Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/zozOOHZMPpO8TU7R7OlzFjX6nTU.roa
File: zozOOHZMPpO8TU7R7OlzFjX6nTU.roa (raw, json)
Hash identifier: DO9vuDN/M4q7UhQA8k+ziHqB7tX/m/+CIduSaenQLlY=
Subject key identifier: CE:8C:CE:38:76:4C:3E:93:BC:4D:4E:D1:EC:E9:73:16:35:FA:9D:35
Certificate issuer: /CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Certificate serial: 0194221F985AD16A90406CD68B76DB11E461
Authority key identifier: 94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/zozOOHZMPpO8TU7R7OlzFjX6nTU.roa
Signing time: Wed 01 Jan 2025 13:48:03 +0000
ROA not before: Wed 01 Jan 2025 13:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209560
IP address blocks: 141.98.64.0/23 maxlen: 23
141.98.66.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:98:5a:d1:6a:90:40:6c:d6:8b:76:db:11:e4:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Validity
Not Before: Jan 1 13:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce8cce38764c3e93bc4d4ed1ece9731635fa9d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3a:88:91:0f:e0:1d:ea:89:a8:8d:4d:1f:a4:
41:55:df:ad:b7:4c:78:56:e8:be:c9:2a:00:19:06:
aa:6a:83:7a:6f:11:31:49:9f:26:ef:2b:df:f9:3a:
46:4e:f0:f9:14:e8:52:48:ec:6f:ab:d4:7e:31:be:
e6:86:ca:42:66:46:dd:1b:a1:25:25:ac:9f:b7:8e:
48:cd:9e:e4:9d:c2:8f:f3:1e:b2:9b:b7:ad:18:9f:
2b:a9:69:31:8e:66:fe:f7:12:42:9b:8e:86:f8:3b:
62:21:d1:ca:3d:2a:e7:98:54:3f:b1:0e:88:c6:dc:
29:9e:d0:09:2d:f9:bb:7c:03:9f:c2:0b:73:aa:82:
7e:9a:22:e0:63:27:99:ee:67:89:b8:6c:87:c7:1a:
36:4c:c0:af:21:58:2a:66:e8:90:2f:3e:3c:2f:dd:
c3:8b:02:01:05:37:ab:b1:13:95:83:48:07:42:7f:
29:59:cc:9c:97:1c:36:da:c2:57:a5:90:89:1b:a7:
44:fe:8e:0e:11:d3:55:83:b8:e1:0c:df:ca:56:dc:
9f:85:82:6c:ea:df:cc:71:0d:76:b2:82:d8:55:2b:
7d:27:96:40:9a:4c:0c:c1:20:ec:26:32:04:4d:7c:
96:f1:15:d5:8e:d4:46:4d:34:98:12:22:17:b8:2b:
b4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8C:CE:38:76:4C:3E:93:BC:4D:4E:D1:EC:E9:73:16:35:FA:9D:35
X509v3 Authority Key Identifier:
keyid:94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/zozOOHZMPpO8TU7R7OlzFjX6nTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.64.0/22
Signature Algorithm: sha256WithRSAEncryption
28:13:c5:6b:ef:9f:3b:69:96:d4:87:c5:67:33:67:8e:66:ed:
ce:79:b4:95:f9:57:8f:83:7b:48:16:f0:93:0b:94:27:53:1f:
cf:f0:9e:d5:da:3f:26:e8:ff:da:94:50:67:b3:41:3f:03:89:
92:e7:26:04:59:3c:c0:1f:b0:1d:23:2e:6a:7e:16:69:39:6e:
4f:5e:0f:4b:80:07:29:9d:71:31:bd:76:bc:7a:34:25:be:56:
be:03:1a:02:73:1b:a7:b0:37:75:29:67:7f:6f:84:66:6f:5b:
05:96:24:bf:dd:bb:99:23:6f:6e:88:b1:93:6b:70:2c:2f:6b:
c9:e6:9c:ea:d8:34:c7:f1:03:e5:a9:b5:d4:f6:51:72:e4:d3:
25:aa:89:c7:3d:51:65:9f:2e:54:a0:6f:69:97:03:1f:9c:de:
7c:49:49:de:cf:95:43:d0:7e:7c:98:bd:af:21:cb:41:e3:5d:
4e:b5:0e:31:2e:ac:8e:88:3b:83:78:e3:7a:47:30:e3:6e:ad:
de:5b:3c:55:04:d7:e7:07:cd:24:4d:e4:12:41:ab:fe:15:6e:
42:c8:b0:e8:b2:83:dc:63:25:02:49:8a:42:30:c3:86:8b:09:
03:ca:b3:2c:05:e4:09:d9:d4:86:b5:28:f2:ba:7d:85:13:fa:
64:41:b9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:59 2025 by rpki-client on console.sobornost.net