Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3c8f60-3131-4a23-b544-ccb67ee1176c/1/I_84ZaBEJdZ6fDIbdhcIMsr9RWg.roa
File: I_84ZaBEJdZ6fDIbdhcIMsr9RWg.roa (raw, json)
Hash identifier: 9BILeIYSY0aOneE4KVPB6Q4mwYm/odOBq5e47iOWU5s=
Subject key identifier: 23:FF:38:65:A0:44:25:D6:7A:7C:32:1B:76:17:08:32:CA:FD:45:68
Certificate issuer: /CN=5c2d7d1849c88b04ef9dd5a2406eb51508e3c3b4
Certificate serial: 0248BE2B
Authority key identifier: 5C:2D:7D:18:49:C8:8B:04:EF:9D:D5:A2:40:6E:B5:15:08:E3:C3:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XC19GEnIiwTvndWiQG61FQjjw7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3c8f60-3131-4a23-b544-ccb67ee1176c/1/I_84ZaBEJdZ6fDIbdhcIMsr9RWg.roa
Signing time: Sat 01 Jan 2022 08:56:39 +0000
ROA not before: Sat 01 Jan 2022 08:56:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209043
IP address blocks: 141.98.209.0/24 maxlen: 24
141.98.210.0/23 maxlen: 24
141.98.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38321707 (0x248be2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c2d7d1849c88b04ef9dd5a2406eb51508e3c3b4
Validity
Not Before: Jan 1 08:56:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23ff3865a04425d67a7c321b76170832cafd4568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cd:9f:fe:35:a6:1e:cc:16:6f:f2:b0:8f:a9:
92:45:c4:dc:c1:fa:fb:54:4a:45:67:b8:b9:b2:e2:
e6:4d:1b:06:9a:8a:34:88:25:99:3b:34:69:5d:2d:
72:0a:0c:c6:34:d1:3e:15:2d:c6:d7:3c:51:2d:7c:
1e:41:e8:19:8a:08:19:4d:bb:7a:81:2c:05:ca:b1:
39:a3:88:5f:bf:9c:13:f5:8f:94:9d:be:75:cd:88:
7e:03:4a:b3:5e:71:4a:6f:10:79:46:98:95:26:8f:
b7:b4:e8:a9:f2:77:08:5d:59:fb:8c:0f:12:38:0f:
92:2f:49:54:0e:09:b9:f0:92:e4:da:e4:f6:17:6e:
2b:2c:43:18:58:44:cc:ce:93:ad:e3:72:61:16:94:
a7:b1:db:a8:3a:43:a9:3e:dd:f5:dc:a4:01:0c:7a:
c4:a7:21:3d:94:24:e5:5c:13:42:d8:41:be:45:6d:
04:2b:f0:4c:7c:a5:9b:96:21:b0:0b:7b:0f:02:19:
aa:27:89:5c:46:5d:a9:c9:3f:b0:15:d9:04:cd:aa:
13:72:a6:70:88:ee:a6:39:33:1c:5a:ed:33:e0:b1:
e6:57:0b:24:7e:ab:8c:9b:5f:44:c3:bc:0b:6b:79:
5b:99:85:b3:31:9a:a8:86:38:7e:39:e5:7a:52:e2:
f6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FF:38:65:A0:44:25:D6:7A:7C:32:1B:76:17:08:32:CA:FD:45:68
X509v3 Authority Key Identifier:
keyid:5C:2D:7D:18:49:C8:8B:04:EF:9D:D5:A2:40:6E:B5:15:08:E3:C3:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XC19GEnIiwTvndWiQG61FQjjw7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3c8f60-3131-4a23-b544-ccb67ee1176c/1/I_84ZaBEJdZ6fDIbdhcIMsr9RWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3c8f60-3131-4a23-b544-ccb67ee1176c/1/XC19GEnIiwTvndWiQG61FQjjw7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.209.0-141.98.211.255
Signature Algorithm: sha256WithRSAEncryption
44:2d:33:06:34:35:65:c7:c8:35:66:14:93:7e:e2:da:e1:de:
6f:6d:b6:cd:d1:f1:11:aa:30:e6:fd:01:40:49:45:c0:f3:8d:
e0:5f:7e:d5:66:92:88:ab:34:da:25:7c:5e:c6:f0:76:f4:27:
30:d7:2b:1c:57:e4:fb:e8:d9:bf:00:22:86:e9:c9:40:d1:0b:
4e:55:37:7b:f3:e3:a8:1c:cd:a3:80:08:41:8d:23:79:f5:24:
75:5b:da:20:d3:d8:32:03:85:c0:9d:d8:a4:90:95:66:37:6a:
49:ab:08:4c:c8:a1:e9:f6:48:da:64:9a:06:7f:d5:f0:29:a3:
50:8e:3d:49:1e:c8:7e:93:d2:09:a3:04:0e:45:42:d3:8a:c3:
63:fb:9f:aa:44:f9:96:5c:c6:10:84:cb:6e:69:b0:a5:73:7f:
8f:4f:f6:5a:6a:45:7f:a9:ff:1b:0e:c4:de:17:ca:6e:c1:96:
45:e5:4d:8b:5b:1d:b7:b2:12:a5:2e:6d:b2:59:58:10:3a:79:
65:b8:3f:47:12:68:bd:af:a1:42:fd:29:95:37:96:78:6a:bb:
96:29:bd:6e:59:04:f2:a1:bf:47:27:92:53:bc:2f:fa:10:e8:
e3:3a:fd:0b:51:34:f0:93:9f:9b:3f:f7:ef:36:b3:b9:9b:35:
20:c0:30:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:32:52 2025 by rpki-client