Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/rKCFva5BURgPwYBY7AhhhAP1WfI.roa
File: rKCFva5BURgPwYBY7AhhhAP1WfI.roa (raw, json)
Hash identifier: yPJLL1iPDAh4jC5sDkvBCraLd8BwdjLiqxgvyLndKHU=
Subject key identifier: AC:A0:85:BD:AE:41:51:18:0F:C1:80:58:EC:08:61:84:03:F5:59:F2
Certificate issuer: /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial: 0194258FBE2BB6366D169F188AD944BD2326
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/rKCFva5BURgPwYBY7AhhhAP1WfI.roa
Signing time: Thu 02 Jan 2025 05:49:24 +0000
ROA not before: Thu 02 Jan 2025 05:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211286
IP address blocks: 141.39.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:be:2b:b6:36:6d:16:9f:18:8a:d9:44:bd:23:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Validity
Not Before: Jan 2 05:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aca085bdae4151180fc18058ec08618403f559f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:73:b6:9b:b8:33:16:d7:f9:82:1d:50:eb:58:
f1:ca:dc:51:ab:f1:4f:83:e9:9c:ab:92:37:5e:51:
b7:72:79:ed:5e:15:bb:90:fa:04:ac:0d:2d:9b:8b:
35:fa:07:0b:21:3e:b4:c5:be:6e:76:c2:4e:60:76:
7a:7d:c4:9c:31:88:a2:9d:82:92:84:58:e3:82:7a:
31:0d:23:1f:b4:91:bb:16:43:16:f7:95:76:55:84:
89:17:62:b8:fb:35:64:34:7a:18:e0:9d:92:00:c5:
07:a5:5c:9b:a7:14:34:4b:09:81:06:f7:99:07:f3:
5f:c9:8d:e7:51:e6:61:29:85:bd:34:a2:2f:f9:3a:
06:86:84:ec:ec:bb:24:17:83:a1:af:ee:48:e1:75:
bf:76:13:e2:5c:cd:33:e5:22:60:24:7f:df:7a:3f:
9d:f2:5c:50:17:71:8e:00:37:de:39:8d:fb:be:c4:
d2:76:64:e7:27:69:9d:8a:cc:3f:87:40:84:1d:ca:
55:60:61:45:35:4b:ef:23:1b:69:e0:28:e4:58:f5:
ea:7f:d1:61:b4:73:cb:ef:c1:9a:bd:27:42:7b:2b:
61:5c:9e:be:a6:93:a3:a9:8c:9a:21:e9:70:aa:1b:
b2:04:32:bc:4f:45:1e:5b:22:c5:cc:66:d9:f0:2b:
05:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A0:85:BD:AE:41:51:18:0F:C1:80:58:EC:08:61:84:03:F5:59:F2
X509v3 Authority Key Identifier:
keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/rKCFva5BURgPwYBY7AhhhAP1WfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.39.220.0/22
Signature Algorithm: sha256WithRSAEncryption
75:aa:4d:55:67:bc:c5:2d:77:8c:08:cb:ca:85:18:77:f5:a8:
ee:ef:13:2e:14:e3:63:3b:0c:37:b0:16:a9:e6:72:4f:36:d2:
24:85:08:aa:4a:5f:34:c0:b2:a9:07:b9:b8:ba:5a:bf:2a:f7:
6e:1f:af:e6:ca:08:7b:df:2f:c3:3b:7b:69:71:c8:16:d7:0c:
8a:a5:55:57:12:38:c8:34:95:49:6f:7c:6c:84:3a:5a:d0:96:
46:4c:23:db:8f:84:17:69:27:7c:78:67:46:4a:38:8e:03:17:
f5:c0:96:fa:95:f9:fb:fb:b8:9f:62:49:1d:31:4d:e2:0d:59:
1e:2c:c1:78:1c:12:1d:42:ae:60:48:83:94:a1:fd:48:21:41:
dd:32:fd:ed:8e:2d:d1:bb:c6:ae:dc:4b:73:29:f3:fb:9d:79:
fc:22:6a:e7:9e:28:00:1f:b8:cd:16:01:de:57:c3:3c:28:4b:
b7:c3:cb:30:7a:dd:9a:bb:ff:db:5f:1d:b8:c6:10:ee:33:a1:
78:1d:83:15:82:cb:f0:06:1f:a3:64:af:03:e0:c0:18:9f:93:
62:10:bf:3e:4d:b0:79:cb:fc:0b:6a:bb:17:c5:f2:9d:7b:3a:
aa:68:83:0e:57:3f:08:cf:79:20:df:3e:a9:b7:46:09:d8:b1:
c1:79:e8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 03:07:13 2025 by rpki-client