Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/l7vPco-uERFJMqFRkAMdbQ7Lr5E.roa
File: l7vPco-uERFJMqFRkAMdbQ7Lr5E.roa (raw, json)
Hash identifier: TO5lGNkolgRHajeHI2wA6DsrdU/+GUsTcjWvGuJo2do=
Subject key identifier: 97:BB:CF:72:8F:AE:11:11:49:32:A1:51:90:03:1D:6D:0E:CB:AF:91
Certificate issuer: /CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Certificate serial: 019421B23D5E7622464A599B5FCAE4ADE017
Authority key identifier: D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/l7vPco-uERFJMqFRkAMdbQ7Lr5E.roa
Signing time: Wed 01 Jan 2025 11:48:36 +0000
ROA not before: Wed 01 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8559
IP address blocks: 141.98.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3d:5e:76:22:46:4a:59:9b:5f:ca:e4:ad:e0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97bbcf728fae11114932a15190031d6d0ecbaf91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:52:f3:22:b4:ec:f5:fa:f5:90:89:51:77:
d1:fb:97:72:66:97:9e:92:99:b5:50:8a:24:dc:42:
9b:72:be:f3:55:5e:00:75:85:37:8f:de:dd:aa:71:
65:b7:66:0d:7a:d7:f1:db:7f:d6:6d:f8:a2:b1:22:
bc:fa:14:b9:f4:0e:6e:f3:32:a6:69:2a:1b:34:e6:
23:5d:39:67:4c:e0:5d:14:c4:f4:0d:cd:0e:01:51:
9b:8c:8e:1c:b0:96:0e:b7:c7:a8:62:8d:8e:71:50:
4d:a4:41:37:17:54:09:d6:fc:d6:0e:da:0f:fa:2d:
5f:ab:5d:57:63:ae:28:fd:90:d8:54:08:d9:3c:64:
87:1e:c9:34:60:6f:fc:89:b8:cc:1b:e7:89:5d:6f:
ba:21:42:9f:88:4c:06:c1:04:da:d8:90:11:82:bd:
00:d9:fe:e7:23:6e:ba:45:05:d4:92:e8:c2:1d:31:
a4:48:1b:b3:1a:39:c6:5c:94:2a:20:d3:e1:3f:68:
cf:ea:30:97:46:30:ee:c1:77:ac:1a:74:82:44:96:
6e:0e:9e:c3:1a:a4:b2:90:87:bb:2a:f5:67:fa:0b:
8b:cb:66:c4:28:32:4f:48:9b:e8:db:2b:9c:eb:7c:
3f:26:fb:80:25:d3:e9:a1:2f:b2:60:23:eb:aa:c1:
e0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BB:CF:72:8F:AE:11:11:49:32:A1:51:90:03:1D:6D:0E:CB:AF:91
X509v3 Authority Key Identifier:
keyid:D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/l7vPco-uERFJMqFRkAMdbQ7Lr5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.176.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:8e:da:03:6d:c3:d9:77:86:47:48:f0:d4:c9:f2:f1:5d:5b:
f7:8e:6b:1d:c4:20:f8:ea:f0:25:63:ef:35:14:74:59:da:46:
b1:7f:29:59:92:1b:89:52:fe:61:31:39:a5:1d:67:17:c3:fa:
83:21:ae:3f:26:c9:4b:ee:2e:25:8c:9d:67:c0:34:47:fb:8c:
e8:ea:ea:f8:d8:37:40:2e:22:51:29:87:37:1b:44:aa:a6:4f:
21:93:7a:10:91:8d:ec:ee:f3:30:49:0c:52:b6:75:3d:43:8e:
03:9b:43:97:4f:c3:a2:a7:68:3b:eb:3b:09:63:f0:b8:4e:fe:
64:62:4b:b0:d1:88:b4:7f:ce:ee:f6:a5:83:07:a1:e0:71:fe:
eb:b5:2c:c1:cb:4c:21:38:9b:2a:d2:ac:62:56:e4:34:c5:a1:
89:2a:92:d4:b4:45:45:32:0a:11:4c:4c:5f:3e:b6:83:91:40:
81:e7:d9:f5:6e:90:d5:ed:f5:88:63:17:53:09:ba:f3:e2:96:
ac:c2:6b:58:d3:85:a8:7b:6f:a9:c7:ee:cd:17:61:39:9a:20:
05:90:65:ea:33:b0:cd:ac:e0:e3:42:ee:71:85:da:e3:20:e9:
cd:fe:e2:ee:86:5a:53:be:ad:1f:8c:e9:15:bb:14:92:60:64:
fb:ab:b7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:48 2025 by rpki-client on console.sobornost.net