Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/i8FpzgugtZcFKDdMebgRZ16RoIg.roa
File: i8FpzgugtZcFKDdMebgRZ16RoIg.roa (raw, json)
Hash identifier: Z0Wnkrs5xvwFBERJB5wvtxVMhqH4ul49O/mmtU48/Ms=
Subject key identifier: 8B:C1:69:CE:0B:A0:B5:97:05:28:37:4C:79:B8:11:67:5E:91:A0:88
Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Certificate serial: 01942748530131373056AE827BF3DA9D70C5
Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/i8FpzgugtZcFKDdMebgRZ16RoIg.roa
Signing time: Thu 02 Jan 2025 13:50:38 +0000
ROA not before: Thu 02 Jan 2025 13:50:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206988
IP address blocks: 141.98.200.0/22 maxlen: 22
141.98.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:53:01:31:37:30:56:ae:82:7b:f3:da:9d:70:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Validity
Not Before: Jan 2 13:50:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bc169ce0ba0b5970528374c79b811675e91a088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:23:3a:1d:1e:db:b9:7f:c6:47:eb:0e:0d:
b9:f3:17:a4:f3:ce:2a:96:4a:75:3e:b3:94:50:6d:
39:b5:2a:c5:20:4b:ef:28:ed:97:87:70:e7:ce:fd:
b0:bd:6e:40:18:89:59:17:66:b0:f9:68:f9:a6:74:
24:33:e7:66:77:4c:9d:b3:7d:d0:07:18:64:e5:f9:
64:8b:95:ab:ff:9d:8b:f3:27:93:85:be:04:23:71:
48:ed:37:de:33:5c:fa:b7:9f:03:1b:aa:6b:01:4d:
3b:e8:2e:11:da:12:4e:01:2b:1a:d5:41:25:ea:aa:
91:54:05:60:07:f8:c6:dc:5b:16:f3:3b:8c:e9:37:
68:22:02:95:a2:48:b3:5a:bd:c1:28:07:8c:0c:38:
60:de:2e:a1:37:b4:41:f5:bc:43:35:62:89:09:58:
25:19:2e:12:cc:5b:71:5f:b7:89:a8:f3:f9:4b:f9:
79:80:e9:57:ca:56:8d:ce:d6:25:44:22:3e:91:d5:
3a:5c:dd:62:dc:52:f6:2e:73:df:f6:4e:b4:5d:65:
74:aa:c5:22:6f:4b:69:0d:39:54:80:85:52:40:f0:
b3:23:95:a7:bb:d0:4f:cd:2f:b4:7b:96:25:d3:80:
04:51:d3:6f:6a:98:9c:4f:76:73:ce:52:44:97:aa:
8e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C1:69:CE:0B:A0:B5:97:05:28:37:4C:79:B8:11:67:5E:91:A0:88
X509v3 Authority Key Identifier:
keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/i8FpzgugtZcFKDdMebgRZ16RoIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.200.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:06:33:85:2a:5d:b0:86:bc:7e:51:db:44:67:86:a2:40:d9:
ae:cf:9f:46:ae:36:ea:29:b6:15:36:c8:b8:52:33:d7:27:9b:
73:95:c1:4c:16:47:ab:93:98:11:7a:ff:77:47:0f:18:a2:17:
e3:2f:61:59:8c:45:3b:3d:f6:7c:74:5b:e8:bc:1a:8d:49:e2:
49:51:f6:c5:43:ea:16:7d:d2:51:15:90:19:13:0d:11:3c:6a:
63:b0:b8:bd:2b:3f:d7:10:62:7c:33:3f:64:38:9a:da:2e:cf:
f6:fc:94:20:b8:f8:96:15:3d:05:7d:8b:f7:5e:b6:da:19:77:
57:12:c7:09:45:51:ea:60:b8:e7:f1:44:50:9c:6e:dd:61:08:
2c:af:4d:3a:2a:ef:55:dd:ce:7c:81:81:d1:80:db:48:ef:ee:
5c:cf:8f:28:5b:0f:c8:6d:e2:89:f0:87:79:6f:b4:51:1f:75:
cd:7c:66:ee:6a:b8:a5:60:f2:c6:33:d5:ab:fb:b4:a3:7a:b3:
0f:92:f0:53:b6:32:79:9f:9c:89:4d:60:a5:99:a5:5c:79:cf:
b4:67:cb:6a:8e:11:ed:d7:9d:5b:e7:6d:8e:22:fc:a7:87:9d:
ef:e9:2a:07:6c:99:98:25:90:fe:44:26:a3:f7:16:58:bd:e9:
da:7b:74:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:27 2025 by rpki-client on console.sobornost.net