Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/vH9p83bA8r9dYZsuaIfEdRcw9EM.roa
File: vH9p83bA8r9dYZsuaIfEdRcw9EM.roa (raw, json)
Hash identifier: 7O5zuSS3P7U9tStUlUfx+jwYOjHZA9/t1N/dhvm8Hxo=
Subject key identifier: BC:7F:69:F3:76:C0:F2:BF:5D:61:9B:2E:68:87:C4:75:17:30:F4:43
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFAB0BB27497E087697E9044FB0DF3A
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/vH9p83bA8r9dYZsuaIfEdRcw9EM.roa
Signing time: Wed 01 Jan 2025 03:48:30 +0000
ROA not before: Wed 01 Jan 2025 03:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210240
IP address blocks: 141.101.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b0:bb:27:49:7e:08:76:97:e9:04:4f:b0:df:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc7f69f376c0f2bf5d619b2e6887c4751730f443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e9:0a:50:12:28:33:ff:4f:5c:19:e6:67:35:
56:6e:59:c9:bf:96:be:76:12:cb:fe:f9:81:95:45:
d5:88:4d:70:fb:d2:49:01:e6:ea:46:81:0c:32:34:
d7:08:88:99:16:2e:84:1a:24:d9:c9:26:6a:63:65:
70:6e:b1:1e:19:b1:a1:d5:e9:8d:13:ff:8d:1b:3f:
2b:13:d5:4b:23:0e:1a:44:63:cb:a0:4f:79:33:e0:
b6:05:e5:fa:32:53:88:67:74:fd:55:44:f5:54:aa:
47:a3:f9:5e:5f:f7:7d:5e:60:f7:f8:cd:cf:43:5d:
d7:3f:41:f3:0a:88:ea:47:a7:a8:c2:a0:b5:8d:6d:
93:a8:3d:9a:31:0b:dc:96:6e:ef:76:a1:00:b8:ca:
b3:fa:2b:34:fc:13:3c:a3:ad:b8:44:a1:5c:d3:ed:
3c:b7:1b:3a:ad:c7:34:6c:d8:22:72:e7:98:53:90:
85:1c:da:99:81:09:a9:95:a5:f4:ca:7f:f5:c9:d5:
17:03:46:b9:a6:42:db:6f:44:23:bb:52:6b:2d:6a:
9d:81:88:83:8d:bc:8c:b1:58:72:e2:c9:e9:9b:ba:
21:d8:ea:0d:d6:4f:8b:9a:78:fa:0f:67:70:ba:e1:
cf:c3:2d:2c:13:5f:87:a5:76:5c:c0:8d:ff:1d:30:
6a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7F:69:F3:76:C0:F2:BF:5D:61:9B:2E:68:87:C4:75:17:30:F4:43
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/vH9p83bA8r9dYZsuaIfEdRcw9EM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.188.0/24
Signature Algorithm: sha256WithRSAEncryption
99:f2:51:80:08:5d:ac:55:d7:90:12:e0:f8:7b:13:ee:63:ce:
37:94:97:ff:03:28:a7:15:19:95:a8:b0:f5:6e:81:1b:9f:50:
43:1d:58:52:15:58:79:ca:d7:9f:59:52:cd:b2:e0:39:53:cb:
41:3b:08:75:35:b7:e8:2d:6a:ce:b6:2b:b9:2e:ab:f0:4c:9c:
16:58:44:6c:54:c7:1e:fd:89:6f:56:f5:62:d7:af:c6:60:6a:
6e:52:f7:52:80:ac:e1:7d:9d:d7:0a:55:0d:0d:8a:d3:74:36:
39:bb:58:6a:bf:7e:c2:08:25:71:d4:70:76:c3:1c:13:70:8e:
8c:0f:6e:cd:ca:55:9e:d7:bc:5b:89:e8:32:25:7c:b4:cc:df:
2f:bd:e0:ec:f0:59:3d:cf:ca:7f:f8:a9:32:25:c9:18:c2:e4:
7a:57:38:38:22:b2:98:b3:15:ee:c5:fc:be:87:9b:84:a5:85:
f3:dd:d0:95:8e:6c:ea:71:16:ad:d9:53:a4:62:18:4e:f9:08:
86:64:f4:21:f3:ca:ab:1c:ff:05:e5:0e:8b:25:b4:75:9c:aa:
3f:d8:a8:30:83:0a:21:e8:94:fd:45:73:34:74:6f:27:83:cb:
28:f5:ff:a6:d8:08:99:11:1d:30:e7:d6:9a:5a:a1:18:66:a1:
9e:a9:e4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:24 2025 by rpki-client