Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/nFpg1MdDA_eWwsO0Q3ACQCVoOLo.roa
File: nFpg1MdDA_eWwsO0Q3ACQCVoOLo.roa (raw, json)
Hash identifier: IrR5tLEqGUX+0tWapdzyeHvySftzHPehM4InRtFyHTE=
Subject key identifier: 9C:5A:60:D4:C7:43:03:F7:96:C2:C3:B4:43:70:02:40:25:68:38:BA
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 0194221FDA98C9890D69604E75785AA88945
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/nFpg1MdDA_eWwsO0Q3ACQCVoOLo.roa
Signing time: Wed 01 Jan 2025 13:48:20 +0000
ROA not before: Wed 01 Jan 2025 13:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 141.226.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:da:98:c9:89:0d:69:60:4e:75:78:5a:a8:89:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Jan 1 13:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c5a60d4c74303f796c2c3b443700240256838ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c2:63:01:90:87:95:59:c4:d4:77:61:02:ca:
fd:e4:e4:98:4a:fb:ea:84:07:62:81:36:e6:5c:00:
26:a6:85:49:a5:8d:3c:78:22:52:ce:75:3b:8d:2f:
f8:fd:a8:f1:e8:8e:a8:45:fe:66:ee:33:cb:84:9c:
49:bc:fc:f7:d8:1f:57:95:ba:9b:45:ab:70:a5:70:
19:3a:1c:4b:aa:72:26:eb:6f:a0:2b:aa:c3:77:38:
91:ac:8d:b4:2f:bf:bc:67:20:80:5a:34:c7:56:5c:
34:35:5f:13:8f:cd:4b:a5:df:48:14:4d:34:5d:cf:
9d:7b:8b:e6:83:58:0e:39:20:c4:59:09:2b:5a:73:
2b:94:1e:cb:3d:b5:6b:ae:ce:ef:c3:a2:ec:18:cb:
14:62:8c:50:c8:f2:8a:62:c5:e2:ed:e7:29:55:2d:
25:f5:9b:f3:b3:1c:f1:18:0c:3d:22:64:ca:6c:c3:
20:1d:8e:e8:68:a8:2f:41:27:8c:9e:e3:be:42:19:
d8:3a:7b:26:cc:6a:94:99:84:f5:8b:86:af:7a:cd:
2e:81:49:d0:05:30:86:b3:64:cb:e4:6e:ac:56:da:
84:0f:cb:15:86:79:22:e2:24:8b:4f:0d:bf:d2:24:
90:ff:43:aa:fc:7b:45:91:9a:74:88:1b:34:3a:fe:
11:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5A:60:D4:C7:43:03:F7:96:C2:C3:B4:43:70:02:40:25:68:38:BA
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/nFpg1MdDA_eWwsO0Q3ACQCVoOLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.246.0/24
Signature Algorithm: sha256WithRSAEncryption
85:6c:f6:79:f2:13:78:45:a8:46:af:1a:00:3b:d7:a4:61:70:
9c:f9:a7:4b:e0:b4:29:79:b7:c0:e6:58:a6:58:9d:e3:54:51:
62:c4:97:f1:fd:cf:27:6e:f8:c0:d4:55:63:a6:c1:49:fc:5d:
6d:25:32:cf:0b:8c:f8:5d:fa:06:2b:41:f5:d2:cd:ca:fe:b9:
ea:33:88:1f:75:66:4b:a5:12:ad:bd:a3:21:f5:90:63:50:bb:
1c:37:97:6e:10:5b:61:2b:05:ce:6d:cc:fa:3a:c4:9b:25:af:
d2:c9:dc:81:ca:8f:09:26:48:81:20:04:45:2c:38:93:8f:26:
d4:af:25:0e:a1:32:97:10:e1:ba:1b:5d:d1:d6:4d:ad:17:f2:
93:aa:fa:bc:59:7c:e5:ca:14:de:03:b3:f2:16:2b:46:f0:5a:
52:79:a7:79:5d:44:f1:1b:9f:3d:fd:d7:a8:f5:30:ec:12:eb:
97:a3:d1:39:76:99:96:46:92:d0:cc:dc:8f:93:7d:a0:52:e5:
d4:0e:a2:6d:dc:ed:c1:cf:1e:09:b2:47:43:86:30:40:41:a6:
89:d6:82:2e:90:f4:9c:05:a0:ab:9d:f5:16:34:c4:11:e0:00:
15:93:58:5b:0b:c6:c4:96:95:60:47:34:c7:2c:88:2f:a6:8e:
d1:b7:84:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:29 2025 by rpki-client