Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/2fM0EyU2ofKewEejbGLyl4L1fko.roa
File: 2fM0EyU2ofKewEejbGLyl4L1fko.roa (raw, json)
Hash identifier: UYMYCBtRgU/HR8eNs9fTKWiueTs+A9vi79WHMy7Ml5o=
Subject key identifier: D9:F3:34:13:25:36:A1:F2:9E:C0:47:A3:6C:62:F2:97:82:F5:7E:4A
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194FB0CB9E7998FB9B1A702AC6977904EDF
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/2fM0EyU2ofKewEejbGLyl4L1fko.roa
Signing time: Wed 12 Feb 2025 16:45:02 +0000
ROA not before: Wed 12 Feb 2025 16:45:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32805
IP address blocks: 193.180.174.0/24 maxlen: 24
193.180.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fb:0c:b9:e7:99:8f:b9:b1:a7:02:ac:69:77:90:4e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 12 16:45:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9f334132536a1f29ec047a36c62f29782f57e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ec:8a:3e:6c:1c:3e:58:43:ae:11:93:28:98:
d4:6b:9f:f4:cf:0c:9b:f1:47:84:62:90:77:a5:92:
27:06:e5:29:f9:2e:27:d5:2d:2e:27:0f:54:fd:f9:
83:0f:e2:14:e7:e6:85:25:c9:1c:a3:c6:51:4e:d1:
2c:90:91:9e:01:60:96:89:71:7d:bd:44:ef:51:0f:
30:50:b1:ed:48:73:fb:48:2d:e9:0c:d6:3e:2d:69:
fb:38:55:f6:3a:e7:f1:91:b4:09:98:99:1a:56:aa:
0a:9b:6a:67:72:f9:d9:bf:1e:c6:d4:80:86:19:cd:
b4:9b:90:83:06:62:ef:07:ea:7a:a0:74:25:f5:3c:
8a:a7:cf:6a:57:5e:75:78:b6:56:ac:b5:55:a2:48:
19:5c:bf:8a:8c:92:46:51:1e:37:d1:36:6c:67:ad:
c0:9e:e0:ae:b9:00:12:da:a3:c8:07:4c:68:8c:26:
4b:f1:17:01:12:89:e8:f7:f5:c4:6f:44:7c:87:2a:
40:33:ee:07:58:bc:2a:3d:7d:55:12:3b:b2:15:e3:
14:55:77:8b:23:97:be:99:71:8c:c2:f4:e2:a1:a9:
c9:9e:96:21:eb:ac:7a:2b:92:27:44:04:57:88:e9:
f3:04:d0:71:b4:a6:bd:23:04:8d:5e:ce:39:8a:4d:
a2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F3:34:13:25:36:A1:F2:9E:C0:47:A3:6C:62:F2:97:82:F5:7E:4A
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/2fM0EyU2ofKewEejbGLyl4L1fko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.174.0/24
193.180.255.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:65:55:39:41:32:8f:9e:ce:25:8a:de:a5:68:37:9d:72:4c:
b5:08:ff:0e:51:0a:a2:b2:78:aa:43:8c:98:52:d5:92:08:b9:
46:d4:1d:b2:5c:b3:7d:18:3c:3f:68:01:9e:11:c8:bb:da:f3:
e5:e4:86:7f:8c:e2:76:e0:94:23:ea:54:e7:9f:d2:c7:e8:86:
e8:81:51:13:ea:cd:70:55:d0:51:fd:5e:d4:1d:ee:76:c4:48:
9c:94:4b:b9:87:a9:ce:ca:ec:b9:d9:03:27:fe:7f:73:6b:90:
47:1b:c5:60:2a:17:bd:5f:74:5c:b4:c9:8c:af:ac:0b:25:54:
f9:35:90:53:42:bf:95:ed:18:44:c0:56:0b:7e:3a:cf:36:cb:
3f:d5:c2:38:1a:cd:4f:64:21:c2:6e:8f:f9:c3:4a:e7:09:0b:
41:d9:79:9b:6e:82:fd:db:f1:8e:b3:a3:b0:46:c2:ad:3d:09:
30:5b:e7:5b:04:ae:33:fe:8b:e2:f2:35:73:a2:a1:30:95:e3:
96:14:5b:ba:0b:e0:25:c0:62:59:b4:95:86:7b:db:51:9a:48:
fe:c6:5b:49:23:39:04:19:17:34:92:e9:f7:19:d0:d0:b5:93:
a3:9e:d1:86:bd:cc:dd:f0:fe:b7:fb:62:61:2e:62:9b:3c:76:
5b:12:d7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:24 2025 by rpki-client