Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-YzR46CQ8N4EYS8H80AbSn8W5p4.roa
File: 1-YzR46CQ8N4EYS8H80AbSn8W5p4.roa (raw, json)
Hash identifier: VfrMWu1UXpd53Rucl0GPNh7yf5v/WuQlgjHxe4/UdIE=
Subject key identifier: F9:8C:D1:E3:A0:90:F0:DE:04:61:2F:07:F3:40:1B:4A:7F:16:E6:9E
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802DB87B6AB342182E6D0885E8A8EF1
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-YzR46CQ8N4EYS8H80AbSn8W5p4.roa
Signing time: Tue 02 Jan 2024 02:31:19 +0000
ROA not before: Tue 02 Jan 2024 02:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8473
IP address blocks: 193.181.65.0/24 maxlen: 24
194.71.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:db:87:b6:ab:34:21:82:e6:d0:88:5e:8a:8e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f98cd1e3a090f0de04612f07f3401b4a7f16e69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2e:98:75:04:a3:cc:0e:a1:88:1c:44:46:e6:
11:b5:a1:dc:c6:bf:62:ff:b2:6d:a4:60:53:33:75:
08:ec:e8:42:a5:5c:ad:dd:e7:73:f0:91:fa:6b:dc:
b5:b4:6b:76:c5:f1:a7:4d:dd:88:e4:e4:8f:2b:69:
7c:05:98:aa:85:6d:92:41:62:7b:93:d2:d5:b6:2c:
85:5e:1d:38:18:21:88:4a:a9:76:3b:a0:f7:06:fe:
09:1a:e5:6b:8a:eb:87:1f:38:6a:c4:b7:de:79:3c:
7a:3d:4d:ad:1d:63:a7:42:1b:55:c5:d4:3d:63:a9:
44:85:b0:2f:09:d2:fc:58:7f:b1:bd:a2:ef:e5:63:
f8:b3:63:b8:e7:a8:f8:0c:6a:c6:0a:ff:c5:77:59:
1f:39:9f:40:ed:00:a3:6d:cb:cd:a1:c0:5e:cb:a5:
7a:d7:fb:11:bf:13:f4:68:ca:4c:86:c6:00:79:a9:
8b:42:df:5d:98:d1:02:19:c9:5b:a7:b4:e1:df:b7:
da:4f:be:53:b9:52:0d:11:81:90:0c:2f:9c:47:ca:
6b:fd:4c:0c:ba:13:5f:bb:73:e9:1c:b2:5a:48:78:
75:db:43:12:6f:cc:60:79:63:3e:46:ab:2d:d2:09:
68:7a:39:02:37:3c:d7:d8:f3:a0:01:2b:f9:d4:41:
b9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8C:D1:E3:A0:90:F0:DE:04:61:2F:07:F3:40:1B:4A:7F:16:E6:9E
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-YzR46CQ8N4EYS8H80AbSn8W5p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.65.0/24
194.71.215.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:b0:8a:55:8d:99:a3:be:ce:fb:a3:1b:e6:ed:80:44:1d:fd:
0b:a5:2a:ae:36:06:e7:cb:7c:30:fa:2a:4c:c4:b6:a9:e7:ca:
ed:ec:7a:37:77:d6:44:18:f1:d0:55:7d:b0:fb:e3:60:85:ec:
07:eb:18:ae:74:3f:1b:0f:7e:46:43:e2:e7:f7:71:03:7d:2c:
41:cb:b7:93:6a:6b:ad:30:d1:a1:4e:65:f8:73:20:96:cf:c5:
94:50:db:a6:f5:1c:1c:a6:e5:2c:a7:94:a8:88:13:14:19:dd:
fa:5a:a7:19:e7:90:a5:65:51:94:84:d9:8a:7a:3c:d5:f2:0b:
ac:e1:cc:1b:07:e8:ae:28:1c:59:3e:34:49:cd:b9:32:27:a8:
2e:d4:c7:32:96:37:6a:e1:4d:02:64:f3:8f:2b:0e:89:4c:e7:
24:2a:43:62:06:4e:81:3d:a5:33:68:26:94:de:e4:05:1e:9f:
e7:3b:08:c8:22:ac:1b:8f:d1:a1:05:21:72:3a:8a:9b:ea:29:
18:dd:4b:93:ca:e2:6f:84:84:33:ae:c7:2b:90:34:88:60:08:
6a:aa:0a:2c:68:88:c2:b9:df:d2:84:cc:38:ed:05:48:fa:3a:
23:f8:4e:5f:56:c4:fc:bb:e8:32:6a:32:1f:50:0c:73:d8:6d:
c6:3a:56:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:31 2025 by rpki-client