f:a1:9c:8c:
b2:37:bd:3f:09:cc:9d:03:35:0e:10:64:c3:d2:4b:ec:9a:5c:
cd:af:1d:ae:01:43:b3:95:44:19:34:9d:be:e3:85:e1:77:0d:
60:45:ca:fa:18:fb:a8:a8:93:77:19:02:ae:6a:3a:2a:5d:d8:
cb:c8:84:a3:38:d8:1a:d7:5c:57:37:46:61:30:b9:a6:61:8b:
ce:8e:bd:86:d5:3e:12:08:de:d1:37:c9:08:bc:68:d6:b9:e0:
19:d2:32:37:16:3e:c0:42:fa:99:0f:79:33:01:86:97:1a:e0:
74:41:54:f5:ca:a4:70:f7:22:63:41:8e:97:71:c4:7c:7f:93:
09:01:8b:9b:63:d2:64:91:b0:8d:48:78:d0:1f:51:7e:fd:50:
88:04:a2:bb:2b:c4:5e:61:d5:d9:53:55:d4:57:06:87:a2:ab:
7a:fb:69:9e:7d:94:45:9c:67:01:dc:fc:81:25:61:2e:45:5e:
73:cb:32:4b:88:21:cf:e3:7a:31:36:54:ed:69:9c:62:9f:b7:
96:d1:35:db:a5:e9:74:80:39:cf:0f:dc:fb:59:b4:c8:10:0c:
6c:a2:0d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:25 2025 by rpki-client