Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/vwnatcxNwSZQjN_EAgtCA6gLjGQ.roa
File: vwnatcxNwSZQjN_EAgtCA6gLjGQ.roa (raw, json)
Hash identifier: is+QjkNRgmAAQFm1WLdb+VI9EY3XXeS9tjv/htKBkks=
Subject key identifier: BF:09:DA:B5:CC:4D:C1:26:50:8C:DF:C4:02:0B:42:03:A8:0B:8C:64
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 019425221CA18D1A6A257307E4912E323920
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/vwnatcxNwSZQjN_EAgtCA6gLjGQ.roa
Signing time: Thu 02 Jan 2025 03:49:39 +0000
ROA not before: Thu 02 Jan 2025 03:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56382
IP address blocks: 141.98.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:1c:a1:8d:1a:6a:25:73:07:e4:91:2e:32:39:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Jan 2 03:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf09dab5cc4dc126508cdfc4020b4203a80b8c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e9:00:d4:74:b2:ba:cc:d3:d4:7a:ef:9e:e6:
06:99:dc:3a:98:a7:c2:f5:28:83:93:0e:b7:d9:5a:
d8:8e:e4:c9:ff:79:89:dc:d5:4b:4c:1f:dc:03:6f:
63:5f:d0:1f:5d:cf:7c:60:09:4d:43:3e:a1:79:1d:
87:be:47:2e:1d:0b:b1:d4:c3:53:51:c6:f2:94:dd:
2c:68:b4:93:02:7f:f3:f5:8f:a1:ab:7c:ad:1e:e5:
23:fd:a3:f2:1c:e9:e1:80:6b:07:8e:31:c8:8b:c5:
c6:46:25:eb:7c:61:7b:d5:9d:3a:e0:78:c3:a2:ae:
b6:ce:8d:d9:c3:d2:4f:20:91:48:eb:19:68:2b:00:
28:2e:1f:fc:f5:1c:ba:e2:cc:12:8b:f9:e5:4c:d3:
4d:97:40:a6:8b:88:3a:28:35:6e:28:78:4b:7d:80:
94:c3:56:d6:c3:2c:93:a7:f7:41:9e:86:b3:38:8d:
68:e6:d0:b7:a1:61:29:a3:58:16:33:62:2d:05:b8:
62:f2:6f:11:bb:d0:2a:3b:5a:bd:62:92:84:c8:fd:
27:1c:f6:cf:99:49:2a:69:12:97:75:62:95:9c:3e:
a5:73:d9:36:97:d4:d1:5c:af:47:27:1f:8c:44:a2:
67:5f:05:f5:9b:c3:d2:a9:b6:0e:db:81:35:62:51:
be:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:09:DA:B5:CC:4D:C1:26:50:8C:DF:C4:02:0B:42:03:A8:0B:8C:64
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/vwnatcxNwSZQjN_EAgtCA6gLjGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.139.0/24
Signature Algorithm: sha256WithRSAEncryption
80:89:a2:ce:c4:1f:e2:3a:58:03:c7:10:21:5b:c0:61:02:69:
73:82:a3:a9:9a:d9:85:81:d8:32:51:b8:cb:ae:d5:09:5b:9d:
d2:44:c0:fd:d3:5a:5e:8d:11:68:6d:6c:40:60:82:0b:b6:70:
f1:41:03:36:23:df:ad:4d:fc:66:5f:d2:69:64:7b:f3:bd:8a:
42:0f:0f:bd:66:4d:b5:f3:c5:cf:e8:0a:95:a1:fd:7f:77:29:
ff:e1:c4:9e:49:50:3a:e1:ab:c3:60:6c:a9:f4:a5:c1:4a:ce:
f9:ea:29:2a:36:91:d5:9d:4c:48:08:7f:1d:b2:4f:7a:26:76:
9f:9d:db:5d:36:9e:f3:b5:7a:58:c0:df:0d:c9:83:95:a0:03:
90:2b:22:3e:4b:99:bb:7b:1a:cc:e0:cc:d0:cb:4f:28:29:09:
43:80:00:1f:7f:30:69:31:10:bf:4a:dd:6f:f3:3b:17:3d:af:
32:e2:29:ca:4f:25:2c:a9:74:3b:db:e6:f5:89:5d:14:bd:6e:
51:41:5c:94:1d:6f:68:38:2d:05:26:c1:48:8b:92:80:90:2f:
5b:1c:1a:06:6f:e6:e5:4f:d2:a3:92:99:03:cf:1e:b9:3d:a1:
dc:5c:d9:53:22:e0:67:d6:18:f8:58:b9:a9:64:a5:6f:de:c9:
54:70:6c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:42:42 2025 by rpki-client