Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/jsC1FimEcq_4vqul9df0d4HfFGA.roa
File: jsC1FimEcq_4vqul9df0d4HfFGA.roa (raw, json)
Hash identifier: yiz0HBVsOW4le4shhmF5JlYzMm0jtOcdnYHtwtYqGOQ=
Subject key identifier: 8E:C0:B5:16:29:84:72:AF:F8:BE:AB:A5:F5:D7:F4:77:81:DF:14:60
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 019154A9306630D4E9F4F2D449BDFF36E0C6
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/jsC1FimEcq_4vqul9df0d4HfFGA.roa
Signing time: Thu 15 Aug 2024 06:10:59 +0000
ROA not before: Thu 15 Aug 2024 06:10:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199393
IP address blocks: 141.226.241.0/24 maxlen: 24
141.226.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:54:a9:30:66:30:d4:e9:f4:f2:d4:49:bd:ff:36:e0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Aug 15 06:10:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ec0b516298472aff8beaba5f5d7f47781df1460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f0:ac:7e:0f:d9:62:ed:24:6f:07:cd:d9:18:
9b:d5:26:d9:1d:fb:43:a3:0b:74:b7:7e:ad:4d:6b:
68:af:74:68:c0:6f:dc:1b:6e:5d:e4:81:6c:65:70:
6e:9d:0e:a8:5f:71:d1:02:14:54:43:ce:6d:dc:75:
22:b8:ca:68:34:0e:be:94:29:e8:ff:e3:41:48:3a:
4c:39:d7:5c:8c:54:3b:d3:69:26:d4:a1:8c:81:23:
08:6e:11:82:a5:7b:72:8b:71:4c:97:1b:ec:40:03:
d9:b0:20:a5:54:e1:94:50:81:9a:27:35:f7:7f:15:
cb:9e:f2:ff:3e:74:5d:35:62:3d:e6:26:48:db:9a:
9c:0e:67:cc:0b:b1:c2:7c:62:90:83:65:48:42:05:
64:e1:3f:bd:e6:cc:5f:0a:77:69:cf:9c:d5:eb:5c:
24:e3:cd:01:66:05:2b:c5:54:fb:a4:84:34:0b:03:
75:30:18:20:4e:56:b0:8e:4f:1c:70:71:5c:f7:28:
db:15:ba:83:fd:34:b5:db:45:32:ad:32:ee:9b:ed:
57:b1:c9:8c:31:f7:04:cd:7f:82:9f:ef:af:80:8b:
e9:eb:a4:85:26:94:2e:c1:6f:5c:db:60:5e:c1:ee:
2d:95:7d:33:54:17:d7:2d:55:79:6b:c2:d1:12:c1:
92:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C0:B5:16:29:84:72:AF:F8:BE:AB:A5:F5:D7:F4:77:81:DF:14:60
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/jsC1FimEcq_4vqul9df0d4HfFGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.241.0-141.226.242.255
Signature Algorithm: sha256WithRSAEncryption
1a:36:b1:98:c5:fe:a4:87:0d:ee:9e:69:73:f6:12:05:7c:44:
f6:b5:44:f6:40:70:2c:fe:a2:1d:20:39:a7:df:aa:b0:ae:00:
dc:8c:b3:3d:2b:71:da:2d:42:04:9a:0d:da:09:62:e2:79:99:
91:87:b7:6f:c5:d9:8a:40:3d:7f:2c:28:d3:2d:b3:fe:3d:72:
f6:70:d5:c0:79:8f:08:79:56:c8:c0:ac:f2:ab:4a:68:70:6d:
ce:ee:74:a4:f2:c4:b6:68:5e:62:21:0c:ca:d1:a1:90:be:78:
fb:9f:b0:9a:5e:41:4b:cb:ff:bc:0b:1c:00:2a:45:29:8d:10:
f8:1c:39:ba:77:32:c9:2e:ca:84:16:a3:ac:83:21:7b:59:64:
5f:9c:cc:24:fe:54:da:b5:50:65:19:8d:54:d0:e6:94:59:84:
68:cd:2a:28:d6:47:94:f0:a1:ce:a5:2a:e1:a2:cf:8c:c4:08:
5c:24:4c:fc:42:0f:3d:82:1b:bf:3b:d3:a0:88:47:82:c0:65:
20:6e:58:eb:53:0b:db:7d:b2:1c:4e:0f:1a:ac:82:d4:49:9b:
a1:7f:2a:94:cf:6d:7a:cb:d0:05:b5:4b:cd:59:19:3d:69:fe:
97:aa:81:50:aa:c8:fd:a1:ee:23:72:72:87:0d:05:cc:a8:eb:
38:70:10:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:26 2025 by rpki-client