Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/4xpkugJm5O-bLkz-lOvDnuYcKWM.roa
File: 4xpkugJm5O-bLkz-lOvDnuYcKWM.roa (raw, json)
Hash identifier: B9E95wF6v4Ywf48WupY+Ytw5Hk7wJ0SBxO0n9tZoJA0=
Subject key identifier: E3:1A:64:BA:02:66:E4:EF:9B:2E:4C:FE:94:EB:C3:9E:E6:1C:29:63
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 01948872B58B8DC3D76E01C6A4CC4C3D5BF7
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/4xpkugJm5O-bLkz-lOvDnuYcKWM.roa
Signing time: Tue 21 Jan 2025 10:40:06 +0000
ROA not before: Tue 21 Jan 2025 10:40:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 141.105.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:72:b5:8b:8d:c3:d7:6e:01:c6:a4:cc:4c:3d:5b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jan 21 10:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e31a64ba0266e4ef9b2e4cfe94ebc39ee61c2963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b8:cc:ab:02:12:99:b5:ff:3f:4b:56:fe:cb:
17:fd:ad:92:68:36:e2:37:0d:81:cb:2d:ce:14:fd:
a3:17:5f:da:c5:cc:4c:b9:39:8c:bf:67:32:20:0b:
ce:fa:42:a0:7c:bc:22:10:c0:0d:6d:c4:ac:4f:2f:
44:ff:2a:e1:f6:da:54:b3:be:fe:2b:d6:46:7e:06:
54:4a:a5:3d:c5:09:1a:82:51:0d:b0:9b:bf:db:5a:
4c:db:dd:4b:2a:da:a0:c2:3d:c3:3c:b0:31:95:4b:
cc:2e:64:fe:c2:5d:44:87:e2:e1:ff:ec:c7:9e:05:
59:09:81:33:c3:55:26:7a:fc:57:b5:68:50:55:1f:
15:c7:09:d4:de:fe:de:5d:b3:44:22:6c:44:fb:f1:
3e:73:0b:73:69:33:54:c4:f7:47:cc:0c:88:a5:b8:
eb:a5:0e:71:b4:9f:67:87:95:33:87:06:dd:7e:31:
e7:36:af:d4:71:4b:5b:d9:bf:02:bb:ae:01:3f:d3:
63:fd:f6:4e:a1:bd:37:02:ff:ac:52:0d:4e:25:aa:
0d:bb:ad:81:ed:b0:13:91:6b:d0:33:7c:41:b6:24:
f9:a7:c7:b5:5a:0c:4b:f6:b4:c3:50:2c:c9:7b:07:
3f:0b:00:a7:7a:57:ba:ce:1f:2f:36:51:d7:c4:e2:
62:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1A:64:BA:02:66:E4:EF:9B:2E:4C:FE:94:EB:C3:9E:E6:1C:29:63
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/4xpkugJm5O-bLkz-lOvDnuYcKWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.141.0/24
Signature Algorithm: sha256WithRSAEncryption
09:b7:dc:d1:8b:6f:8c:1e:16:7d:ce:bc:20:6d:88:4a:78:61:
8e:4b:5e:84:88:15:ce:5d:f5:75:58:7e:bd:6a:f7:10:67:42:
b8:12:8e:61:04:b0:3a:03:60:a1:4c:e9:d4:02:0a:2f:64:95:
75:21:6a:64:69:68:1a:fc:89:7b:bf:d4:98:d1:9c:6f:f0:83:
d6:68:f9:9c:e0:0d:d6:4f:9d:d1:cc:86:17:07:72:f7:d6:4d:
84:fc:18:ee:65:aa:4d:9a:9d:8d:47:90:16:ec:d9:ad:fb:de:
c3:d1:4d:ae:ea:b1:e5:11:e3:57:71:05:99:48:00:34:90:ca:
e9:2e:d2:3a:4e:14:52:a4:6a:a6:8a:8a:c5:91:71:c7:ef:6a:
13:25:20:a5:31:c7:38:29:d0:1b:33:5b:0f:bb:9b:ac:cc:05:
b9:5c:aa:8d:b8:bf:52:87:2b:86:87:3d:29:7e:6d:4b:34:05:
30:87:93:77:84:3d:11:93:a1:c0:52:9e:0a:e0:30:e6:ff:46:
42:55:67:f3:f0:d7:ba:22:46:07:3c:70:3f:00:df:ef:ba:16:
79:d5:45:1d:ce:e3:e6:0e:a9:28:39:8b:f6:97:c2:8b:03:c2:
79:37:5e:70:a2:f4:2f:60:76:71:6c:66:70:21:71:e1:ba:3c:
63:69:ea:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:48:17 2025 by rpki-client