Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/dlxx-zeLTbzbzn54-ajvULXtYOI.roa
File: dlxx-zeLTbzbzn54-ajvULXtYOI.roa (raw, json)
Hash identifier: LqrGiNOimgH0FduK6tKJZSZmvOv/ZfPSnFceBYOZ69k=
Subject key identifier: 76:5C:71:FB:37:8B:4D:BC:DB:CE:7E:78:F9:A8:EF:50:B5:ED:60:E2
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0183209B7997CAC820B9590DCE43F8F61850
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/dlxx-zeLTbzbzn54-ajvULXtYOI.roa
Signing time: Fri 09 Sep 2022 04:56:43 +0000
ROA not before: Fri 09 Sep 2022 04:56:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211459
IP address blocks: 193.111.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:20:9b:79:97:ca:c8:20:b9:59:0d:ce:43:f8:f6:18:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Sep 9 04:56:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=765c71fb378b4dbcdbce7e78f9a8ef50b5ed60e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0b:61:2f:b2:9e:17:38:b0:32:34:02:f9:06:
b1:c1:99:71:e1:6b:86:58:41:3a:30:bf:34:42:aa:
b4:3c:f3:fd:35:48:f7:c7:2f:4a:f2:8c:be:bf:78:
bb:87:1d:66:a5:31:01:11:78:36:83:a3:29:b6:3d:
9d:8c:ef:bf:f7:5d:b0:c6:99:32:db:b3:6c:2e:90:
df:54:d9:fc:2c:ac:7b:70:30:a1:33:9e:3c:ad:64:
14:ff:5b:67:87:a8:92:13:6b:62:5f:50:bd:53:35:
29:cc:88:d9:76:0c:5a:4d:b3:29:67:d5:10:4e:b2:
09:fe:5a:b2:c8:6b:fd:38:68:a9:c3:7a:bc:b6:4e:
15:99:a5:38:db:2f:10:43:10:07:93:15:66:b7:4c:
90:15:88:35:95:82:e9:94:2b:f9:85:75:d9:c1:29:
53:2a:b2:5d:da:62:68:b2:7f:59:a7:43:ea:03:76:
e0:28:56:c7:f1:03:c7:2a:17:aa:1a:0e:79:e7:ea:
7a:9b:47:80:54:1d:36:39:b6:ff:6f:d1:d2:42:c2:
36:2d:e7:ba:20:75:56:84:cc:71:31:4c:1d:3f:6f:
0f:0b:0b:8a:92:07:37:63:11:ea:7f:eb:c8:49:23:
ee:41:ba:30:36:d3:4a:5a:83:d1:15:97:8d:d7:70:
33:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5C:71:FB:37:8B:4D:BC:DB:CE:7E:78:F9:A8:EF:50:B5:ED:60:E2
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/dlxx-zeLTbzbzn54-ajvULXtYOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.124.0/24
Signature Algorithm: sha256WithRSAEncryption
87:2b:c9:73:5b:fa:98:71:ea:51:64:95:95:90:3a:6b:06:18:
44:40:a6:1c:1d:9e:8c:f7:bc:79:b3:aa:ac:a1:64:4c:16:cd:
b1:d9:81:ca:8e:c2:b0:c2:1c:f0:32:4e:93:ed:68:1a:f3:a8:
14:20:50:4a:f6:51:f5:49:8f:74:27:30:fb:39:c3:a1:26:20:
50:31:64:11:ae:19:61:fe:7c:0d:e1:fe:40:3c:62:d1:6a:35:
e2:a4:24:ec:f4:8c:ce:16:63:bd:ad:ab:3a:a6:b5:76:77:89:
37:95:9a:fa:b2:27:dd:c3:38:ca:89:bf:ab:95:a3:1e:d6:a4:
ad:99:46:0d:7b:ed:fb:af:7c:29:a1:11:86:b7:0c:93:45:09:
08:c6:37:59:90:f1:a2:38:ac:e0:ab:53:93:1f:be:29:67:43:
11:77:4e:27:8a:d8:29:02:10:05:0c:38:60:98:da:6f:2a:0e:
c4:77:6b:92:3d:92:49:31:9a:90:f0:30:f3:5c:37:c2:be:78:
3b:2b:b9:02:7a:72:6a:40:db:6c:28:64:b7:22:38:ac:bb:0c:
f1:b9:ec:cc:de:fb:84:ca:a0:74:2d:2d:74:0e:0d:b4:7d:be:
71:c5:50:d9:ef:84:ab:f7:da:0e:8f:a1:3c:1d:12:9b:17:1c:
26:f9:aa:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:45 2025 by rpki-client