Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/nz7DHWf8ErlnwVLWkkZ8MRDaxPE.roa
File: nz7DHWf8ErlnwVLWkkZ8MRDaxPE.roa (raw, json)
Hash identifier: D+My2nU4/207q+bSXiU/1ySBNNXmXuqCbPX2cA+T6Mw=
Subject key identifier: 9F:3E:C3:1D:67:FC:12:B9:67:C1:52:D6:92:46:7C:31:10:DA:C4:F1
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 0191A9FD1B5B45D9C08505DDE0D684CB8511
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/nz7DHWf8ErlnwVLWkkZ8MRDaxPE.roa
Signing time: Sat 31 Aug 2024 19:50:22 +0000
ROA not before: Sat 31 Aug 2024 19:50:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199393
IP address blocks: 141.226.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a9:fd:1b:5b:45:d9:c0:85:05:dd:e0:d6:84:cb:85:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Aug 31 19:50:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f3ec31d67fc12b967c152d692467c3110dac4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ed:ef:7c:d4:21:83:8f:e0:8a:10:82:57:0c:
35:fc:39:d4:71:6b:98:f4:1c:d2:6c:2c:20:6f:0f:
9f:a3:cd:75:ea:60:cb:65:76:32:f6:a5:67:80:07:
e9:53:5d:3e:da:e2:95:0a:63:6b:c0:a9:e4:c7:5d:
14:0e:b3:0f:ff:c9:d5:65:9d:9f:cd:3a:99:de:e4:
fd:d8:70:ad:cb:0f:0b:ea:78:6d:88:fe:69:15:3e:
f4:aa:ac:5f:9a:a3:db:19:d8:8e:ab:a7:20:b9:e3:
8c:47:a1:bb:bc:88:67:0a:58:fd:8d:b2:79:cb:41:
a6:85:84:25:63:2b:33:e0:0e:5c:6d:0d:65:76:22:
da:28:fd:86:db:7c:15:cc:b3:b1:5a:50:3b:87:3a:
45:6e:9a:f0:78:d2:e6:51:67:37:e7:ff:57:c4:9e:
e1:d1:2e:62:78:19:4b:79:61:6a:76:26:59:ba:dd:
91:d0:3d:8f:4c:5d:9a:ae:34:15:53:09:63:b7:25:
d1:75:35:1a:75:b7:36:9a:57:dd:11:7b:6c:b5:b5:
c1:7c:ff:08:d3:c6:85:1b:c7:0b:fd:08:b9:91:26:
30:a3:0a:cd:29:8b:d4:95:c4:ff:8a:2d:93:48:11:
7b:b0:88:5b:d5:97:cf:22:71:5d:c1:7a:4f:f9:66:
df:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3E:C3:1D:67:FC:12:B9:67:C1:52:D6:92:46:7C:31:10:DA:C4:F1
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/nz7DHWf8ErlnwVLWkkZ8MRDaxPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.241.0/24
Signature Algorithm: sha256WithRSAEncryption
20:8d:45:4c:1e:a6:ad:74:14:19:6a:81:55:e5:e9:15:de:63:
04:3c:52:f2:d4:9f:27:6e:dc:bc:d1:cd:f6:7f:ca:64:b4:10:
04:d7:9b:d8:5b:99:97:d6:8f:6a:f8:41:fa:87:73:26:60:f9:
27:ba:a4:bd:a6:60:dd:8e:0e:ae:91:d1:60:8e:f9:bb:5c:d7:
a0:33:f0:b4:59:87:50:e2:15:d2:6c:fc:81:35:24:e3:56:93:
9b:14:fc:91:9c:59:f0:1b:b5:f3:26:b8:f6:10:a5:2f:61:d7:
b7:84:b9:57:77:8e:97:43:c4:90:e5:cb:d9:ab:6d:f8:87:52:
9e:9b:df:30:b9:16:4b:41:07:96:15:3a:75:ba:90:65:70:63:
15:c1:ed:18:7e:f2:47:42:1c:9f:49:bf:fd:11:dd:9a:14:26:
0c:65:55:dc:eb:8a:62:d4:14:6e:8e:bf:a2:3d:6a:25:ea:df:
a3:bf:41:36:6a:3d:d4:45:09:ca:67:d2:fe:83:f5:8a:f4:9e:
48:39:d9:06:db:11:3c:18:5e:7d:a2:9c:28:a7:f3:2c:36:36:
d1:ab:33:b5:f1:29:f6:49:29:d6:fa:5c:4f:2c:06:88:64:98:
02:6e:4e:e0:3d:3b:ac:c6:8e:7f:7e:d3:7f:b2:ec:7d:09:0b:
54:90:64:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 05:45:45 2024 by rpki-client on console.sobornost.net