Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS141968.roa
File: AS141968.roa (raw, json)
Hash identifier: 5AWIPfJvhdwSQU+BUkW0pbKZiWU0hDVG3OQ0r5eCT6E=
Subject key identifier: 26:25:14:B8:4F:26:0A:97:7E:FA:6A:83:45:84:E6:4B:84:B5:A7:4F
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 6CEB0A71E6B162E4967610CC70E3C412CAFF596B
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS141968.roa
Signing time: Sun 19 Jan 2025 13:38:37 +0000
ROA not before: Sun 19 Jan 2025 13:33:37 +0000
ROA not after: Sun 18 Jan 2026 13:38:37 +0000
asID: 141968
IP address blocks: 141.11.25.0/24 maxlen: 24
141.11.160.0/24 maxlen: 24
141.11.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:eb:0a:71:e6:b1:62:e4:96:76:10:cc:70:e3:c4:12:ca:ff:59:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jan 19 13:33:37 2025 GMT
Not After : Jan 18 13:38:37 2026 GMT
Subject: CN=262514B84F260A977EFA6A834584E64B84B5A74F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a2:0b:c2:5d:26:58:3d:f8:22:9c:97:b5:70:
33:54:74:a9:59:88:16:80:64:de:e3:0c:9d:ff:df:
20:fd:61:0c:2f:86:81:80:6c:c9:80:da:13:20:83:
72:72:fd:a5:b9:5b:de:8e:b8:2c:a5:da:c2:6b:77:
50:92:6a:51:34:c2:7f:fe:73:6d:df:92:46:7e:4d:
c9:29:23:0a:38:26:c4:bf:d1:64:c7:b8:d1:bc:56:
23:8a:4c:57:35:a6:8f:9e:e0:f5:ba:f9:20:99:a5:
04:11:80:e6:2e:94:52:bc:c5:cf:e8:d8:d1:e8:49:
b1:e6:eb:02:e8:cb:2c:fc:1f:9b:f4:aa:9b:e6:20:
de:b3:fa:ba:57:e3:18:d9:fe:4f:43:a5:9e:e1:25:
2a:b4:2c:6b:fd:66:51:43:56:d8:6b:e4:da:71:15:
50:2e:5f:bd:39:1c:d5:4a:e2:52:cb:7a:2d:14:63:
f2:e8:dd:33:ff:48:d5:6f:29:2d:c5:ee:82:80:d4:
8d:42:db:d2:7c:8c:47:eb:95:ce:f2:a5:57:da:98:
ef:5f:46:fa:b3:ea:67:12:2d:d1:4f:87:81:21:a4:
14:bd:27:a6:e8:7c:85:81:7c:6d:a8:6f:eb:65:00:
51:01:e0:c9:ce:49:0f:ef:32:36:54:0b:d7:3f:f6:
f8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:25:14:B8:4F:26:0A:97:7E:FA:6A:83:45:84:E6:4B:84:B5:A7:4F
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS141968.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.25.0/24
141.11.160.0/24
141.11.190.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:2f:0c:3a:74:f6:58:2e:a7:e5:76:4e:66:c4:9a:8b:c0:e5:
c7:ca:4c:de:4e:7b:b3:cf:31:c2:14:85:35:74:fd:3d:4e:61:
0d:6f:1a:75:fa:95:78:b1:ad:b3:b7:d5:cd:68:65:c5:3e:2d:
7f:d9:e2:9f:b4:cd:20:56:51:df:14:77:2b:f0:25:72:bc:70:
21:ea:f7:14:ad:a6:42:e1:42:6c:94:1e:b6:c8:88:5a:b7:0f:
b4:67:f9:ce:72:38:8a:3d:98:fa:0e:8d:28:ba:22:3a:a4:90:
66:b5:07:ac:00:41:d5:8e:98:88:5b:8e:91:b8:bf:ab:24:f9:
22:e0:e6:09:5d:31:c9:bd:4c:2a:12:23:99:31:99:27:cd:37:
4b:45:bc:7c:b9:05:01:3c:64:d0:77:b8:7d:2c:b9:e5:ff:12:
ae:b3:6f:3a:61:a1:c6:4e:8f:f0:c1:27:c8:a5:da:99:09:31:
45:83:38:91:ed:31:40:a7:0e:7e:20:3a:e7:20:78:16:13:1b:
2f:5d:ca:28:83:c7:f3:b8:c5:42:7b:f9:94:97:78:e3:62:c2:
ed:da:de:ed:3e:0c:9d:b5:79:cd:4a:6d:6e:41:7d:19:0b:b7:
27:f1:f5:10:7a:f8:2a:2b:b3:15:f2:bc:f1:3e:ed:2d:ff:93:
65:eb:b7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:37 2025 by rpki-client