Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/39fUuCnFT7cTABTgq6zc01HOpLQ.roa
File: 39fUuCnFT7cTABTgq6zc01HOpLQ.roa (raw, json)
Hash identifier: JOWN8uCv/zIpBArH1ipf8PbLhO7/vxAkespZTPEA53c=
Subject key identifier: DF:D7:D4:B8:29:C5:4F:B7:13:00:14:E0:AB:AC:DC:D3:51:CE:A4:B4
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAF8C044CDF24C23868580C6DCC6D6
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/39fUuCnFT7cTABTgq6zc01HOpLQ.roa
Signing time: Sun 01 Jan 2023 10:05:19 +0000
ROA not before: Sun 01 Jan 2023 10:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57602
IP address blocks: 194.71.213.0/24 maxlen: 24
194.71.212.0/24 maxlen: 24
194.71.214.0/24 maxlen: 24
193.180.239.0/24 maxlen: 24
193.180.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:f8:c0:44:cd:f2:4c:23:86:85:80:c6:dc:c6:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfd7d4b829c54fb7130014e0abacdcd351cea4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d5:d6:52:b9:eb:bf:8e:54:6a:3d:0a:f6:72:
cb:38:a6:37:9b:48:49:95:f8:46:ec:eb:26:0a:b0:
fd:da:00:f0:c1:ec:bc:17:27:72:07:0d:65:82:8b:
a9:a5:71:8e:3b:46:ef:bc:74:6a:50:38:80:04:5f:
e3:ff:27:3c:82:75:fb:33:e3:88:e8:e2:f3:28:8e:
db:1c:3f:69:79:6f:2b:35:95:b9:da:19:9a:40:79:
d1:1d:b8:9a:d2:7f:0c:89:e3:dc:47:18:0f:a2:03:
c7:03:f5:75:a2:8f:75:b3:d4:20:96:63:51:56:8a:
b5:c2:83:43:5a:29:31:d0:fb:60:4e:24:a7:a7:d0:
70:47:97:67:00:ad:78:68:e0:98:aa:f3:49:18:c3:
9d:0c:17:7f:27:af:00:d8:b0:95:e0:cb:8d:47:67:
88:d4:72:ac:ee:6c:b9:c9:90:8f:75:ff:89:04:8f:
9d:2d:b6:70:e1:8a:c3:b8:b2:eb:ad:52:f4:20:a0:
02:e0:a3:50:69:94:a9:39:18:98:6c:d3:84:45:45:
05:45:5d:70:43:65:0e:57:20:fe:06:51:2c:7d:f8:
f4:f9:49:fd:69:a9:e2:4f:b5:dc:90:85:24:8b:3c:
de:8e:cc:fe:50:34:c5:c6:3b:77:3e:8b:a0:8f:5d:
5d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D7:D4:B8:29:C5:4F:B7:13:00:14:E0:AB:AC:DC:D3:51:CE:A4:B4
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/39fUuCnFT7cTABTgq6zc01HOpLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.238.0/23
194.71.212.0-194.71.214.255
Signature Algorithm: sha256WithRSAEncryption
59:ec:d0:a0:45:40:83:ef:76:89:0b:af:dd:1c:88:52:e6:e7:
87:80:95:70:d5:44:ad:ac:17:21:e1:10:c9:46:3f:af:bc:e0:
42:55:a3:bb:1d:bc:42:96:a1:71:54:84:fc:4c:77:9d:f0:49:
23:91:54:a7:ec:0a:91:ac:72:81:ec:3d:84:82:d4:51:85:9d:
74:d9:c4:40:8e:99:1e:3a:6c:ab:3f:37:53:4b:01:72:ae:31:
49:de:d1:50:64:a3:9c:b1:c1:6c:20:d9:55:f6:08:39:7f:61:
7e:7c:c6:a7:0f:c7:3f:02:2c:74:da:1b:15:ee:a8:b6:32:d2:
ab:35:fa:3e:39:b7:92:d2:5e:9e:23:76:d7:82:7b:c6:14:12:
a1:5e:50:46:cb:f2:95:83:3d:87:f1:17:33:c3:34:47:3c:b1:
1a:cb:b2:b4:72:d2:34:e0:a3:89:95:fb:7b:43:77:ac:c8:e5:
dd:52:20:5f:20:48:d5:f7:9e:2b:bc:73:d6:fa:6a:25:a3:a3:
5f:88:49:48:20:fb:c9:8e:4e:23:4e:4b:7c:ac:0e:d0:00:36:
c2:5f:ea:2f:b3:d8:27:ab:26:ee:a3:1f:df:db:8b:0b:a2:ba:
0f:27:4c:d8:40:13:23:11:cd:c7:f5:2d:f5:80:2a:5e:f9:bf:
be:f2:a8:33
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:23 2025 by rpki-client