Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/pWU-5Vr1bmLtNrHSCFEgxt5kcPg.roa
File: pWU-5Vr1bmLtNrHSCFEgxt5kcPg.roa (raw, json)
Hash identifier: 1Lo1/H6F5Tr+0ZNCEA8V2Q5UNypPgusKselyNIFofdE=
Subject key identifier: A5:65:3E:E5:5A:F5:6E:62:ED:36:B1:D2:08:51:20:C6:DE:64:70:F8
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 0186FE585693FF4FC72AD51CFFE6FADD0C95
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/pWU-5Vr1bmLtNrHSCFEgxt5kcPg.roa
Signing time: Mon 20 Mar 2023 09:27:27 +0000
ROA not before: Mon 20 Mar 2023 09:27:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199393
IP address blocks: 141.226.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fe:58:56:93:ff:4f:c7:2a:d5:1c:ff:e6:fa:dd:0c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Mar 20 09:27:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5653ee55af56e62ed36b1d2085120c6de6470f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f8:3a:2d:23:12:5a:a6:76:a1:21:27:66:40:
cb:6a:00:89:bd:3a:8b:d7:8d:c8:e1:9e:53:4d:e3:
7b:d7:15:41:09:2e:73:2e:cd:ce:28:53:a6:00:85:
6e:74:6c:e4:47:af:cd:63:35:6e:9e:4d:d9:f2:5a:
6a:28:63:f1:b1:f0:aa:72:b3:e0:ad:96:fb:79:27:
e5:d5:7f:33:db:4b:ae:51:99:9c:c2:a8:85:2e:16:
b9:4d:f3:48:8c:32:11:80:3f:bc:32:66:5c:7f:6a:
13:12:11:6c:42:03:97:a5:38:6a:97:90:4b:90:35:
e6:35:a8:7f:5d:61:e7:0e:bb:57:7c:95:7d:2e:3b:
9a:d6:df:6d:80:b7:09:bf:b6:58:42:ff:2d:36:4b:
46:5e:31:d8:a7:d8:73:dc:94:c4:c2:a7:0a:a2:36:
ae:de:b9:0b:68:95:b9:41:ae:f2:81:b1:32:b7:4b:
43:10:f0:7e:0c:b6:f7:ba:23:88:aa:39:07:05:e8:
1c:62:72:e6:e2:56:0a:fe:92:f7:92:06:0e:17:85:
3a:5c:35:cc:f6:b2:04:9c:e4:40:5f:94:1d:e6:30:
9a:06:15:2d:4f:be:85:73:38:53:29:28:53:1b:54:
89:9c:43:cc:19:00:e0:d3:cf:98:45:ba:29:6c:c0:
94:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:65:3E:E5:5A:F5:6E:62:ED:36:B1:D2:08:51:20:C6:DE:64:70:F8
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/pWU-5Vr1bmLtNrHSCFEgxt5kcPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.242.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:ce:cd:5f:4d:02:61:0d:c9:28:0b:1c:ac:33:5f:7a:0d:74:
cc:b7:3c:8e:b4:9c:5f:07:13:83:5b:e8:a3:22:1b:73:41:81:
24:7c:b3:64:ae:8e:82:5e:ba:c7:4b:e7:94:ed:11:22:a3:29:
03:8a:87:80:af:af:0c:e6:d6:88:74:46:2c:23:4a:c9:c1:f0:
ce:9b:2e:9f:3a:09:3a:30:b4:5b:fc:6a:43:7d:cd:a9:40:c0:
3a:cc:66:05:af:73:c8:90:23:5f:06:85:52:ed:f1:1d:8b:60:
18:24:e4:09:af:4c:e3:e4:c6:55:20:da:aa:93:d8:2d:8b:79:
3d:4e:56:85:3d:06:95:50:b2:bd:ee:9e:ac:29:26:64:c1:37:
32:97:8d:3b:0f:49:7a:65:45:14:c6:4a:0e:a1:36:96:ca:f7:
48:89:9c:92:5e:c8:1f:c1:5d:f7:36:1d:14:58:08:6a:7e:80:
85:cb:3d:12:84:45:b5:81:3f:c4:1b:65:41:87:21:ee:e6:f4:
0c:73:fb:54:da:1a:44:9d:c2:3f:f3:40:e1:a5:0f:e8:97:38:
6e:ed:3c:2e:b4:60:69:89:5d:ae:4c:db:d5:6f:54:b8:d4:b8:
23:a3:4a:6f:53:d4:39:a3:0f:0f:5a:5b:90:a5:23:ca:80:40:
8a:6c:32:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYb+WFaT/0/HKtUc/+b63QyVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3
ZWVmNDAwHhcNMjMwMzIwMDkyNzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTY1M2VlNTVhZjU2ZTYyZWQzNmIxZDIwODUxMjBjNmRlNjQ3MGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPg6LSMSWqZ2oSEnZkDLagCJvTqL
143I4Z5TTeN71xVBCS5zLs3OKFOmAIVudGzkR6/NYzVunk3Z8lpqKGPxsfCqcrPg
rZb7eSfl1X8z20uuUZmcwqiFLha5TfNIjDIRgD+8MmZcf2oTEhFsQgOXpThql5BL
kDXmNah/XWHnDrtXfJV9Ljua1t9tgLcJv7ZYQv8tNktGXjHYp9hz3JTEwqcKojau
3rkLaJW5Qa7ygbEyt0tDEPB+DLb3uiOIqjkHBegcYnLm4lYK/pL3kgYOF4U6XDXM
9rIEnORAX5Qd5jCaBhUtT76FczhTKShTG1SJnEPMGQDg08+YRbopbMCU7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKVlPuVa9W5i7Tax0ghRIMbeZHD4MB8GA1UdIwQY
MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt
YmM2ZGI3MjQ4YWRkLzEvcFdVLTVWcjFibUx0TnJIU0NGRWd4dDVrY1BnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk
LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjeLyMA0G
CSqGSIb3DQEBCwUAA4IBAQCmzs1fTQJhDckoCxysM196DXTMtzyOtJxfBxODW+ij
IhtzQYEkfLNkro6CXrrHS+eU7REioykDioeAr68M5taIdEYsI0rJwfDOmy6fOgk6
MLRb/GpDfc2pQMA6zGYFr3PIkCNfBoVS7fEdi2AYJOQJr0zj5MZVINqqk9gti3k9
TlaFPQaVULK97p6sKSZkwTcyl407D0l6ZUUUxkoOoTaWyvdIiZySXsgfwV33Nh0U
WAhqfoCFyz0ShEW1gT/EG2VBhyHu5vQMc/tU2hpEncI/80DhpQ/olzhu7TwutGBp
iV2uTNvVb1S41Lgjo0pvU9Q5ow8PWluQpSPKgECKbDLo
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:03 2025 by rpki-client