Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/16PMvyBjwLMgKpIOkxrHYliD-08.roa
File: 16PMvyBjwLMgKpIOkxrHYliD-08.roa (raw, json)
Hash identifier: Y3LQq9IlsGjKrSV01GWpHO25wmy0HId5ENMWGwyBnEU=
Subject key identifier: D7:A3:CC:BF:20:63:C0:B3:20:2A:92:0E:93:1A:C7:62:58:83:FB:4F
Certificate issuer: /CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Certificate serial: 019421444657887911242B0D6EA99B35F2B0
Authority key identifier: 70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/16PMvyBjwLMgKpIOkxrHYliD-08.roa
Signing time: Wed 01 Jan 2025 09:48:30 +0000
ROA not before: Wed 01 Jan 2025 09:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210879
IP address blocks: 185.141.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:46:57:88:79:11:24:2b:0d:6e:a9:9b:35:f2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Validity
Not Before: Jan 1 09:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7a3ccbf2063c0b3202a920e931ac7625883fb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5e:83:3b:f2:d3:e0:bd:25:77:94:8f:1f:ca:
c2:26:6d:54:8d:5b:8b:b3:95:b1:7d:7a:94:a9:fd:
8a:ad:98:c5:5d:08:05:6b:c8:85:5f:48:8c:47:fd:
eb:9b:ae:24:62:9b:66:b7:63:31:7b:08:53:40:7b:
08:2a:5d:ab:61:b4:b1:65:c1:c7:26:b9:32:fc:28:
52:1a:77:9a:18:2e:33:34:df:14:a3:8c:36:c0:63:
2d:15:9f:85:8e:5b:3a:97:99:96:1b:5f:a4:c6:69:
4d:a6:b7:78:b7:30:9f:a7:91:af:a4:8b:1d:0d:4a:
91:8d:2c:ec:3e:e6:07:28:16:2a:79:08:14:b3:22:
9f:8e:d1:8e:f4:59:6a:50:f1:a5:ee:61:eb:93:b8:
c5:1e:9a:64:f5:e1:68:8f:e0:2a:fb:1e:c7:2d:32:
c7:89:f3:93:14:7e:64:90:d7:33:4e:f0:01:b2:cb:
8c:35:ed:55:7e:b2:e2:c4:47:58:db:18:27:a9:6b:
60:ec:81:17:81:fd:db:34:dc:ff:88:9e:63:2c:71:
d7:35:6e:70:5f:b0:2f:d3:0b:a0:2c:a4:37:98:c2:
68:34:ab:3f:88:ac:37:d9:11:d7:78:27:15:4b:24:
e0:69:57:0e:4a:61:cf:a0:01:99:20:68:bb:06:e0:
6b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A3:CC:BF:20:63:C0:B3:20:2A:92:0E:93:1A:C7:62:58:83:FB:4F
X509v3 Authority Key Identifier:
keyid:70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/16PMvyBjwLMgKpIOkxrHYliD-08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.130.0/24
Signature Algorithm: sha256WithRSAEncryption
71:23:60:ae:f6:e5:a8:c1:88:b0:a7:5f:20:8b:a6:71:44:e1:
32:1d:ac:e4:10:87:04:c2:08:3d:81:44:a8:04:97:79:81:6b:
18:71:d9:ab:6a:94:8d:0b:5b:6b:11:44:5f:7c:2f:48:12:49:
c2:34:61:85:21:b1:a2:14:ba:94:b5:3c:5d:4b:81:38:18:e1:
12:3e:cd:50:91:40:21:e5:47:9a:a5:72:22:2e:57:6b:55:27:
a5:e6:f7:3b:2c:1b:d5:9c:ab:26:c5:e5:15:78:ef:20:55:5a:
5d:a0:7d:0e:2c:11:7f:50:b0:2c:ad:96:93:b8:d8:93:56:c0:
b0:75:8a:f6:7f:ea:5e:7f:05:77:a7:2e:4b:e2:fb:bc:ba:75:
61:ed:f2:e8:77:d9:f0:2e:d2:46:be:21:60:a8:f9:56:d5:67:
38:84:f3:62:2f:45:a9:d0:63:7d:11:98:ef:bf:a2:15:3f:a0:
ef:07:4e:e2:22:92:2a:fe:af:54:d7:89:30:a4:9b:bd:ea:3a:
6c:c5:99:fa:fa:19:46:79:bb:86:ba:0d:9a:7d:c8:23:4c:05:
27:19:72:95:18:06:91:e8:25:5b:22:52:82:68:35:43:87:70:
41:45:48:f5:3e:73:ca:a4:51:f3:08:10:01:47:3d:c8:90:8f:
a8:97:0a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:41:48 2025 by rpki-client