Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/w9Z-5nLehvUlBeOI2h5dSoEBLSw.roa
File: w9Z-5nLehvUlBeOI2h5dSoEBLSw.roa (raw, json)
Hash identifier: dyC69X2s5yoLrmCLq7pBQHExLj0vbp1A/uwW5wlqEug=
Subject key identifier: C3:D6:7E:E6:72:DE:86:F5:25:05:E3:88:DA:1E:5D:4A:81:01:2D:2C
Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Certificate serial: 0194221F3E7676D6ADFD46D66FE92B17AE43
Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/w9Z-5nLehvUlBeOI2h5dSoEBLSw.roa
Signing time: Wed 01 Jan 2025 13:47:40 +0000
ROA not before: Wed 01 Jan 2025 13:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198785
IP address blocks: 141.138.12.0/24 maxlen: 24
141.138.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:3e:76:76:d6:ad:fd:46:d6:6f:e9:2b:17:ae:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Validity
Not Before: Jan 1 13:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3d67ee672de86f52505e388da1e5d4a81012d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:95:0a:b6:e5:ac:0b:af:8a:66:a8:3f:70:
d4:92:45:25:ef:c0:4f:ab:a0:77:33:b0:e9:43:3b:
6d:bb:38:8c:99:7e:d8:c4:e5:ba:69:98:fa:31:b2:
e5:a3:e0:b7:db:03:e5:38:74:c6:0b:5f:92:e6:14:
58:60:7e:05:bb:74:e9:0d:f5:05:32:27:ea:1d:3f:
b6:d1:67:78:2d:2d:8b:6d:4c:6c:2c:62:42:54:ff:
29:ce:71:8a:f9:7e:c8:97:aa:cc:92:ac:49:c3:bd:
79:04:2c:f4:4d:d6:8c:15:0b:d9:85:fa:f7:42:42:
e9:0f:12:91:17:e8:2e:a9:0b:44:12:9d:b7:c3:b3:
37:34:ae:22:77:bb:82:52:65:1f:79:3e:1b:81:f7:
10:9d:23:bf:b3:f4:6f:a6:3e:3e:3c:ed:02:30:21:
4f:55:62:d1:0e:50:38:97:d0:80:2a:33:2e:ff:15:
1f:5e:f2:ae:ed:b9:e7:62:f7:c0:f8:0c:b0:de:b4:
a4:44:c8:d1:ee:d0:b4:d0:0c:7b:36:f3:6c:d7:ef:
11:14:67:b0:65:a8:22:5c:6e:99:e6:a8:87:c8:d7:
2f:b3:6f:eb:a1:50:e1:99:67:f5:73:25:fb:bf:a1:
47:a5:42:42:52:d9:bb:4a:11:e2:ee:2f:9c:60:20:
e3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D6:7E:E6:72:DE:86:F5:25:05:E3:88:DA:1E:5D:4A:81:01:2D:2C
X509v3 Authority Key Identifier:
keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/w9Z-5nLehvUlBeOI2h5dSoEBLSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.138.12.0/24
141.138.14.0/24
Signature Algorithm: sha256WithRSAEncryption
40:0f:bb:89:62:84:35:6a:d1:89:96:b5:10:bf:b1:e5:1c:46:
a4:db:39:1b:59:0b:d5:c2:4f:df:22:9d:f8:39:05:ed:70:18:
7a:3c:2c:bf:14:b4:4c:44:3a:60:d7:c2:d6:c5:ab:87:71:d7:
3a:d0:d5:71:8b:b2:8e:c0:2c:61:ea:3f:31:cf:bb:45:a4:1c:
3c:c8:60:2e:5b:36:22:10:61:d9:71:87:78:84:d3:20:5a:f7:
44:e6:51:40:d1:d2:a4:55:a5:72:ab:a1:9f:30:65:c1:c2:85:
0a:8f:ec:88:89:12:43:e8:04:5f:02:0c:74:7a:f4:ee:c4:2f:
54:e3:0a:50:0b:6a:e2:67:fc:da:92:de:39:32:ca:93:97:2c:
b7:12:9d:97:ec:b5:cb:4b:1c:75:ba:2f:5b:23:2a:e4:b7:21:
a7:3c:45:6f:0b:46:06:b6:9a:11:e7:61:94:65:6d:ee:9a:8e:
a8:e1:46:b0:1b:9c:b6:6a:4b:e7:7c:71:c3:7b:f1:89:00:41:
cb:27:e9:42:7a:e8:07:9f:9a:e8:79:51:39:42:52:b8:ad:8a:
b6:49:23:13:c2:ee:d1:73:26:15:25:fe:ea:8e:6f:37:10:62:
72:c8:c8:59:b3:10:a4:0a:12:7c:e5:0e:6d:e2:94:fa:73:cf:
9e:94:11:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:53:17 2025 by rpki-client