Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7b480b-b28d-419f-9d40-4306dd7a4a57/1/NeLz8jsLQo2ptESckuWFqMeTXAw.roa
File: NeLz8jsLQo2ptESckuWFqMeTXAw.roa (raw, json)
Hash identifier: DGxNeL8CpDOcXI7lz/35ILBuc9oLCKArDs3d5jZS+GI=
Subject key identifier: 35:E2:F3:F2:3B:0B:42:8D:A9:B4:44:9C:92:E5:85:A8:C7:93:5C:0C
Certificate issuer: /CN=b7ae676ffc66234f33db5238798ab979f986c82d
Certificate serial: 0185BA00F085BB61C481FE8BC67053955027
Authority key identifier: B7:AE:67:6F:FC:66:23:4F:33:DB:52:38:79:8A:B9:79:F9:86:C8:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t65nb_xmI08z21I4eYq5efmGyC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7b480b-b28d-419f-9d40-4306dd7a4a57/1/NeLz8jsLQo2ptESckuWFqMeTXAw.roa
Signing time: Mon 16 Jan 2023 09:55:01 +0000
ROA not before: Mon 16 Jan 2023 09:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31214
IP address blocks: 141.98.28.0/22 maxlen: 22
141.98.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ba:00:f0:85:bb:61:c4:81:fe:8b:c6:70:53:95:50:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ae676ffc66234f33db5238798ab979f986c82d
Validity
Not Before: Jan 16 09:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35e2f3f23b0b428da9b4449c92e585a8c7935c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bc:52:16:59:c2:21:3f:c5:a8:cf:71:f2:0f:
55:69:f1:28:99:a0:34:e8:7f:97:4a:2c:2b:79:df:
49:7a:25:e4:4b:ed:65:41:11:9d:3d:af:55:47:d8:
fc:fa:fb:07:5b:80:66:9d:a8:8d:8b:59:4e:62:af:
17:a6:96:09:c0:2f:e1:a0:9c:78:76:a3:30:56:0d:
a5:ee:5d:fb:70:5a:f6:61:77:51:2f:ad:0b:87:b3:
c8:c2:1c:98:d5:6d:b6:fc:ef:10:72:5c:0d:cf:7e:
99:2f:03:70:43:4b:3c:d6:ce:4d:a5:15:e3:53:62:
a5:69:3a:6c:5f:36:0d:d3:9c:aa:f1:75:9b:b3:08:
f6:cd:12:05:fa:f1:19:70:a1:9a:10:4f:b9:48:a5:
0a:8d:08:97:2b:a1:18:39:5c:b8:a3:fd:c9:2c:e6:
32:6e:e4:a8:4d:4a:93:6e:5b:8f:0a:9b:23:59:38:
1f:ce:0b:c4:49:bc:f9:8d:98:1f:aa:e7:0e:fd:50:
6d:db:ee:08:7d:4e:55:28:30:41:d2:60:c1:36:cb:
34:e4:26:de:3c:b3:79:a2:f1:12:4d:85:bd:21:99:
9f:5f:c0:62:6b:3c:a6:d2:92:24:9e:57:72:c9:ea:
b9:bd:30:38:f2:3d:c3:98:70:ae:53:bb:13:1b:5a:
eb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E2:F3:F2:3B:0B:42:8D:A9:B4:44:9C:92:E5:85:A8:C7:93:5C:0C
X509v3 Authority Key Identifier:
keyid:B7:AE:67:6F:FC:66:23:4F:33:DB:52:38:79:8A:B9:79:F9:86:C8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t65nb_xmI08z21I4eYq5efmGyC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b480b-b28d-419f-9d40-4306dd7a4a57/1/NeLz8jsLQo2ptESckuWFqMeTXAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b480b-b28d-419f-9d40-4306dd7a4a57/1/t65nb_xmI08z21I4eYq5efmGyC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.28.0/22
Signature Algorithm: sha256WithRSAEncryption
75:d0:86:7f:54:81:f2:26:4d:9d:d3:34:7c:14:ca:c7:af:0a:
64:68:65:bf:ab:c4:21:f0:54:54:41:10:c1:39:bd:70:a0:9a:
a0:92:26:bc:02:a0:06:33:85:cc:d2:9e:b9:e6:93:34:45:7b:
e7:ac:fe:fa:7f:d1:71:48:ad:3d:5a:97:c7:5e:5a:b6:55:7a:
c5:d7:fc:58:10:0d:9d:0c:a9:39:b7:c3:ea:8a:b0:ff:91:21:
30:11:75:cf:a7:e7:af:ad:af:e4:05:05:26:ac:1c:2f:9b:ac:
b0:78:8d:0a:09:cb:78:b7:6b:74:ea:38:fc:a9:78:14:aa:a9:
c0:3b:3d:35:c8:9f:d0:77:be:6b:56:5d:2a:18:9c:ff:38:7e:
ea:77:41:6b:80:35:3a:05:05:8a:12:f2:82:22:79:e9:62:7f:
91:d1:c5:33:f9:5e:32:cb:61:75:08:81:19:3d:33:85:15:f0:
d3:8b:b4:a2:3e:3a:88:19:ee:2e:57:41:69:ea:e3:9e:e5:c7:
97:93:18:e1:7c:37:41:72:85:18:85:8c:c6:02:2d:6a:25:55:
a1:fa:e3:c6:a4:53:4e:8c:60:42:7e:38:ee:40:25:71:38:7c:
33:9b:0c:0d:15:eb:43:1f:85:44:b8:b9:96:39:d1:97:9d:ae:
73:c3:73:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:26 2025 by rpki-client