Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/bI5hqVT8m0qS2JmySaAVyieiKDc.roa
File: bI5hqVT8m0qS2JmySaAVyieiKDc.roa (raw, json)
Hash identifier: Ur47592mLsTtDVQWZDc8e3eMtHnqyDHoxs3kpjL/ez4=
Subject key identifier: 6C:8E:61:A9:54:FC:9B:4A:92:D8:99:B2:49:A0:15:CA:27:A2:28:37
Certificate issuer: /CN=af09503fcac01769515a19f2dc2657d92fd350df
Certificate serial: 0194221FD5692C11118DDCC9AC25D1745960
Authority key identifier: AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/bI5hqVT8m0qS2JmySaAVyieiKDc.roa
Signing time: Wed 01 Jan 2025 13:48:19 +0000
ROA not before: Wed 01 Jan 2025 13:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 553
IP address blocks: 141.10.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:d5:69:2c:11:11:8d:dc:c9:ac:25:d1:74:59:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af09503fcac01769515a19f2dc2657d92fd350df
Validity
Not Before: Jan 1 13:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c8e61a954fc9b4a92d899b249a015ca27a22837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:0a:06:5c:86:7e:4f:f6:8a:31:93:15:f8:
b3:6f:c2:f5:47:6c:f7:44:41:71:92:4c:67:8b:f9:
a5:29:48:1d:a1:94:9e:82:ac:2e:e9:b7:14:db:22:
dc:30:dd:f3:e2:c7:d8:ac:d6:1b:64:52:e6:30:12:
5e:8b:8a:64:98:46:40:46:f4:eb:8f:bb:50:2b:af:
25:1b:14:d6:51:f4:0e:78:e2:c6:db:66:ee:e3:3f:
5e:06:a3:69:c0:f5:39:e7:48:0d:28:35:f1:0b:6b:
b5:28:31:98:a9:cb:2d:8f:0d:85:63:71:e4:63:14:
be:a4:91:c8:ac:f3:38:1e:e8:cc:bb:9f:3b:4f:2f:
9b:77:46:ee:78:c1:f6:21:2d:f7:15:99:5c:a1:af:
0c:74:94:de:23:f1:30:4d:a6:86:ab:8e:f6:0d:32:
61:f6:cc:0a:d7:02:7a:ee:d5:7b:6f:95:92:65:6f:
38:ba:7e:3f:2e:6d:8b:3c:9e:9b:35:5c:e2:b1:53:
de:f3:80:d3:c5:14:5d:ac:76:da:92:bd:8d:c1:58:
0d:74:25:59:7e:2b:03:05:41:a8:e4:b8:e2:8f:6f:
aa:d9:70:de:56:5e:26:a3:ea:6f:69:5f:e0:25:69:
46:b0:79:0a:23:42:09:ca:fa:38:d9:cd:ca:17:e4:
b5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8E:61:A9:54:FC:9B:4A:92:D8:99:B2:49:A0:15:CA:27:A2:28:37
X509v3 Authority Key Identifier:
keyid:AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/bI5hqVT8m0qS2JmySaAVyieiKDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.10.0.0/16
Signature Algorithm: sha256WithRSAEncryption
76:ec:7f:31:6a:0d:00:2d:af:de:37:6f:64:7e:13:36:05:2d:
7b:4c:8f:25:02:f4:61:67:92:26:c7:84:73:86:82:f0:ba:eb:
d0:67:75:32:4f:6b:71:e4:d9:0b:74:18:6f:86:31:7e:e3:21:
5e:a6:ff:36:21:b3:93:2e:bf:5a:29:f4:bd:c3:eb:63:63:12:
90:a7:2e:ec:9d:df:c5:ac:9f:3f:2c:ac:af:8d:00:ab:27:72:
28:10:86:69:40:68:10:7d:47:92:25:60:30:63:f7:7f:72:3b:
37:40:6d:75:5e:47:9d:93:8d:16:3b:7d:c7:c2:d4:5c:ee:53:
16:bc:3e:92:3b:08:5f:d4:58:09:1d:4d:63:ff:6e:38:b3:db:
75:74:a2:f1:75:37:0a:1e:ca:7c:e7:a2:16:69:30:eb:74:ef:
79:0e:66:74:ff:1e:e1:c7:bd:8b:87:80:62:ca:f7:82:af:1f:
26:d0:61:09:76:5b:e1:7c:1a:47:17:86:f8:03:99:fb:c0:dd:
4a:dd:17:98:bc:78:33:93:8c:67:39:05:7a:ba:1d:ed:ee:dc:
a0:18:90:73:bc:ca:36:bf:9a:a0:7f:56:ef:27:eb:b2:0a:ca:
40:8a:76:10:e5:6e:26:3d:8a:58:51:b8:10:d5:a7:f2:00:01:
b8:f6:4c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net