Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/2XEnzLHEVlXMas87XDTNJhfR-4A.roa
File: 2XEnzLHEVlXMas87XDTNJhfR-4A.roa (raw, json)
Hash identifier: z/XqhhBzN1ocQLunrCrSA5VfNoUgw7O/rScqkCCsdXg=
Subject key identifier: D9:71:27:CC:B1:C4:56:55:CC:6A:CF:3B:5C:34:CD:26:17:D1:FB:80
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 424B9DBD
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/2XEnzLHEVlXMas87XDTNJhfR-4A.roa
Signing time: Sat 01 Jan 2022 14:02:51 +0000
ROA not before: Sat 01 Jan 2022 14:02:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 194.68.123.0/24 maxlen: 24
194.68.128.0/24 maxlen: 24
194.68.130.0/23 maxlen: 23
194.68.133.0/24 maxlen: 24
194.68.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1112251837 (0x424b9dbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:02:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d97127ccb1c45655cc6acf3b5c34cd2617d1fb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:dd:e0:68:16:85:7c:90:d5:10:bb:5d:4e:
f1:6a:a3:33:60:c0:3f:6a:94:4e:e7:0c:84:e2:61:
b4:ed:47:ed:0b:43:ba:cd:20:48:ff:63:94:5f:7b:
93:5c:a7:88:ad:84:28:3d:69:2f:9f:d9:a1:15:1c:
5f:0a:74:80:6b:08:f2:5c:de:5f:94:a8:c0:82:34:
b8:54:53:13:37:93:e7:ff:6f:de:02:29:a9:b6:e8:
4f:2d:f4:c8:10:0a:5b:83:e5:84:b5:e7:36:c9:d2:
fc:16:6e:46:5c:33:7d:1a:fb:08:c2:56:39:c5:b2:
ca:b7:a1:33:3c:89:ab:42:97:ef:49:dc:26:64:4b:
93:53:0a:13:cb:6d:34:e4:08:c4:45:26:88:d9:dc:
4c:9e:25:40:4e:59:f1:18:64:50:a7:eb:91:a8:c3:
39:6f:4b:44:75:f3:57:fc:db:43:0a:fe:bd:29:c2:
f9:a7:29:18:1d:03:9f:1c:98:f5:1b:68:65:ef:11:
15:02:a9:ef:3e:fb:ae:0e:25:b2:62:b9:65:2b:14:
b0:5c:7f:7e:3b:1a:0f:86:53:3b:ab:9d:2f:b3:52:
a1:1a:82:4b:02:52:90:cc:64:08:1f:81:59:cd:fc:
44:be:7b:c4:13:02:ed:96:2c:9e:27:6e:51:9f:ab:
cf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:71:27:CC:B1:C4:56:55:CC:6A:CF:3B:5C:34:CD:26:17:D1:FB:80
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/2XEnzLHEVlXMas87XDTNJhfR-4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.68.123.0/24
194.68.128.0/24
194.68.130.0/23
194.68.133.0/24
194.68.135.0/24
Signature Algorithm: sha256WithRSAEncryption
99:d6:98:3a:42:1a:c0:3f:92:30:a5:f9:9f:18:5b:fb:70:10:
d4:48:43:10:d8:12:f6:9a:f0:bc:05:eb:89:80:17:64:72:a1:
90:d5:84:bc:c8:1f:34:e5:5c:99:50:14:29:4f:24:f2:66:54:
f2:25:16:df:46:22:4c:16:20:ee:eb:0b:4e:cb:6c:f4:3a:61:
22:53:91:52:23:6a:c3:17:10:2a:68:5e:25:27:fb:36:64:ac:
0f:69:c1:50:bd:83:63:8f:d1:23:fe:61:b1:ed:eb:0a:9e:14:
e8:cf:dc:4d:b4:d4:e8:e2:04:63:e6:e4:da:c6:76:6d:01:47:
67:92:f5:82:7e:9f:ea:ad:19:22:a3:15:ec:ec:59:4e:71:89:
af:b9:aa:5b:92:61:be:21:ab:73:67:5a:50:cd:67:1e:06:36:
f7:25:cd:d1:cc:c8:b7:0c:f2:28:68:c1:26:ff:dd:a7:90:2c:
2b:8c:ce:41:39:9b:f2:ea:28:dd:25:52:10:a5:61:5d:68:7c:
19:38:e0:9e:64:b7:c8:bc:8d:05:8c:3a:89:6d:88:44:f1:fe:
6e:7e:f6:22:ca:78:41:68:b7:59:4d:e7:d0:8e:1d:04:e6:5a:
e8:a1:f1:cd:eb:38:f9:cc:5e:4e:3f:76:a6:fd:4a:c4:ba:2c:
61:5f:ae:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:53 2025 by rpki-client