Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3LK3wS7FXqrWtxH38n6FD6G8WLQ.roa
File: 3LK3wS7FXqrWtxH38n6FD6G8WLQ.roa (raw, json)
Hash identifier: WW5NRBrlLGYd9x9Ms15PcZG/yuoeni7cmVICknLIzB4=
Subject key identifier: DC:B2:B7:C1:2E:C5:5E:AA:D6:B7:11:F7:F2:7E:85:0F:A1:BC:58:B4
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 425D25AB
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3LK3wS7FXqrWtxH38n6FD6G8WLQ.roa
Signing time: Sat 01 Jan 2022 14:03:03 +0000
ROA not before: Sat 01 Jan 2022 14:03:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20836
IP address blocks: 192.121.47.0/24 maxlen: 24
192.121.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1113400747 (0x425d25ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcb2b7c12ec55eaad6b711f7f27e850fa1bc58b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:00:77:bc:ab:d3:f2:12:68:1f:2b:19:53:
62:8b:2c:8e:94:93:d4:0c:63:a3:2f:c4:ae:8c:0a:
1a:55:2c:e0:1a:40:4b:db:a8:20:5f:ec:5b:9f:db:
df:db:29:13:70:04:74:48:8f:87:0c:5d:4e:5a:7e:
8f:fc:8a:2f:d1:fe:4d:41:0c:10:d7:f8:35:41:37:
23:b3:81:13:ca:53:29:76:00:5a:73:de:a5:9b:6f:
1a:9d:e2:50:d1:77:22:12:66:ca:c4:91:a5:65:94:
88:6c:d3:69:be:cd:2b:ee:c9:cb:54:e9:ae:a9:ed:
5f:58:29:4d:b8:0c:11:f5:58:62:3f:9e:d4:17:bc:
ec:55:e1:c6:6e:64:50:02:10:50:0e:b2:d6:85:b9:
ee:1d:f5:42:6a:85:6e:0d:6a:06:c2:36:1e:65:98:
84:c7:3a:16:11:79:9b:81:bc:6d:f6:c6:0d:0d:d7:
21:a6:f8:68:68:f6:d0:90:40:e9:4f:81:21:9c:95:
cf:10:36:67:2a:fc:1d:16:4e:36:8f:5a:24:32:4e:
2e:fc:cf:ae:12:98:83:a8:ba:9c:de:12:eb:df:bc:
46:ea:a7:82:47:db:2b:81:7d:08:50:68:c4:cb:41:
1f:df:a4:42:ab:71:97:99:66:d4:ea:98:f5:a6:75:
73:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B2:B7:C1:2E:C5:5E:AA:D6:B7:11:F7:F2:7E:85:0F:A1:BC:58:B4
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3LK3wS7FXqrWtxH38n6FD6G8WLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.46.0/23
Signature Algorithm: sha256WithRSAEncryption
38:91:00:4d:02:ea:96:a7:3e:f2:ad:81:6e:4d:a9:64:69:0e:
68:53:5b:df:cd:df:d7:b2:8d:10:8c:51:a0:13:93:ce:bd:c2:
40:2e:d1:43:03:a4:5c:26:92:7a:ab:25:19:a9:0d:6f:22:cd:
96:33:93:f2:43:be:31:96:84:25:64:4e:7d:e8:29:15:b4:36:
ef:ef:e2:b3:d2:f4:3b:55:4f:fc:9e:87:99:f8:40:db:ec:0a:
cb:8b:a7:fe:00:02:74:d4:a6:31:32:e9:e1:13:b6:63:32:12:
9c:7f:78:97:04:22:59:e1:22:fa:95:10:d0:ad:de:01:a9:94:
73:f5:99:20:f5:07:2e:c7:7c:95:ec:f9:a6:22:17:f5:b6:bf:
50:57:8c:98:fb:25:9d:d8:ac:18:e1:73:33:f8:da:11:d4:12:
9d:c5:f2:c4:85:25:dd:4a:fa:fd:2b:4a:03:28:1f:f9:bb:0b:
d1:16:ef:b2:21:9d:8c:10:53:30:0b:ec:59:d6:0c:15:0e:14:
27:cb:4b:10:03:e2:ec:08:15:46:e8:f3:93:05:e8:a1:07:18:
7b:cd:39:12:db:c5:36:5f:12:3a:bf:89:1a:e8:0a:d3:f9:ae:
0b:d5:ea:d2:11:62:ea:fa:ad:dc:b0:1c:d5:08:70:9e:4c:24:
dc:9c:c5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:55:56 2025 by rpki-client