Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BTlptyGOkVTjAZJqWoI0zCNzP-w.roa
File: BTlptyGOkVTjAZJqWoI0zCNzP-w.roa (raw, json)
Hash identifier: HhnOvo6j7dRXdXX6/bGxNbKiTolwMXi2+lpGfTZw4Co=
Subject key identifier: 05:39:69:B7:21:8E:91:54:E3:01:92:6A:5A:82:34:CC:23:73:3F:EC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824D2DC40AB4DB34736E541DFC6EEA4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BTlptyGOkVTjAZJqWoI0zCNzP-w.roa
Signing time: Thu 02 Jan 2025 17:51:29 +0000
ROA not before: Thu 02 Jan 2025 17:51:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215987
IP address blocks: 141.98.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:d2:dc:40:ab:4d:b3:47:36:e5:41:df:c6:ee:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=053969b7218e9154e301926a5a8234cc23733fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:21:a0:a0:85:d7:a7:7a:24:78:f0:23:05:1e:
96:bc:9c:3a:24:a7:b8:82:8e:d1:89:72:d1:1e:7e:
f6:07:f1:1a:81:f5:ef:08:d6:71:b5:eb:f7:16:66:
8d:90:fb:f6:a3:8b:18:05:a2:48:df:81:f5:82:f1:
bb:c5:fa:82:9b:85:63:2e:9b:39:6a:1b:85:5f:38:
2e:3e:1a:ca:ad:f9:dc:d6:e8:c4:50:69:f6:62:9b:
b7:9e:af:17:aa:c3:d5:dd:48:a2:8d:91:73:15:0d:
17:e8:aa:23:70:4e:22:e3:df:68:7c:88:1a:31:fe:
33:0a:d4:17:0d:55:ca:ac:91:a9:47:b3:1e:9d:81:
c8:20:c9:27:6f:78:9c:e0:22:d2:59:57:39:db:57:
32:9d:65:2c:7a:ea:57:0a:15:fe:b9:37:e3:a4:15:
6f:0e:c4:c2:d5:3b:19:d8:f5:ff:2c:a4:ba:21:1e:
3e:a5:b5:f3:85:bc:60:c4:ba:be:d9:09:5a:11:5a:
25:3e:73:14:f5:34:e0:0b:3c:65:e8:d2:9e:ed:6c:
a3:c1:5e:6a:7c:a8:3b:78:96:4f:c7:09:40:07:a1:
7a:6d:cd:db:54:80:fd:8d:bc:c8:d1:f2:22:4a:f7:
95:f0:07:83:cd:1d:e9:80:00:09:ea:f4:ee:76:50:
8b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:39:69:B7:21:8E:91:54:E3:01:92:6A:5A:82:34:CC:23:73:3F:EC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BTlptyGOkVTjAZJqWoI0zCNzP-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.7.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ac:57:49:52:bc:a3:5f:ad:06:05:0c:92:ea:a3:5a:a7:db:
cf:e4:0f:29:60:9e:84:ad:46:49:b4:fa:6a:8e:0c:e6:73:8e:
92:c2:05:08:fd:34:96:8f:73:5f:f7:7e:40:b2:f0:a9:04:d1:
ef:d0:81:f0:34:fa:76:ab:56:88:4f:fa:00:e6:95:68:5c:c2:
fa:7c:1a:70:77:c0:93:f9:24:19:1d:7d:38:74:c0:0d:d7:cd:
a2:9e:a7:be:83:67:6a:cd:7f:95:15:d7:6d:c6:58:b8:ef:29:
41:6d:53:f4:7c:7b:55:9c:a3:8f:92:2c:8e:ca:ab:43:58:f2:
23:a5:79:a5:b4:81:2d:36:bd:3f:92:88:b1:c9:44:31:2d:e4:
24:2b:b6:27:41:41:aa:b3:8b:0d:54:d6:c4:d7:c1:17:8b:c4:
52:84:76:85:18:56:c1:75:bd:62:42:83:61:bb:16:a6:e8:f9:
17:44:92:41:ef:1d:70:37:3e:2a:04:90:71:74:2c:ea:b8:55:
48:5d:53:25:ea:e3:b2:4b:4e:b2:d0:b8:66:1f:2f:a4:9d:02:
a2:11:d2:8f:fb:d8:80:83:33:d9:fa:00:c8:70:1a:ff:da:17:
84:e8:e3:5d:cd:ad:05:d7:21:68:ef:bf:31:7f:6a:5d:81:e2:
c1:e3:51:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJNLcQKtNs0c25UHfxu6kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTAyMTc1MTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTM5NjliNzIxOGU5MTU0ZTMwMTkyNmE1YTgyMzRjYzIzNzMzZmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSGgoIXXp3okePAjBR6WvJw6JKe4
go7RiXLRHn72B/EagfXvCNZxtev3FmaNkPv2o4sYBaJI34H1gvG7xfqCm4VjLps5
ahuFXzguPhrKrfnc1ujEUGn2Ypu3nq8XqsPV3UiijZFzFQ0X6KojcE4i499ofIga
Mf4zCtQXDVXKrJGpR7MenYHIIMknb3ic4CLSWVc521cynWUseupXChX+uTfjpBVv
DsTC1TsZ2PX/LKS6IR4+pbXzhbxgxLq+2QlaEVolPnMU9TTgCzxl6NKe7WyjwV5q
fKg7eJZPxwlAB6F6bc3bVID9jbzI0fIiSveV8AeDzR3pgAAJ6vTudlCL1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAU5abchjpFU4wGSalqCNMwjcz/sMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvQlRscHR5R09rVlRqQVpKcVdvSTB6Q056UC13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWIHMA0G
CSqGSIb3DQEBCwUAA4IBAQA0rFdJUryjX60GBQyS6qNap9vP5A8pYJ6ErUZJtPpq
jgzmc46SwgUI/TSWj3Nf935AsvCpBNHv0IHwNPp2q1aIT/oA5pVoXML6fBpwd8CT
+SQZHX04dMAN182inqe+g2dqzX+VFddtxli47ylBbVP0fHtVnKOPkiyOyqtDWPIj
pXmltIEtNr0/koixyUQxLeQkK7YnQUGqs4sNVNbE18EXi8RShHaFGFbBdb1iQoNh
uxam6PkXRJJB7x1wNz4qBJBxdCzquFVIXVMl6uOyS06y0LhmHy+knQKiEdKP+9iA
gzPZ+gDIcBr/2heE6ONdza0F1yFo778xf2pdgeLB41H4
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:06:01 2025 by rpki-client