Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/hFAl1HVJl_9l3iGKDXy7Q3YLL-4.roa
File: hFAl1HVJl_9l3iGKDXy7Q3YLL-4.roa (raw, json)
Hash identifier: t3lebss2cDykApymCPDX/VFxLKKQQSAwSa+9uLLWAvg=
Subject key identifier: 84:50:25:D4:75:49:97:FF:65:DE:21:8A:0D:7C:BB:43:76:0B:2F:EE
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 019425221EA242BE459B50CE69D647577EEF
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/hFAl1HVJl_9l3iGKDXy7Q3YLL-4.roa
Signing time: Thu 02 Jan 2025 03:49:40 +0000
ROA not before: Thu 02 Jan 2025 03:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212567
IP address blocks: 141.98.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:1e:a2:42:be:45:9b:50:ce:69:d6:47:57:7e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Jan 2 03:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=845025d4754997ff65de218a0d7cbb43760b2fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:5f:82:b4:d0:af:69:9b:77:66:40:b1:e9:
d6:a7:32:49:4a:f6:d8:8d:5f:78:93:bb:6d:fd:fe:
5c:4e:db:96:13:9a:0c:7d:f6:79:8a:4a:e8:95:0c:
84:18:b8:f9:ba:b3:ca:15:aa:05:6d:25:71:44:fc:
dd:78:fa:99:e9:e4:45:d9:50:33:4c:07:72:a6:9c:
5b:57:ab:1d:09:ad:e4:b9:45:08:4c:07:c5:d8:d6:
d9:db:e8:4d:1c:e2:8c:6b:e9:12:a5:e7:09:94:d4:
e4:aa:84:6c:1a:d1:5e:57:e7:fc:f9:f2:6f:70:1e:
07:ff:b6:f3:46:b6:ed:1c:e3:57:e2:93:0d:7b:30:
81:63:ef:0a:59:18:5a:ae:d7:49:a0:50:3d:bb:6d:
22:b4:70:73:16:61:4b:8f:e7:82:c8:a9:4b:15:bd:
1e:be:e9:73:dd:a1:ea:85:d9:ff:83:25:dd:78:d8:
e1:04:63:e4:5d:4e:01:e4:7d:42:7e:bd:26:d1:f0:
0b:d8:63:d4:b8:b5:c8:95:f9:61:b2:2d:cb:d7:b1:
08:09:02:85:eb:c7:72:b1:19:ab:b0:27:6f:4f:84:
f7:0e:99:d5:6e:53:52:82:42:83:25:07:8a:ab:4a:
31:dd:d3:b9:77:b3:75:0e:58:fa:cf:d9:6a:fa:ab:
1f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:50:25:D4:75:49:97:FF:65:DE:21:8A:0D:7C:BB:43:76:0B:2F:EE
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/hFAl1HVJl_9l3iGKDXy7Q3YLL-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.138.0/24
Signature Algorithm: sha256WithRSAEncryption
01:33:59:45:99:28:4f:04:34:cb:4e:ac:62:1a:33:3e:4f:28:
44:29:fa:f4:33:ca:4e:0c:4b:a5:3b:b1:2d:fa:75:37:1e:a1:
80:fc:d1:00:c8:8b:1a:44:30:a7:68:ac:f0:66:f9:a6:9e:5c:
84:6f:05:f1:88:89:9e:8b:9d:a0:9f:32:ff:81:3f:70:b8:6a:
fb:2c:47:3f:b5:f0:c6:34:ae:37:ec:4c:34:87:16:fb:9f:49:
b5:db:97:ad:86:93:de:a4:c5:9f:d9:1f:1a:56:ab:ac:31:92:
42:d7:fc:56:74:a3:5c:91:a3:a2:c0:3b:0e:fc:3b:70:61:e4:
65:49:b4:b7:ed:5b:17:9b:9e:47:a0:a2:71:d2:b8:d7:8c:02:
0b:b0:f2:8e:8e:d5:88:3e:0e:df:72:8b:75:42:c8:0a:69:09:
31:55:6b:71:cd:07:67:90:9e:b8:ff:64:5f:dd:6b:3b:e0:39:
d2:c7:82:69:1d:9f:84:92:e3:48:51:50:8b:e8:1d:f7:ac:01:
59:d5:ae:1a:20:2a:93:b2:c6:8c:db:7f:ea:25:f6:f6:4b:e9:
eb:cb:a4:a7:8a:ab:39:9b:02:57:fa:02:0e:4e:73:15:93:40:
23:58:b0:b2:f7:40:b5:4a:fa:a3:75:f0:86:2a:df:5a:d6:f0:
74:d7:29:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:55:29 2025 by rpki-client