Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/eJpm7vOqN0K6_-N5ZvgNj0bJa14.roa
File: eJpm7vOqN0K6_-N5ZvgNj0bJa14.roa (raw, json)
Hash identifier: ZjNNKQofgKq/YUnavRCCV2cjVOzm2yU0UKdAMKHM4p8=
Subject key identifier: 78:9A:66:EE:F3:AA:37:42:BA:FF:E3:79:66:F8:0D:8F:46:C9:6B:5E
Certificate issuer: /CN=fc8269f42e46441ab1ed994c89f747baa554e320
Certificate serial: 01942143771E78ED6FA6723B7B030353635F
Authority key identifier: FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/eJpm7vOqN0K6_-N5ZvgNj0bJa14.roa
Signing time: Wed 01 Jan 2025 09:47:37 +0000
ROA not before: Wed 01 Jan 2025 09:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209571
IP address blocks: 141.98.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:77:1e:78:ed:6f:a6:72:3b:7b:03:03:53:63:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc8269f42e46441ab1ed994c89f747baa554e320
Validity
Not Before: Jan 1 09:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=789a66eef3aa3742baffe37966f80d8f46c96b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c4:24:d0:53:2f:81:83:0c:d0:40:c8:6c:7c:
7b:d3:3d:04:d5:e7:87:c0:f4:f5:93:62:da:a0:91:
4c:a6:15:21:51:91:f2:8e:2a:14:6b:31:c9:52:8f:
c2:08:ae:cb:50:51:cb:d2:6f:30:19:a2:36:f9:a8:
9e:fa:f9:a8:7b:58:5d:62:ee:1c:ad:d1:7e:44:c5:
bd:06:f6:3d:4b:9d:82:82:c0:f0:53:d8:2b:42:0e:
a2:fc:ec:98:5f:cc:36:75:c2:94:40:3e:02:c0:c2:
d1:fa:a7:76:44:fe:e9:b4:fe:13:24:48:67:e9:ee:
b3:26:b6:9f:6c:a3:e6:23:f9:43:51:5e:c8:29:e0:
f3:78:89:07:c4:88:93:46:a0:60:62:db:25:86:44:
ad:87:1b:d6:7b:78:c5:7e:96:8f:d2:ea:26:d5:0b:
22:9f:df:63:b1:5f:40:c1:06:0b:8a:72:d4:83:8e:
50:12:37:bb:0e:26:d1:95:7f:d2:3e:a8:6e:78:cc:
e3:cc:2e:ef:03:87:54:33:c0:4c:17:04:53:3a:cf:
60:f1:02:7a:36:67:7b:8b:53:69:82:f6:f7:8c:c3:
01:16:01:86:f2:bb:b5:4b:45:54:b4:bf:45:62:36:
a4:be:3e:2c:0e:6b:0b:2d:39:2c:bc:f9:f8:4e:d0:
21:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9A:66:EE:F3:AA:37:42:BA:FF:E3:79:66:F8:0D:8F:46:C9:6B:5E
X509v3 Authority Key Identifier:
keyid:FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/eJpm7vOqN0K6_-N5ZvgNj0bJa14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.224.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:ee:7b:ee:5d:34:d7:28:46:91:e1:de:fe:4a:c2:84:a6:16:
98:6a:b4:d8:cc:88:9d:01:09:35:48:24:ff:4f:64:96:eb:2e:
bb:36:8e:2f:04:fe:fd:33:0d:7c:d5:c7:5b:b2:2f:69:d6:bb:
78:bd:e8:fe:71:41:59:b6:f8:cd:b6:88:48:ac:75:b3:98:02:
5f:46:d3:9e:d5:42:00:40:2f:77:f7:24:0e:b6:1c:a2:3e:c2:
90:a6:31:78:88:4f:08:b3:83:e0:c9:b0:dc:3d:76:e8:b4:81:
75:82:d0:5b:af:b2:c2:26:95:b6:b8:d0:52:61:63:90:a6:fe:
00:e4:1c:33:21:92:26:6d:c5:47:ec:4c:9a:17:e5:2a:4e:2c:
b6:18:85:f0:ac:9e:d2:a2:fd:ff:9d:87:32:da:db:b2:ac:c1:
ab:32:9e:4f:1b:0f:ae:a1:0e:88:94:01:96:61:53:6f:61:3a:
f8:b8:35:66:aa:0c:47:8b:2f:ea:a6:07:56:28:16:8d:e1:0f:
e6:f6:c5:3f:09:b7:60:eb:93:f9:99:3f:1a:51:62:f1:99:4a:
8c:9a:5f:72:84:58:b5:89:f1:63:8e:46:0f:2b:32:9c:e7:42:
0c:b5:62:79:e0:31:5a:81:04:c7:88:88:6a:07:bf:b2:9f:60:
0a:d1:c7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:42 2025 by rpki-client