Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/i39d_g_1_9oM3E5qn-WFCJuc6cY.roa
File: i39d_g_1_9oM3E5qn-WFCJuc6cY.roa (raw, json)
Hash identifier: 3J8AXusWQrGt85CnVf7tcXl4q37hdR3eK7fR6zkLiJ4=
Subject key identifier: 8B:7F:5D:FE:0F:F5:FF:DA:0C:DC:4E:6A:9F:E5:85:08:9B:9C:E9:C6
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019426D9F7E09424B76FABD5E70A77C9007E
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/i39d_g_1_9oM3E5qn-WFCJuc6cY.roa
Signing time: Thu 02 Jan 2025 11:50:06 +0000
ROA not before: Thu 02 Jan 2025 11:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214379
IP address blocks: 141.105.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f7:e0:94:24:b7:6f:ab:d5:e7:0a:77:c9:00:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jan 2 11:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b7f5dfe0ff5ffda0cdc4e6a9fe585089b9ce9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:38:c2:97:a2:6d:70:37:6c:62:5d:a2:9f:7d:
2c:6a:17:e6:ed:13:95:1b:3a:3b:2a:e5:c9:a5:f4:
03:81:e3:49:ac:32:05:f7:24:45:ec:bc:dc:89:54:
1c:8d:38:92:d8:b9:3a:f5:06:e6:c6:53:96:0a:61:
e2:06:4d:eb:dd:07:68:d0:28:c5:e0:1a:95:82:bc:
ba:a4:b6:0f:63:22:d4:1e:fd:63:3f:ef:cf:f2:d1:
26:5c:02:ef:67:6c:40:e8:74:37:ca:81:e9:8f:e8:
e0:41:52:91:8d:01:4f:b1:de:a8:7e:a1:13:e6:6e:
d8:f1:00:ce:cb:79:20:65:95:fd:46:b4:9d:a9:a5:
73:e9:c0:b5:00:1e:da:c4:17:b2:b0:96:9a:fc:58:
46:c7:50:43:9c:54:47:7d:e6:a2:66:b7:0d:78:b0:
11:a5:5d:d6:28:d7:8f:02:71:c6:a4:e6:a8:3e:62:
c9:26:ad:b5:b6:78:0c:2a:c8:37:c9:a4:73:cc:e3:
fa:b6:be:30:c4:ff:ed:5e:42:8e:b9:72:7f:08:b6:
fa:0a:d1:6e:74:9c:a7:b0:b3:98:0f:19:1e:d6:26:
3c:aa:fd:f8:c3:c4:a7:ee:16:cf:9f:3e:18:bc:1e:
51:dc:b0:86:01:ee:92:3b:53:54:54:07:49:11:9e:
5a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7F:5D:FE:0F:F5:FF:DA:0C:DC:4E:6A:9F:E5:85:08:9B:9C:E9:C6
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/i39d_g_1_9oM3E5qn-WFCJuc6cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.130.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:03:59:66:fb:b8:ea:06:1d:a8:7b:4e:2f:49:45:15:d8:04:
22:e9:20:15:7f:0c:c7:14:27:42:85:84:e9:b4:6a:a1:ab:05:
91:0b:f0:f7:d9:a3:0f:4b:c3:e7:f5:a7:40:6e:a2:17:4b:69:
0b:1f:17:11:07:f9:b0:c2:1e:a6:a2:1c:3b:78:49:48:ec:97:
9b:14:0f:a1:d0:32:48:e6:f6:2a:b6:f6:bc:25:08:63:d9:3f:
c6:5c:e7:27:31:ab:17:ce:ed:02:6a:ff:e6:c6:bf:c3:5b:04:
dc:88:d6:53:2d:1f:de:5c:ae:a1:d2:d5:30:01:89:6e:ff:40:
df:94:00:ef:1c:7e:0e:b5:8a:39:50:b2:96:53:03:93:c6:0e:
33:8f:dd:ce:6c:78:19:f6:98:75:35:a1:b2:4c:31:e0:02:da:
4c:1b:b7:d6:37:41:da:a9:da:e4:19:e7:b3:5e:c2:c5:d0:88:
17:7b:e1:07:cf:06:ee:d5:01:11:b1:11:c8:a7:5d:e3:e7:ac:
d9:90:6e:6c:a3:78:0a:d4:8a:85:ed:8c:f1:f0:26:19:a0:af:
c6:67:2e:91:f5:a9:2b:d5:2b:84:dc:a5:b6:94:1a:fa:2e:b8:
f3:d6:a5:dd:e2:1b:be:bf:43:46:cb:39:92:de:c6:a1:21:55:
e0:d9:9a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:43 2025 by rpki-client