Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/ISSEb8mvPD7Wb-BO3eMjyBnQD-A.roa
File: ISSEb8mvPD7Wb-BO3eMjyBnQD-A.roa (raw, json)
Hash identifier: dUQ5dbyZRiVT9qvtigPflifhbpzSjWdmMJQhCiRK9yY=
Subject key identifier: 21:24:84:6F:C9:AF:3C:3E:D6:6F:E0:4E:DD:E3:23:C8:19:D0:0F:E0
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019589BB52F4E4A58801D005E113D459132F
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/ISSEb8mvPD7Wb-BO3eMjyBnQD-A.roa
Signing time: Wed 12 Mar 2025 09:41:49 +0000
ROA not before: Wed 12 Mar 2025 09:41:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211955
IP address blocks: 141.105.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:bb:52:f4:e4:a5:88:01:d0:05:e1:13:d4:59:13:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Mar 12 09:41:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2124846fc9af3c3ed66fe04edde323c819d00fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:42:a7:52:fb:a7:a1:fb:83:96:8c:04:12:a7:
d9:59:42:85:24:a6:99:20:48:d0:ac:83:00:ed:00:
a7:20:ec:5f:da:b4:bb:e6:87:a2:b9:c1:0c:39:a0:
d9:45:6b:61:cb:01:10:c9:26:f5:91:99:32:c4:fa:
fb:cc:8f:dc:51:3b:ee:12:5c:25:6f:bd:2f:8e:26:
2a:6f:79:b3:02:df:38:bb:50:a4:38:ab:12:50:64:
a9:9e:88:61:71:10:1c:a8:12:cb:02:da:fc:57:e0:
58:91:98:58:03:b1:ab:ec:39:d3:8b:11:6e:71:2f:
32:d1:5e:50:34:fd:01:e5:8d:a7:13:1f:a1:db:b6:
81:2d:97:c3:e6:f1:4e:ab:ee:f9:47:85:88:9b:d1:
e4:5b:4b:1c:f5:47:bc:92:73:b8:20:d0:2f:df:2d:
19:6a:e9:c7:4a:b0:b4:f2:05:25:aa:0c:01:dd:52:
ce:a7:16:0c:d8:2f:10:f7:82:e9:8d:3c:eb:28:2e:
55:83:49:44:ae:f5:20:72:ed:d7:5b:75:4c:4c:7d:
39:16:22:ce:c6:97:3c:7b:10:98:7b:ca:e6:4a:27:
b5:21:f9:0d:0b:1e:91:ea:4f:9d:81:01:78:19:a3:
85:26:93:ad:16:18:c8:bb:66:c7:ab:07:e0:9e:3c:
45:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:24:84:6F:C9:AF:3C:3E:D6:6F:E0:4E:DD:E3:23:C8:19:D0:0F:E0
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/ISSEb8mvPD7Wb-BO3eMjyBnQD-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.143.0/24
Signature Algorithm: sha256WithRSAEncryption
62:c8:30:4c:88:b4:cc:61:0b:6e:54:e4:05:db:32:c5:1a:30:
10:92:2b:e7:56:ad:e6:47:c3:21:d0:a0:cf:d5:d5:af:76:e8:
c5:a7:d7:e0:bb:7b:fd:46:0b:5b:0e:16:c9:30:f9:47:75:57:
26:03:28:c5:0b:de:76:95:c4:63:84:b5:9c:27:b4:0c:96:a7:
d4:b3:df:9c:1f:9e:7b:60:2a:37:40:c7:55:1d:61:4a:b7:df:
65:86:e9:6d:14:46:33:f4:48:1c:e8:dc:e6:5e:8d:48:1b:67:
67:e7:d5:85:a5:0c:2f:d3:cf:08:7e:61:83:8e:af:8a:e5:d9:
b1:c5:d2:06:6e:6c:a6:e2:04:a6:79:5f:ab:f3:df:82:1f:6f:
1a:bb:b0:cc:b7:1e:41:e6:7a:64:b9:e3:fd:e6:f4:53:34:46:
a2:60:18:94:32:bd:09:fc:3a:aa:0f:f0:ff:1e:da:a1:bb:56:
1a:f8:8e:62:0c:72:b0:90:ce:11:99:55:b8:e4:ee:58:c8:12:
a2:71:21:ab:b8:06:68:ac:26:57:80:e3:cb:73:05:e6:b5:4d:
08:57:e0:81:7f:dd:f0:9b:f9:2e:83:ee:f6:93:fa:4b:bb:f8:
f8:a1:df:63:25:05:cc:8b:67:13:48:c0:38:94:88:6a:9a:fd:
72:67:c5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:17 2025 by rpki-client