Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/F5bEV22fIQzMh4vbXFO9GwRvUDg.roa
File: F5bEV22fIQzMh4vbXFO9GwRvUDg.roa (raw, json)
Hash identifier: bOreFMJawxDKiBv4OdGAPfhLMvPU3WIRMMwqveMYnZ0=
Subject key identifier: 17:96:C4:57:6D:9F:21:0C:CC:87:8B:DB:5C:53:BD:1B:04:6F:50:38
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFA8D9A1EE5B9490CF9E57A78B4770C
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/F5bEV22fIQzMh4vbXFO9GwRvUDg.roa
Signing time: Wed 01 Jan 2025 03:48:21 +0000
ROA not before: Wed 01 Jan 2025 03:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3216
IP address blocks: 141.101.217.0/24 maxlen: 24
141.101.218.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:8d:9a:1e:e5:b9:49:0c:f9:e5:7a:78:b4:77:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1796c4576d9f210ccc878bdb5c53bd1b046f5038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8f:c7:37:46:9b:fe:07:a2:87:f7:b4:0d:15:
fa:9c:fa:5d:1c:15:05:81:ad:85:01:1b:b9:82:56:
c8:ee:3d:15:40:05:00:a7:3d:92:65:46:82:14:a2:
a0:88:3b:a9:b0:95:5b:ce:83:d8:bd:f3:83:7a:f0:
86:32:9e:eb:00:34:7d:2c:c0:f1:60:74:94:cd:83:
a8:a3:48:92:d4:ca:3f:68:34:c9:73:a3:3d:0b:54:
35:f7:0f:3a:58:88:06:80:c7:d1:7f:b8:3a:d9:5a:
21:26:3a:93:fa:38:90:c3:92:e5:b6:e4:13:71:16:
1e:fa:4d:81:bc:79:82:90:8b:c2:46:a7:25:1b:c6:
e4:21:2f:1e:89:c7:1e:b1:2d:96:58:f1:76:94:5c:
04:31:91:25:34:82:88:23:df:5c:48:07:da:ce:32:
83:9e:8f:23:a0:c5:cd:42:3e:2e:c7:ef:e8:cd:65:
d9:48:18:95:7e:48:15:f0:bc:80:71:31:76:56:63:
af:cd:30:62:4c:8a:fc:8d:5e:63:db:f8:a7:42:12:
33:4d:77:30:39:01:d4:02:7a:ab:ac:63:91:e6:22:
81:d3:2d:21:25:d9:8f:0d:2d:ee:5d:cb:9c:6e:97:
16:0b:7a:cf:50:c0:5d:fd:5e:e0:a7:6d:20:5d:8b:
99:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:96:C4:57:6D:9F:21:0C:CC:87:8B:DB:5C:53:BD:1B:04:6F:50:38
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/F5bEV22fIQzMh4vbXFO9GwRvUDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.217.0-141.101.219.255
Signature Algorithm: sha256WithRSAEncryption
c9:dd:63:f4:2d:4e:7e:e5:55:5b:ab:33:01:02:17:24:51:cf:
a2:0f:12:c7:b7:e8:49:84:66:73:6e:0e:af:3a:db:66:e0:0d:
34:fe:e8:55:2a:4d:41:42:6e:e1:98:7a:fb:ae:9c:dd:65:a9:
a2:a5:2b:fe:fb:60:1c:cd:28:dc:de:33:98:f0:be:dd:c2:5a:
9a:79:70:b8:98:08:b3:bc:da:0f:ef:0f:b3:d6:e0:2c:ea:a9:
b5:15:bc:b4:30:11:0b:df:f3:4f:ec:c6:5a:04:38:ff:f6:e1:
e3:46:7a:53:99:b5:4e:c0:89:40:a9:b0:2e:b9:d0:ef:f3:c5:
e5:14:de:31:ef:5b:b7:b7:c5:6f:d5:0f:86:8f:df:82:ce:d9:
ac:96:e3:76:6f:c7:d6:3c:21:c5:8c:dd:e8:fc:ee:47:50:5c:
bc:77:f0:bb:01:59:7c:ce:fe:a4:cf:27:53:e4:19:2d:8e:6b:
85:dd:aa:9b:02:90:9b:c1:60:97:15:25:89:65:b7:49:11:d3:
8e:31:d4:c2:b3:4f:23:fe:ae:34:a4:ac:63:e1:d6:03:a2:38:
3d:45:e5:78:70:48:c9:be:cf:26:af:05:d5:d9:d5:45:9a:aa:
9a:cd:d3:11:fd:16:f1:68:bd:08:a3:91:87:db:ec:64:80:83:
dd:17:e2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:31 2025 by rpki-client